$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.cer File: EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.cer (raw, json) Hash identifier: tm5BiEEH4r//aynqgaA1vVOgktMBgF+hH6Hiytjudt0= Subject key identifier: EA:92:48:CB:81:F3:EE:7B:4C:93:44:FB:E4:31:25:2A:17:39:FD:6B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3C8BBF98447FBA09A317504FB5AA13CCE6303363 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:11:48 +0000 Certificate not after: Sun 02 May 2027 00:16:48 +0000 Subordinate resources: IP: 210.87.123.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:8b:bf:98:44:7f:ba:09:a3:17:50:4f:b5:aa:13:cc:e6:30:33:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:11:48 2026 GMT Not After : May 2 00:16:48 2027 GMT Subject: CN=EA9248CB81F3EE7B4C9344FBE431252A1739FD6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4d:b4:2e:77:90:ca:4d:8e:e5:fd:fa:cf:5b: 62:e4:38:21:5d:7f:6f:5f:b1:be:78:91:74:e0:6b: 1c:b2:4f:79:4b:d2:56:3a:5d:36:d9:85:91:d8:3f: aa:a8:c5:50:7b:f2:1f:2c:d8:f3:12:ed:51:7f:12: c7:8d:dc:aa:11:bc:0e:e6:86:50:aa:e6:04:e3:21: 68:c5:dc:24:a3:b3:6b:33:7f:10:e7:02:e4:50:14: fa:34:88:e5:de:14:40:25:51:96:ab:47:b2:f6:75: 83:bf:b7:ab:cc:64:84:12:81:65:ca:da:e5:50:aa: ed:06:c5:b6:31:5f:c7:79:ce:2b:cf:1e:72:07:cc: 11:7d:e2:6e:43:d3:5f:94:19:31:65:75:ed:f6:2a: 91:1d:86:92:01:4c:38:d3:4d:b6:e5:1e:ca:77:08: f7:2c:0c:e7:24:57:b8:0f:d5:73:d8:94:b0:49:0c: ac:ea:1e:c4:71:ba:11:92:6b:56:f4:8b:ee:74:13: 65:c8:2f:82:0b:fb:4e:a3:2f:37:82:d5:df:60:cd: ed:06:aa:85:af:59:90:f8:49:f5:d5:4b:7f:7d:d0: c6:13:f4:cb:7d:ea:d7:9c:a1:5b:22:46:5d:fb:16: e1:15:78:22:63:74:68:be:c0:b5:6e:45:e4:1a:ad: 07:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EA:92:48:CB:81:F3:EE:7B:4C:93:44:FB:E4:31:25:2A:17:39:FD:6B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.87.123.0/24 Signature Algorithm: sha256WithRSAEncryption 40:65:a1:a7:f5:4e:52:8a:ea:7e:00:7d:a6:49:b0:6c:3b:12: 62:58:11:c7:cd:49:c0:6f:b2:fe:d1:f8:16:dd:ec:7d:ea:cb: b1:a2:fb:5d:17:a3:a4:77:ab:0a:b3:55:95:a1:5f:06:c7:3b: 37:77:86:2e:18:7d:e4:ce:3d:ba:0f:a8:bc:1d:c7:e0:d9:e2: c7:17:a1:d4:25:50:37:23:d0:22:18:b6:b7:be:e8:54:d7:f8: 1e:c3:ad:41:f4:ad:1b:40:da:e0:65:ee:8b:3a:85:e8:90:91: b8:aa:87:d6:91:c7:3d:af:f2:ba:a2:a0:54:9d:45:2d:bb:c3: b1:e2:7e:49:d0:d5:e2:2a:ee:32:41:19:a1:92:0d:0a:d7:5d: 85:88:43:df:1f:5f:4b:67:17:c0:d1:76:38:99:0f:c5:4a:b3: 86:47:b0:8b:d4:52:99:92:7b:3d:c2:3d:61:4e:c4:c0:a5:f5: 70:bc:6e:f6:85:00:f3:32:72:6f:3e:88:8b:1f:3b:c0:3a:27: 12:f3:98:46:33:a2:da:32:65:eb:73:e0:be:f6:33:9b:66:16: 79:3a:ea:4e:6a:14:3b:34:85:fe:08:9a:ff:a7:18:c6:4c:4c: 53:49:75:c5:af:c1:f3:13:a8:c6:66:b4:ca:71:3a:2a:f3:27: ba:8e:38:59 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUPIu/mER/ugmjF1BPtaoTzOYwM2MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTE0OFoX DTI3MDUwMjAwMTY0OFowMzExMC8GA1UEAxMoRUE5MjQ4Q0I4MUYzRUU3QjRDOTM0 NEZCRTQzMTI1MkExNzM5RkQ2QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKVNtC53kMpNjuX9+s9bYuQ4IV1/b1+xvniRdOBrHLJPeUvSVjpdNtmFkdg/ qqjFUHvyHyzY8xLtUX8Sx43cqhG8DuaGUKrmBOMhaMXcJKOzazN/EOcC5FAU+jSI 5d4UQCVRlqtHsvZ1g7+3q8xkhBKBZcra5VCq7QbFtjFfx3nOK88ecgfMEX3ibkPT X5QZMWV17fYqkR2GkgFMONNNtuUeyncI9ywM5yRXuA/Vc9iUsEkMrOoexHG6EZJr VvSL7nQTZcgvggv7TqMvN4LV32DN7Qaqha9ZkPhJ9dVLf33QxhP0y33q15yhWyJG XfsW4RV4ImN0aL7AtW5F5BqtByMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOqSSMuB8+57TJNE++QxJSoXOf1rMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzMxMjI0MjQ3LTM0N2YtNGE1Ny1hNzlhLWNiMmMyMWM5MTcwZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zMTIyNDI0 Ny0zNDdmLTRhNTctYTc5YS1jYjJjMjFjOTE3MGUvMC9FQTkyNDhDQjgxRjNFRTdC NEM5MzQ0RkJFNDMxMjUyQTE3MzlGRDZCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQA0ld7MA0GCSqGSIb3DQEBCwUAA4IBAQBAZaGn9U5Siup+AH2mSbBsOxJiWBHH zUnAb7L+0fgW3ex96suxovtdF6Okd6sKs1WVoV8Gxzs3d4YuGH3kzj26D6i8Hcfg 2eLHF6HUJVA3I9AiGLa3vuhU1/gew61B9K0bQNrgZe6LOoXokJG4qofWkcc9r/K6 oqBUnUUtu8Ox4n5J0NXiKu4yQRmhkg0K112FiEPfH19LZxfA0XY4mQ/FSrOGR7CL 1FKZkns9wj1hTsTApfVwvG72hQDzMnJvPoiLHzvAOicS85hGM6LaMmXrc+C+9jOb ZhZ5OupOahQ7NIX+CJr/pxjGTExTSXXFr8HzE6jGZrTKcToq8ye6jjhZ -----END CERTIFICATE-----Generated at Tue May 12 22:02:58 2026 by rpki-client