$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer File: ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer (raw, json) Hash identifier: R7qWdmTC0Wp0WDht8V+10diGBKKS1tDk2Sj7eC9woWw= Subject key identifier: EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 54A2B1665C61BA6C07AE931A011E1412FC9AECDA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft caRepository: rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:27:00 +0000 Certificate not after: Sun 02 May 2027 00:32:00 +0000 Subordinate resources: IP: 157.66.58.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a2:b1:66:5c:61:ba:6c:07:ae:93:1a:01:1e:14:12:fc:9a:ec:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:27:00 2026 GMT Not After : May 2 00:32:00 2027 GMT Subject: CN=ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:56:26:45:ef:71:6a:57:78:d5:72:1d:1a:f3: d7:b1:85:5b:83:b0:f5:f0:b8:0e:4b:1f:49:a2:5a: 04:5e:b5:bd:c1:62:57:63:5a:8a:e7:e7:5f:c7:89: 13:00:de:61:a0:68:30:35:07:18:1b:cc:7a:c5:9f: cf:c9:95:13:fd:d8:75:9c:7a:4d:04:d4:f7:c8:32: 36:a3:9a:f4:20:af:6e:1d:fc:5f:2b:18:82:13:61: 8d:69:5c:16:b0:d2:f8:0e:67:7d:0a:84:56:cf:09: f4:43:89:1d:36:d5:d7:40:c3:84:84:b7:df:ff:2b: 3a:05:df:76:83:a3:11:94:68:aa:7e:0d:69:a2:5b: 97:4c:b8:9b:2a:8f:3d:d4:4f:c8:e9:37:78:f5:57: 1a:38:c9:4a:25:bd:d5:d5:3b:9d:10:9b:3c:a1:6a: 00:11:f2:37:1e:46:66:cd:23:cb:cc:84:cc:96:80: c9:e1:3f:75:b6:7f:b4:e6:a6:9b:05:06:82:0e:bc: 1a:ed:22:4d:c2:eb:d8:4d:24:78:04:11:eb:59:5f: b6:18:ff:9b:0b:08:7f:85:ec:09:1e:9d:02:77:ff: c9:e6:08:c5:ae:f1:f7:5f:01:60:9a:a5:b1:89:19: 62:6e:9a:f9:7f:be:57:d8:ba:aa:85:6e:07:b6:27: c0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.58.0/23 Signature Algorithm: sha256WithRSAEncryption 38:4b:bd:82:d7:a6:da:1c:f2:af:82:b9:7e:c5:87:a2:2d:bc: f5:1b:80:a9:5e:a1:a6:85:6d:e2:3a:04:53:c4:e9:5a:af:df: 3f:6b:b1:c3:8c:33:94:86:24:e5:7d:ea:db:e0:0e:5f:c1:88: 4a:b5:60:a4:df:61:d9:0b:6a:d9:89:51:90:7c:19:9b:4f:34: 5b:d4:12:5d:04:04:b3:42:59:1b:56:82:e3:9c:74:7f:55:38: 2f:26:19:43:97:e8:45:ab:18:d8:c1:6d:49:31:ee:79:8a:3e: 64:71:73:36:35:03:4b:80:4a:ce:af:b1:7f:db:de:01:50:03: 95:71:08:fd:42:2c:8c:9e:4b:7d:97:d9:f4:01:07:4e:e4:fd: 33:54:57:6d:f2:36:74:f0:34:5b:41:f1:c8:6e:ac:6f:c4:81: c8:7a:96:d8:32:64:bc:b9:bf:d8:89:99:09:6e:c4:fe:63:43: 08:33:43:56:25:48:7f:48:aa:16:f3:33:15:53:02:d3:4a:1d: b6:9a:d9:79:0f:ea:42:9c:af:e3:92:a3:8c:36:47:f9:bf:09: b0:10:40:f9:99:4c:11:b3:17:90:cd:79:19:67:3e:22:20:25: 28:33:ba:05:e4:25:54:7c:77:fc:fe:b0:94:d4:29:e1:f2:03: 2b:64:9b:47 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUVKKxZlxhumwHrpMaAR4UEvya7NowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMjcwMFoX DTI3MDUwMjAwMzIwMFowMzExMC8GA1UEAxMoRUNBMDA0N0VBOEU0RENFOTJFQkM1 NzJFRThBMTFEMTdDNkI2NDg3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAORWJkXvcWpXeNVyHRrz17GFW4Ow9fC4DksfSaJaBF61vcFiV2NaiufnX8eJ EwDeYaBoMDUHGBvMesWfz8mVE/3YdZx6TQTU98gyNqOa9CCvbh38XysYghNhjWlc FrDS+A5nfQqEVs8J9EOJHTbV10DDhIS33/8rOgXfdoOjEZRoqn4NaaJbl0y4myqP PdRPyOk3ePVXGjjJSiW91dU7nRCbPKFqABHyNx5GZs0jy8yEzJaAyeE/dbZ/tOam mwUGgg68Gu0iTcLr2E0keAQR61lfthj/mwsIf4XsCR6dAnf/yeYIxa7x918BYJql sYkZYm6a+X++V9i6qoVuB7YnwPkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOygBH6o5NzpLrxXLuihHRfGtkhyMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQ2YjA1ZjM2LWUxNzQtNGRhZC1iYzJhLTA4OTI2YzVkZDA0Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80NmIwNWYz Ni1lMTc0LTRkYWQtYmMyYS0wODkyNmM1ZGQwNDYvMC9FQ0EwMDQ3RUE4RTREQ0U5 MkVCQzU3MkVFOEExMUQxN0M2QjY0ODcyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnUI6MA0GCSqGSIb3DQEBCwUAA4IBAQA4S72C16baHPKvgrl+xYeiLbz1G4Cp XqGmhW3iOgRTxOlar98/a7HDjDOUhiTlferb4A5fwYhKtWCk32HZC2rZiVGQfBmb TzRb1BJdBASzQlkbVoLjnHR/VTgvJhlDl+hFqxjYwW1JMe55ij5kcXM2NQNLgErO r7F/294BUAOVcQj9QiyMnkt9l9n0AQdO5P0zVFdt8jZ08DRbQfHIbqxvxIHIepbY MmS8ub/YiZkJbsT+Y0MIM0NWJUh/SKoW8zMVUwLTSh22mtl5D+pCnK/jkqOMNkf5 vwmwEED5mUwRsxeQzXkZZz4iICUoM7oF5CVUfHf8/rCU1Cnh8gMrZJtH -----END CERTIFICATE-----Generated at Tue May 12 22:16:11 2026 by rpki-client