$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer File: EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer (raw, json) Hash identifier: Q7coHzTQElSNTRe7l6v0RTz7aT10MsswPOKqFgihSYQ= Subject key identifier: EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7AF501E5FC0CB157B33D4AE643DCE31F11487CE2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:26:33 +0000 Certificate not after: Sun 02 May 2027 01:31:33 +0000 Subordinate resources: IP: 160.22.198.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f5:01:e5:fc:0c:b1:57:b3:3d:4a:e6:43:dc:e3:1f:11:48:7c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:26:33 2026 GMT Not After : May 2 01:31:33 2027 GMT Subject: CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:51:c3:ef:bc:d9:fa:f1:a3:1a:6f:16:88:d9: da:4e:a7:16:74:f9:cb:6a:49:c2:2a:00:07:a6:06: 8a:e8:43:d4:31:eb:79:13:42:8f:dd:10:02:8b:3b: 6d:3b:52:84:ac:da:51:de:bb:8f:86:b1:43:86:61: a6:a3:b1:cf:9e:7f:58:22:37:4c:83:ab:14:cc:ab: 03:2a:9d:f6:65:59:f4:66:ae:fc:be:25:14:87:42: d5:32:3a:35:70:f7:99:49:2f:c1:d0:00:60:79:27: 5a:10:07:09:ea:44:6e:47:38:30:1c:1f:c1:22:e3: a8:69:8b:08:19:a0:35:15:d8:d4:f1:a9:74:e4:2d: a4:81:e3:51:5a:e6:a0:d4:90:b0:60:cb:54:fe:9f: 69:65:06:7c:d2:7c:f4:31:d2:a5:cc:fc:87:3c:9c: 46:88:7a:40:30:76:d5:e4:80:a7:a7:b7:9f:b3:49: 70:67:9c:22:4e:84:a5:8e:92:98:7b:4d:ba:06:ed: 4b:a7:f1:10:f7:77:53:38:bc:13:3d:9c:f2:56:7e: 5a:49:eb:5f:06:f9:d7:3d:c4:d9:b7:0c:96:0d:78: e2:94:ea:0d:8c:38:24:52:fd:42:a1:9d:ba:fe:b4: ad:f2:1c:21:a5:34:33:19:9c:55:5d:6d:48:83:1b: 7c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.198.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:53:08:3f:5a:96:eb:0f:5f:ed:d0:df:88:7d:8f:cc:cf:dd: 77:86:f2:60:bc:0d:94:49:5d:1c:9a:63:75:ed:cd:3b:f0:43: 45:df:ee:c0:1f:cc:5a:0c:6f:84:3e:58:7d:e8:14:ac:66:7e: a4:4a:c4:8a:42:5b:00:fa:b9:ed:8d:10:28:a4:ce:3d:88:4e: 4f:82:d5:74:54:4c:ff:1d:27:12:2a:76:7f:d1:b5:4d:b4:28: c8:78:c5:ed:07:34:38:83:9a:d0:1e:4c:9a:07:7c:b8:e3:29: 96:35:85:99:0b:d9:aa:2f:eb:89:0d:f8:0f:0a:b1:dc:59:5f: 4a:27:a0:64:02:24:c9:f2:04:34:7f:7e:ce:89:8a:23:ac:91: 8d:11:e0:dc:41:75:7b:ba:c9:5c:71:f7:13:b6:ec:c4:d6:3f: 1e:b9:d7:b3:78:e2:5a:00:48:67:7a:36:2a:4b:de:0b:c0:26: e1:c0:3e:b3:f4:ca:4a:d0:52:10:25:99:59:86:96:5e:9a:a1: d5:cd:09:6f:c2:91:eb:20:4e:a0:67:4c:d4:d3:8b:ba:f5:2f: b1:40:73:63:bc:bb:cc:db:a7:99:99:a6:41:e8:6f:22:50:14: 2f:b6:98:15:d7:ad:5a:50:6f:bd:b9:97:e0:22:ec:2a:2e:12: 57:54:e2:92 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUevUB5fwMsVezPUrmQ9zjHxFIfOIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMjYzM1oX DTI3MDUwMjAxMzEzM1owMzExMC8GA1UEAxMoRUM1QUUzNkRBRjlCREQ3N0U2MjNG QzdDN0Y1QThBMEY2N0ZENzE2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKBRw++82frxoxpvFojZ2k6nFnT5y2pJwioAB6YGiuhD1DHreRNCj90QAos7 bTtShKzaUd67j4axQ4ZhpqOxz55/WCI3TIOrFMyrAyqd9mVZ9Gau/L4lFIdC1TI6 NXD3mUkvwdAAYHknWhAHCepEbkc4MBwfwSLjqGmLCBmgNRXY1PGpdOQtpIHjUVrm oNSQsGDLVP6faWUGfNJ89DHSpcz8hzycRoh6QDB21eSAp6e3n7NJcGecIk6EpY6S mHtNugbtS6fxEPd3Uzi8Ez2c8lZ+WknrXwb51z3E2bcMlg144pTqDYw4JFL9QqGd uv60rfIcIaU0MxmcVV1tSIMbfOsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOxa422vm9135iP8fH9aig9n/XFvMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzlmMzBlNGFlLTNlNDctNDU0MC04MjNjLTUzY2FmMjI2N2IzNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85ZjMwZTRh ZS0zZTQ3LTQ1NDAtODIzYy01M2NhZjIyNjdiMzYvMC9FQzVBRTM2REFGOUJERDc3 RTYyM0ZDN0M3RjVBOEEwRjY3RkQ3MTZGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBbGMA0GCSqGSIb3DQEBCwUAA4IBAQBvUwg/WpbrD1/t0N+IfY/Mz913hvJg vA2USV0cmmN17c078ENF3+7AH8xaDG+EPlh96BSsZn6kSsSKQlsA+rntjRAopM49 iE5PgtV0VEz/HScSKnZ/0bVNtCjIeMXtBzQ4g5rQHkyaB3y44ymWNYWZC9mqL+uJ DfgPCrHcWV9KJ6BkAiTJ8gQ0f37OiYojrJGNEeDcQXV7uslccfcTtuzE1j8eudez eOJaAEhnejYqS94LwCbhwD6z9MpK0FIQJZlZhpZemqHVzQlvwpHrIE6gZ0zU04u6 9S+xQHNjvLvM26eZmaZB6G8iUBQvtpgV161aUG+9uZfgIuwqLhJXVOKS -----END CERTIFICATE-----Generated at Tue May 12 22:10:29 2026 by rpki-client