$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EAC36BE8959CA224F62797D3331900441E4C9AA0.cer File: EAC36BE8959CA224F62797D3331900441E4C9AA0.cer (raw, json) Hash identifier: meixYbJ0SOEGrMoY1OuUpMkZ7qDdw+MgmfrYeYnCifI= Subject key identifier: EA:C3:6B:E8:95:9C:A2:24:F6:27:97:D3:33:19:00:44:1E:4C:9A:A0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 478BC1400CF73E7F354E239319AF904CB6C76813 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/EAC36BE8959CA224F62797D3331900441E4C9AA0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:40:09 +0000 Certificate not after: Sun 02 May 2027 01:45:09 +0000 Subordinate resources: IP: 103.121.96.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:8b:c1:40:0c:f7:3e:7f:35:4e:23:93:19:af:90:4c:b6:c7:68:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:40:09 2026 GMT Not After : May 2 01:45:09 2027 GMT Subject: CN=EAC36BE8959CA224F62797D3331900441E4C9AA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e4:de:c5:24:0f:28:6d:93:3d:db:fc:37:fb: 12:17:fc:b0:ce:5d:31:a7:0b:c9:3a:7d:84:ed:24: b5:27:6a:47:f1:a7:71:76:c3:4b:9c:6f:30:10:f3: d3:17:00:85:2e:b4:0f:5f:76:7b:ce:4d:65:00:0a: df:43:02:ac:c6:68:ec:f7:5a:73:ee:75:3b:49:78: eb:f2:f2:59:74:fa:ca:e7:f0:b7:49:f8:70:1c:e2: 0d:16:ee:e6:a2:fb:1a:98:e5:e0:39:28:ed:9f:15: 9d:19:3b:1e:cf:0c:d3:13:78:7b:a3:0d:7b:a5:fe: 1d:5f:51:bb:54:0a:04:00:c6:46:07:e9:0a:ec:96: 55:00:1f:fc:26:43:9d:27:76:e4:a1:b9:9d:06:3d: af:b9:10:a7:17:ec:bb:b1:fd:c3:2b:16:5c:5e:34: e6:2e:b5:16:fb:32:6c:00:e8:17:91:ab:94:50:bd: 62:df:f6:5e:7e:7a:a8:64:a7:52:cb:b4:c9:cd:1c: 02:21:41:b1:3b:91:a3:1b:9c:7b:e5:66:fb:f0:da: cb:0a:14:10:51:0b:4d:7e:0c:13:93:90:6a:71:cf: 87:dc:4b:26:4c:53:dc:a0:92:f9:62:c1:44:80:2d: e4:1d:bc:2a:26:8e:5b:08:9d:24:66:75:e1:80:5e: 51:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EA:C3:6B:E8:95:9C:A2:24:F6:27:97:D3:33:19:00:44:1E:4C:9A:A0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/EAC36BE8959CA224F62797D3331900441E4C9AA0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.96.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:e3:f8:4b:1b:9f:6c:e4:95:d3:4a:90:4c:a8:ad:bd:9c:e5: 1a:aa:39:2a:2b:d7:a9:04:16:df:68:88:0d:b3:dd:42:90:17: 98:86:7b:2b:4e:8f:7c:13:b1:15:01:6d:58:aa:63:c8:15:bb: d3:eb:ab:7a:dd:05:3a:b4:4c:de:35:fe:4c:3a:85:80:02:94: 45:fa:a5:cf:d5:b1:69:67:02:09:bd:57:3f:ab:77:a6:f4:e4: 7a:3b:74:54:76:81:42:61:9d:ae:50:aa:9e:9f:b9:41:8f:76: f2:f7:77:02:bb:63:91:90:4f:cc:66:61:93:48:28:d9:9d:c9: 40:85:ec:c2:7f:70:52:b7:fd:44:a5:d4:10:33:4b:14:dd:a9: 8f:8e:e0:3d:82:cb:64:2b:b7:bd:51:aa:fb:fb:7d:7b:af:c5: 5a:af:31:ff:f5:8b:ad:ab:ce:1d:3e:e8:1f:cf:28:ea:59:17: 49:ea:69:8d:bd:8c:cc:69:33:9f:1c:f7:f8:e9:1f:6e:66:62: dc:d7:6d:5c:c3:39:98:2e:ae:c9:b4:61:d3:fa:33:f8:42:8d: 2d:29:54:98:65:4f:89:10:4e:71:6b:18:23:99:2a:fa:ba:e7: df:6d:36:54:72:1d:9e:b0:ad:71:f0:dc:cc:88:1d:e6:9b:48: 12:b7:6c:bc -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUR4vBQAz3Pn81TiOTGa+QTLbHaBMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDAwOVoX DTI3MDUwMjAxNDUwOVowMzExMC8GA1UEAxMoRUFDMzZCRTg5NTlDQTIyNEY2Mjc5 N0QzMzMxOTAwNDQxRTRDOUFBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALzk3sUkDyhtkz3b/Df7Ehf8sM5dMacLyTp9hO0ktSdqR/GncXbDS5xvMBDz 0xcAhS60D192e85NZQAK30MCrMZo7Pdac+51O0l46/LyWXT6yufwt0n4cBziDRbu 5qL7Gpjl4Dko7Z8VnRk7Hs8M0xN4e6MNe6X+HV9Ru1QKBADGRgfpCuyWVQAf/CZD nSd25KG5nQY9r7kQpxfsu7H9wysWXF405i61FvsybADoF5GrlFC9Yt/2Xn56qGSn Usu0yc0cAiFBsTuRoxuce+Vm+/DaywoUEFELTX4ME5OQanHPh9xLJkxT3KCS+WLB RIAt5B28KiaOWwidJGZ14YBeUU8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOrDa+iVnKIk9ieX0zMZAEQeTJqgMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2IzNzc0NjFkLWZlNGYtNDk2MS05MmU1LTk2NTVhZjI1NzU0YS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iMzc3NDYx ZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMC9FQUMzNkJFODk1OUNBMjI0 RjYyNzk3RDMzMzE5MDA0NDFFNEM5QUEwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3lgMA0GCSqGSIb3DQEBCwUAA4IBAQAN4/hLG59s5JXTSpBMqK29nOUaqjkq K9epBBbfaIgNs91CkBeYhnsrTo98E7EVAW1YqmPIFbvT66t63QU6tEzeNf5MOoWA ApRF+qXP1bFpZwIJvVc/q3em9OR6O3RUdoFCYZ2uUKqen7lBj3by93cCu2ORkE/M ZmGTSCjZnclAhezCf3BSt/1EpdQQM0sU3amPjuA9gstkK7e9Uar7+317r8VarzH/ 9Yutq84dPugfzyjqWRdJ6mmNvYzMaTOfHPf46R9uZmLc121cwzmYLq7JtGHT+jP4 Qo0tKVSYZU+JEE5xaxgjmSr6uuffbTZUch2esK1x8NzMiB3mm0gSt2y8 -----END CERTIFICATE-----Generated at Wed May 13 00:44:52 2026 by rpki-client