$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.cer File: EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.cer (raw, json) Hash identifier: EqArP0jrceeI8yc9ZomvG4MiwKxZxcDBTESlwgLN/Jc= Subject key identifier: EA:4B:A5:6B:93:C3:D8:CB:6F:45:D2:8F:75:C6:C3:33:76:5D:8D:29 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 47B9A91C461FF20EAE6E2B1AB184026CA0523262 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.mft caRepository: rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:17:36 +0000 Certificate not after: Sun 02 May 2027 01:22:36 +0000 Subordinate resources: IP: 103.50.218.0/24 IP: 103.144.22.0/24 IP: 2001:df0:3300::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:b9:a9:1c:46:1f:f2:0e:ae:6e:2b:1a:b1:84:02:6c:a0:52:32:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:17:36 2026 GMT Not After : May 2 01:22:36 2027 GMT Subject: CN=EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:44:ae:b9:b0:d8:61:0c:89:38:ba:4e:f9:83: 44:64:da:48:78:ff:67:d5:5b:e4:23:4d:7a:77:ba: 96:52:7a:d8:5f:38:1c:63:90:3a:e8:10:8b:e5:20: 3a:ad:fb:e3:cd:d1:a2:ee:ad:b6:70:8f:e3:25:d2: 90:8f:08:aa:83:8f:ca:eb:f0:f1:83:ec:3d:c4:b8: c5:54:52:0f:62:61:91:25:6e:73:e8:61:04:cf:c6: a0:04:f3:52:9c:4f:14:20:17:bf:90:2d:63:02:c3: e1:d1:6c:12:a1:2b:d7:ce:fb:e0:5d:c5:8e:c4:69: 39:0e:d2:05:4e:a6:a0:56:29:ba:5a:74:b8:11:05: 11:d5:c2:39:1d:c1:b4:e8:14:53:f5:5b:26:32:ec: 41:c0:56:62:f7:57:ba:a3:8d:5a:9e:54:dc:44:88: e3:5f:2a:0e:11:db:ed:65:55:b1:15:ac:5d:e1:55: 80:04:0c:50:18:72:d4:2d:7e:ac:16:7b:43:95:0c: 83:a2:e9:05:29:6e:24:c2:5a:c4:47:6d:4f:c2:5d: bc:6d:51:08:e7:57:d8:9a:3b:17:49:07:ca:66:90: d0:39:4a:63:31:86:5f:7a:d2:d6:37:6b:b6:a1:7a: 7b:23:1c:8a:39:c4:38:b0:f6:1b:e7:6e:7e:72:44: 93:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EA:4B:A5:6B:93:C3:D8:CB:6F:45:D2:8F:75:C6:C3:33:76:5D:8D:29 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.50.218.0/24 103.144.22.0/24 IPv6: 2001:df0:3300::/48 Signature Algorithm: sha256WithRSAEncryption 24:7b:36:4f:53:9c:a2:70:1f:0c:70:21:d0:2a:6b:f7:fe:39: d7:14:36:34:35:78:b0:b7:1d:a8:23:11:b2:cf:59:c7:fa:7e: 28:ab:a3:bc:9e:86:46:c2:6a:88:75:d7:9d:11:de:94:47:12: 60:03:3e:d0:cb:6a:11:96:46:a4:ef:bf:b1:2b:ad:51:94:e2: e9:fd:f3:bd:78:3f:45:54:35:2b:82:78:04:bd:52:00:86:41: 58:31:82:1c:64:af:0b:62:a2:7c:f4:39:b2:b4:71:04:a3:55: 28:12:9d:1b:42:63:78:67:eb:d8:38:83:21:59:f7:ee:fa:29: c8:9d:a9:5a:37:74:b0:d8:1a:7f:a7:b9:43:7b:07:60:15:e3: 11:47:d1:4b:e0:77:c4:7b:48:74:9c:55:93:a4:7d:9c:61:66: 33:03:7f:12:1f:77:ab:ce:79:8d:cd:81:ab:dc:33:4f:1c:24: 66:f4:c9:88:5a:cd:35:4f:48:ef:29:c5:b9:14:1a:4a:d9:e6: 02:7a:78:66:45:ef:e7:fa:5f:a3:de:51:dd:ea:b7:75:63:d3: ee:e8:27:d4:cb:81:40:1e:a7:65:33:95:68:96:f7:ec:7d:45: fa:9e:2c:7f:f3:db:1e:45:8c:ff:f6:c1:0d:4e:22:56:d1:0d: e8:64:59:91 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUR7mpHEYf8g6ubisasYQCbKBSMmIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTczNloX DTI3MDUwMjAxMjIzNlowMzExMC8GA1UEAxMoRUE0QkE1NkI5M0MzRDhDQjZGNDVE MjhGNzVDNkMzMzM3NjVEOEQyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ5Errmw2GEMiTi6TvmDRGTaSHj/Z9Vb5CNNene6llJ62F84HGOQOugQi+Ug Oq37483Rou6ttnCP4yXSkI8IqoOPyuvw8YPsPcS4xVRSD2JhkSVuc+hhBM/GoATz UpxPFCAXv5AtYwLD4dFsEqEr18774F3FjsRpOQ7SBU6moFYpulp0uBEFEdXCOR3B tOgUU/VbJjLsQcBWYvdXuqONWp5U3ESI418qDhHb7WVVsRWsXeFVgAQMUBhy1C1+ rBZ7Q5UMg6LpBSluJMJaxEdtT8JdvG1RCOdX2Jo7F0kHymaQ0DlKYzGGX3rS1jdr tqF6eyMcijnEOLD2G+dufnJEkykCAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOpLpWuTw9jLb0XSj3XGwzN2XY0pMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzkxOGFkN2E2LWM5MDctNDM1OS1hYmE1LWQ1NzQ4YmExNjE3Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85MThhZDdh Ni1jOTA3LTQzNTktYWJhNS1kNTc0OGJhMTYxNzYvMC9FQTRCQTU2QjkzQzNEOENC NkY0NUQyOEY3NUM2QzMzMzc2NUQ4RDI5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQAZzLaAwQAZ5AWMA8EAgACMAkDBwAgAQ3wMwAwDQYJKoZIhvcNAQELBQADggEB ACR7Nk9TnKJwHwxwIdAqa/f+OdcUNjQ1eLC3HagjEbLPWcf6fiiro7yehkbCaoh1 150R3pRHEmADPtDLahGWRqTvv7ErrVGU4un98714P0VUNSuCeAS9UgCGQVgxghxk rwtionz0ObK0cQSjVSgSnRtCY3hn69g4gyFZ9+76KcidqVo3dLDYGn+nuUN7B2AV 4xFH0Uvgd8R7SHScVZOkfZxhZjMDfxIfd6vOeY3NgavcM08cJGb0yYhazTVPSO8p xbkUGkrZ5gJ6eGZF7+f6X6PeUd3qt3Vj0+7oJ9TLgUAep2UzlWiW9+x9RfqeLH/z 2x5FjP/2wQ1OIlbRDehkWZE= -----END CERTIFICATE-----Generated at Tue May 12 22:47:35 2026 by rpki-client