$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer File: EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer (raw, json) Hash identifier: ZPX2DekIG6arcV18triKPblPZvOtaYMV2fenweccMOk= Subject key identifier: EF:27:1E:6D:F5:C4:B0:05:D9:33:97:66:A7:4A:5A:DD:FA:5A:7E:89 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7DFDFF0F7E12ACAF2C1B046045FAECF2F0B93A1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft caRepository: rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:45:04 +0000 Certificate not after: Sun 02 May 2027 01:50:04 +0000 Subordinate resources: IP: 157.15.168.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:fd:ff:0f:7e:12:ac:af:2c:1b:04:60:45:fa:ec:f2:f0:b9:3a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:45:04 2026 GMT Not After : May 2 01:50:04 2027 GMT Subject: CN=EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cb:35:ea:ea:9a:46:0d:ea:05:20:6b:0a:97: eb:90:4c:9b:b2:27:e5:da:d4:17:f8:8d:11:10:da: 96:ed:c5:ed:d6:4c:20:85:60:7e:73:7e:ef:7d:e7: 80:1d:ef:fd:eb:0d:c8:ad:85:fa:95:10:2a:db:4b: 6f:74:89:8e:71:17:87:0e:92:73:46:7b:14:5a:ee: 39:0d:00:20:83:ad:1c:aa:64:fa:d0:9c:94:b8:22: 37:0f:41:a9:30:fe:ba:8d:88:7a:99:8e:73:23:c8: bd:e9:ae:b7:ed:fd:2c:6d:f0:f2:ef:7d:5a:22:5f: 60:23:4b:39:38:4d:ee:e9:45:15:a1:ef:28:c3:30: 4c:37:45:e5:01:48:34:11:93:a5:12:53:18:e0:d4: 5e:0e:90:a0:6a:f8:54:f5:3f:aa:4d:ed:30:b0:18: c9:5a:48:ec:a8:10:b5:a1:8c:04:04:ac:75:2f:9b: 11:56:9d:96:8e:33:fe:b5:70:3e:ea:87:98:a0:70: 2e:e0:12:27:f0:06:1a:ab:00:50:9e:fc:8e:e4:f7: d0:b1:72:27:da:58:7d:ce:50:5a:7d:c8:3d:52:29: 00:77:3d:48:cd:b4:5a:1d:c7:4a:eb:2d:9a:1b:5c: c8:77:4e:cd:b8:c3:ef:60:c8:e3:0f:97:38:4d:91: 9a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:27:1E:6D:F5:C4:B0:05:D9:33:97:66:A7:4A:5A:DD:FA:5A:7E:89 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.168.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:f0:5c:b9:e3:79:d3:ea:d6:36:2f:49:70:1f:10:f2:ef:53: 97:3d:1c:34:91:b5:e5:7b:7a:87:5f:3d:43:3c:da:64:74:cb: 63:5f:07:e2:6f:04:46:e1:0d:f7:f0:a6:98:d9:5a:db:3a:2c: ff:44:d4:49:e7:30:ba:ca:e8:c8:11:e2:51:fd:22:f4:3f:88: 67:17:39:8a:1c:6a:4c:2a:13:fd:65:87:31:8c:34:a1:9a:9f: 5a:a6:db:87:d7:48:bd:e2:44:c2:08:22:f2:1b:53:36:7c:b0: 51:61:ad:19:1b:3c:6f:20:82:ad:d4:d6:f5:1c:bb:6c:16:4b: 5c:38:30:4e:57:91:73:20:d9:d9:95:31:ca:52:e9:8c:64:68: 75:b0:c6:6d:77:c3:18:9c:bf:ba:7b:68:88:c6:33:19:2b:7d: 9f:a0:07:18:59:bc:a3:74:ef:9a:3f:ed:82:78:e3:f0:4b:d9: f9:1c:45:13:e8:cb:1d:a5:13:f9:46:76:54:85:6e:66:59:9c: 64:83:c2:8b:38:1b:77:7b:ee:b6:a8:c7:04:81:6e:a7:fd:24: a8:6a:d4:04:cf:a7:12:03:0f:97:dc:44:b7:1f:24:57:aa:3b: 1d:eb:55:c6:cc:72:37:31:6c:d3:15:d4:f6:bf:b9:5d:56:74: 44:c2:25:c9 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUff3/D34SrK8sGwRgRfrs8vC5OhowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNDUwNFoX DTI3MDUwMjAxNTAwNFowMzExMC8GA1UEAxMoRUYyNzFFNkRGNUM0QjAwNUQ5MzM5 NzY2QTc0QTVBRERGQTVBN0U4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbLNerqmkYN6gUgawqX65BMm7In5drUF/iNERDalu3F7dZMIIVgfnN+733n gB3v/esNyK2F+pUQKttLb3SJjnEXhw6Sc0Z7FFruOQ0AIIOtHKpk+tCclLgiNw9B qTD+uo2IepmOcyPIvemut+39LG3w8u99WiJfYCNLOThN7ulFFaHvKMMwTDdF5QFI NBGTpRJTGODUXg6QoGr4VPU/qk3tMLAYyVpI7KgQtaGMBASsdS+bEVadlo4z/rVw PuqHmKBwLuASJ/AGGqsAUJ78juT30LFyJ9pYfc5QWn3IPVIpAHc9SM20Wh3HSust mhtcyHdOzbjD72DI4w+XOE2RmsUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO8nHm31xLAF2TOXZqdKWt36Wn6JMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2JkMzU0YzFiLTY3N2UtNDFkNi1hYjBmLWU5NmVkZmQ5Mjk1Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iZDM1NGMx Yi02NzdlLTQxZDYtYWIwZi1lOTZlZGZkOTI5NTcvMC9FRjI3MUU2REY1QzRCMDA1 RDkzMzk3NjZBNzRBNUFEREZBNUE3RTg5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnQ+oMA0GCSqGSIb3DQEBCwUAA4IBAQAN8Fy543nT6tY2L0lwHxDy71OXPRw0 kbXle3qHXz1DPNpkdMtjXwfibwRG4Q338KaY2VrbOiz/RNRJ5zC6yujIEeJR/SL0 P4hnFzmKHGpMKhP9ZYcxjDShmp9aptuH10i94kTCCCLyG1M2fLBRYa0ZGzxvIIKt 1Nb1HLtsFktcODBOV5FzINnZlTHKUumMZGh1sMZtd8MYnL+6e2iIxjMZK32foAcY WbyjdO+aP+2CeOPwS9n5HEUT6MsdpRP5RnZUhW5mWZxkg8KLOBt3e+62qMcEgW6n /SSoatQEz6cSAw+X3ES3HyRXqjsd61XGzHI3MWzTFdT2v7ldVnREwiXJ -----END CERTIFICATE-----Generated at Tue May 12 22:47:49 2026 by rpki-client