$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.cer File: EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.cer (raw, json) Hash identifier: wWnoPTCjCN6HZDrpa2epA2TZN1xcgz1/ALck6Gj05kQ= Subject key identifier: EA:A4:FE:45:19:5D:51:4C:CA:75:9D:E1:CF:21:24:DC:D8:40:A8:DB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 63D83198C79A2E5DC5FF319EF4030EFD3E122EE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:20:51 +0000 Certificate not after: Sun 02 May 2027 01:25:51 +0000 Subordinate resources: IP: 103.161.114.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:d8:31:98:c7:9a:2e:5d:c5:ff:31:9e:f4:03:0e:fd:3e:12:2e:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:20:51 2026 GMT Not After : May 2 01:25:51 2027 GMT Subject: CN=EAA4FE45195D514CCA759DE1CF2124DCD840A8DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cf:7f:15:62:a4:20:04:2e:d7:aa:c5:8b:49: 85:cf:8a:c4:65:50:d9:d0:4b:66:82:bd:c7:01:1a: 69:66:84:fc:8a:b0:f3:0e:74:c8:8e:44:71:48:27: b9:0a:f7:cd:11:c7:66:22:4c:dc:e6:79:20:14:ff: b4:86:58:ab:89:0f:41:da:95:43:f9:79:44:a5:c3: 7f:4c:60:a8:83:9e:a6:9b:02:2b:0d:6a:e8:59:0c: 0e:1f:dc:15:75:e2:20:e1:00:e9:fa:ea:27:76:3f: fe:72:0d:0d:c5:de:70:db:ba:05:d0:aa:38:9a:b9: a3:ba:b4:f8:26:87:bc:db:d1:8e:5a:7d:cf:7d:f9: 03:c4:b0:a4:86:6b:f0:f2:a7:7c:55:01:2b:74:e1: d4:b5:4f:60:6e:49:6b:d6:c3:40:c9:57:7c:58:6b: 95:ce:36:74:36:9e:5d:c7:89:81:5f:f6:83:e0:26: 8e:34:22:e6:34:a7:95:74:c1:fd:d5:2a:59:e5:bf: 78:17:7c:59:6c:03:f7:64:c0:94:6e:87:ce:a2:34: ce:52:ad:15:83:8a:f2:63:25:fb:0e:07:4c:11:18: 5e:0c:9a:6a:a3:55:1d:a6:a5:3c:30:26:7b:0e:c3: 09:cc:81:e1:e8:14:e3:ab:bf:53:5d:31:97:91:4d: 26:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EA:A4:FE:45:19:5D:51:4C:CA:75:9D:E1:CF:21:24:DC:D8:40:A8:DB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.114.0/23 Signature Algorithm: sha256WithRSAEncryption 34:31:a6:51:2e:b2:4c:2d:67:09:30:13:c9:16:85:e5:27:7c: d0:88:f1:f7:47:2d:fd:b5:0b:ec:96:36:ef:17:37:30:73:7f: 9b:42:59:7f:f2:aa:01:4a:98:75:db:f2:67:0f:4c:c6:25:64: ba:c6:3f:db:7a:d5:78:b0:f5:e0:26:04:c0:98:92:b4:85:9c: b4:5f:ce:32:18:3c:f5:16:68:f2:5b:fa:84:9e:b3:67:05:94: 33:ed:d1:cd:fb:e2:13:e1:01:a1:60:5a:ba:69:f7:b4:d5:0a: d5:9b:b9:93:11:fa:28:66:a6:a7:f9:de:16:b6:08:b4:29:08: e3:d0:e7:60:6e:18:4b:1b:99:78:9b:93:20:f5:1a:1d:bf:8a: a8:91:d2:9c:07:60:c6:af:14:c0:f6:76:99:24:e4:fb:4c:51: 0e:3d:ce:9d:e6:90:a0:c6:18:e8:ad:bd:66:3a:ea:a6:4d:88: 9d:39:15:e7:72:23:de:0e:14:fe:32:d1:59:ac:39:5c:75:e7: c9:c0:e4:a9:5f:80:69:b7:76:80:14:d4:86:76:f9:74:64:86: 36:89:53:36:9b:22:16:2e:59:10:49:a7:e8:76:d3:3f:58:b8: 16:b1:37:84:6d:c7:cb:82:68:60:bd:77:88:e3:10:84:ed:b7: 60:cd:37:19 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUY9gxmMeaLl3F/zGe9AMO/T4SLuQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjA1MVoX DTI3MDUwMjAxMjU1MVowMzExMC8GA1UEAxMoRUFBNEZFNDUxOTVENTE0Q0NBNzU5 REUxQ0YyMTI0RENEODQwQThEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM3PfxVipCAELteqxYtJhc+KxGVQ2dBLZoK9xwEaaWaE/Iqw8w50yI5EcUgn uQr3zRHHZiJM3OZ5IBT/tIZYq4kPQdqVQ/l5RKXDf0xgqIOeppsCKw1q6FkMDh/c FXXiIOEA6frqJ3Y//nINDcXecNu6BdCqOJq5o7q0+CaHvNvRjlp9z335A8SwpIZr 8PKnfFUBK3Th1LVPYG5Ja9bDQMlXfFhrlc42dDaeXceJgV/2g+AmjjQi5jSnlXTB /dUqWeW/eBd8WWwD92TAlG6HzqI0zlKtFYOK8mMl+w4HTBEYXgyaaqNVHaalPDAm ew7DCcyB4egU46u/U10xl5FNJtkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOqk/kUZXVFMynWd4c8hJNzYQKjbMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk3OTVhMzc4LWQ2OWUtNDUyZS1hYzY3LTNiNzQ5MDM5YThjOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85Nzk1YTM3 OC1kNjllLTQ1MmUtYWM2Ny0zYjc0OTAzOWE4YzgvMC9FQUE0RkU0NTE5NUQ1MTRD Q0E3NTlERTFDRjIxMjREQ0Q4NDBBOERCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6FyMA0GCSqGSIb3DQEBCwUAA4IBAQA0MaZRLrJMLWcJMBPJFoXlJ3zQiPH3 Ry39tQvsljbvFzcwc3+bQll/8qoBSph12/JnD0zGJWS6xj/betV4sPXgJgTAmJK0 hZy0X84yGDz1FmjyW/qEnrNnBZQz7dHN++IT4QGhYFq6afe01QrVm7mTEfooZqan +d4Wtgi0KQjj0OdgbhhLG5l4m5Mg9Rodv4qokdKcB2DGrxTA9naZJOT7TFEOPc6d 5pCgxhjorb1mOuqmTYidORXnciPeDhT+MtFZrDlcdefJwOSpX4Bpt3aAFNSGdvl0 ZIY2iVM2myIWLlkQSafodtM/WLgWsTeEbcfLgmhgvXeI4xCE7bdgzTcZ -----END CERTIFICATE-----Generated at Tue May 12 22:03:21 2026 by rpki-client