$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EA4DA064E912527194F47FF125954E84B6DBA21A.cer File: EA4DA064E912527194F47FF125954E84B6DBA21A.cer (raw, json) Hash identifier: usvtXujbCB2uMpgiH2MfbZyDYvB4Gs+Sr875HqsI8dY= Subject key identifier: EA:4D:A0:64:E9:12:52:71:94:F4:7F:F1:25:95:4E:84:B6:DB:A2:1A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 600EAC48D8CCF4A2CF37E9C0D8AC8D94168E0A70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:49:09 +0000 Certificate not after: Sun 02 May 2027 00:54:09 +0000 Subordinate resources: IP: 103.161.202.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:0e:ac:48:d8:cc:f4:a2:cf:37:e9:c0:d8:ac:8d:94:16:8e:0a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:49:09 2026 GMT Not After : May 2 00:54:09 2027 GMT Subject: CN=EA4DA064E912527194F47FF125954E84B6DBA21A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:75:ec:8e:af:b0:45:8f:ee:06:de:99:cb:42: 01:71:95:24:d9:5e:6e:d2:c5:f7:54:08:7e:e4:ac: 75:ed:a6:01:86:35:97:e2:fa:ab:67:9e:50:3d:59: 8c:72:c3:7a:65:21:6d:7c:bc:36:b4:1a:ba:02:a3: 62:23:9b:82:65:7c:3c:af:a5:19:23:05:92:13:f7: ad:32:0c:45:93:35:88:fc:10:2f:13:aa:6e:d0:79: cc:cf:16:35:97:f7:c9:34:b2:1d:a0:c7:43:6c:f2: f6:65:59:f2:14:cd:fa:9b:0d:04:c5:c6:fb:45:eb: 1f:41:1b:7a:af:e3:9a:70:f4:d4:04:d6:ea:3f:23: b5:70:a8:64:0e:28:3a:d6:17:77:fe:a5:5c:95:43: 17:ea:44:35:ad:76:8a:e9:30:cd:9b:6f:99:5a:be: 4b:2e:0b:77:47:74:31:d5:b6:c4:da:0e:03:5d:51: 33:0f:ee:6e:d1:1f:7b:ce:c3:73:08:e1:b5:42:14: 0a:7a:af:42:a2:31:b7:6e:09:1d:1e:06:4a:f9:81: a5:04:71:e5:a4:4c:4a:35:a4:d9:65:8e:30:89:5b: d1:27:dc:d1:b0:f7:fa:2a:fb:74:fa:51:72:df:bc: 95:62:d9:90:28:78:fa:b9:14:21:b2:07:94:52:a4: 58:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EA:4D:A0:64:E9:12:52:71:94:F4:7F:F1:25:95:4E:84:B6:DB:A2:1A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.202.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:0a:ff:9a:46:30:ce:28:b2:01:00:91:37:e0:64:47:46:fd: 63:0d:6c:60:98:18:1e:2d:8a:cb:d5:5e:5b:1e:c6:12:48:85: d7:16:c4:16:d2:86:65:91:7e:44:31:e3:47:eb:9a:49:ed:a0: 78:41:21:d6:af:70:ff:15:e0:6a:e1:29:24:d5:a7:97:07:41: a2:b9:0a:ab:43:34:6e:5f:b3:c4:12:8d:8b:63:3f:e1:c3:1c: 39:49:95:da:b7:8b:d0:7c:a4:97:c3:16:80:50:17:28:d1:25: c4:ca:a1:4f:97:49:f9:ea:49:49:f6:e2:a2:c1:d5:d0:ff:4d: 94:d0:a7:0b:a7:01:e6:b0:a4:c9:60:8a:49:ba:1c:a4:90:c1: 3a:ec:bd:49:c7:1d:66:37:3b:5f:92:90:63:05:2f:00:83:84: 5a:22:2f:87:13:24:63:48:aa:43:69:2d:2e:7c:05:2a:5b:b4: 05:68:12:a4:8f:fc:c4:07:91:88:1c:d7:c8:84:b5:7a:ac:21: 4e:a4:e6:9d:d4:95:0f:71:7f:c6:89:e4:07:52:4a:3a:40:62: 24:fa:67:06:19:4b:29:f8:38:cb:a2:3c:37:91:d9:e6:b0:b5: 91:c2:46:45:f8:66:55:6e:36:55:d7:f8:e6:c6:0a:be:1a:82: 4e:70:b5:1f -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYA6sSNjM9KLPN+nA2KyNlBaOCnAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDkwOVoX DTI3MDUwMjAwNTQwOVowMzExMC8GA1UEAxMoRUE0REEwNjRFOTEyNTI3MTk0RjQ3 RkYxMjU5NTRFODRCNkRCQTIxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANB17I6vsEWP7gbemctCAXGVJNlebtLF91QIfuSsde2mAYY1l+L6q2eeUD1Z jHLDemUhbXy8NrQaugKjYiObgmV8PK+lGSMFkhP3rTIMRZM1iPwQLxOqbtB5zM8W NZf3yTSyHaDHQ2zy9mVZ8hTN+psNBMXG+0XrH0Ebeq/jmnD01ATW6j8jtXCoZA4o OtYXd/6lXJVDF+pENa12iukwzZtvmVq+Sy4Ld0d0MdW2xNoOA11RMw/ubtEfe87D cwjhtUIUCnqvQqIxt24JHR4GSvmBpQRx5aRMSjWk2WWOMIlb0Sfc0bD3+ir7dPpR ct+8lWLZkCh4+rkUIbIHlFKkWIcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOpNoGTpElJxlPR/8SWVToS226IaMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY3ZjlmNTYyLTcyOTItNDRmMS04ZTJjLTQ0MGEwNTMxYzM5Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82N2Y5ZjU2 Mi03MjkyLTQ0ZjEtOGUyYy00NDBhMDUzMWMzOTYvMC9FQTREQTA2NEU5MTI1Mjcx OTRGNDdGRjEyNTk1NEU4NEI2REJBMjFBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6HKMA0GCSqGSIb3DQEBCwUAA4IBAQCLCv+aRjDOKLIBAJE34GRHRv1jDWxg mBgeLYrL1V5bHsYSSIXXFsQW0oZlkX5EMeNH65pJ7aB4QSHWr3D/FeBq4Skk1aeX B0GiuQqrQzRuX7PEEo2LYz/hwxw5SZXat4vQfKSXwxaAUBco0SXEyqFPl0n56klJ 9uKiwdXQ/02U0KcLpwHmsKTJYIpJuhykkME67L1Jxx1mNztfkpBjBS8Ag4RaIi+H EyRjSKpDaS0ufAUqW7QFaBKkj/zEB5GIHNfIhLV6rCFOpOad1JUPcX/GieQHUko6 QGIk+mcGGUsp+DjLojw3kdnmsLWRwkZF+GZVbjZV1/jmxgq+GoJOcLUf -----END CERTIFICATE-----Generated at Tue May 12 22:15:48 2026 by rpki-client