$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer File: EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer (raw, json) Hash identifier: aJkAB3fitQ5hhC3t9ILUgCZDvrJvbvhsmLcuxRa11mI= Subject key identifier: EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 42B65779D7038043C9A901985E47E578D3FAFED3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:30:02 +0000 Certificate not after: Sun 02 May 2027 01:35:02 +0000 Subordinate resources: IP: 121.101.184.0/21 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b6:57:79:d7:03:80:43:c9:a9:01:98:5e:47:e5:78:d3:fa:fe:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:30:02 2026 GMT Not After : May 2 01:35:02 2027 GMT Subject: CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:85:47:e5:5b:14:48:f9:6c:44:05:c2:84:9a: 67:5b:00:76:80:57:6c:5c:07:80:8d:f5:99:f8:43: 2a:ca:3a:b4:69:42:b4:98:e0:ec:16:bf:de:5f:80: cd:43:ef:86:50:4c:8d:d5:ce:bc:4c:7b:70:ae:35: 83:78:77:fb:fe:e7:67:67:1f:b7:c4:16:d1:7c:28: d6:b7:b2:49:4d:5a:d4:04:f6:1c:a7:20:11:a2:af: bd:2e:97:68:92:5e:f2:56:95:f8:73:5c:66:83:8a: a5:d5:2a:29:e6:c6:71:35:0e:6d:6a:ba:15:25:50: 1c:e0:ec:1a:ea:10:72:16:30:c5:87:ec:ac:0c:32: c8:fc:29:09:98:2c:5e:8b:62:a7:18:7e:71:4e:77: 21:2d:2c:89:0b:44:47:76:44:06:a7:fc:69:f1:0b: 4b:4d:fa:5e:08:c2:10:d5:52:90:b2:20:ba:02:4b: 3a:3b:d6:c4:70:95:b8:af:bb:74:b7:47:f8:38:f6: af:45:42:b0:6e:a7:3f:d3:6b:5a:a7:95:b5:9d:06: c1:e7:0d:06:96:8c:54:4e:d8:5f:a4:b4:e9:e7:94: e8:28:58:e4:90:9a:bb:a4:72:75:b2:46:1b:b5:ea: 3e:f7:67:6f:d0:96:cb:d1:9a:c1:94:ed:af:f3:fd: a6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.101.184.0/21 Signature Algorithm: sha256WithRSAEncryption 68:7a:e4:b5:82:e8:bb:61:a4:ae:1c:00:f0:54:70:ac:84:2d: 46:22:15:b2:39:f4:d7:f4:29:41:6c:30:e5:a6:04:61:81:e6: 3d:ae:f7:e1:7e:1d:fa:f7:ba:51:38:7c:fe:2c:b5:90:7d:ed: 20:57:7e:12:fc:80:e0:c8:21:f5:d3:3e:90:49:2d:7a:fb:c7: a3:e1:a7:02:e9:0a:2c:37:f3:3b:c9:7b:7a:bc:f3:1f:f9:46: 9a:0b:ed:2c:e9:89:00:23:46:54:b6:3d:e3:bb:e6:20:35:42: 1a:62:86:35:04:04:3e:4e:47:f8:6b:b0:e6:ba:09:b1:42:c3: f6:e5:ed:c2:f4:40:08:ca:6f:f5:5c:37:28:90:c7:a3:69:2d: 07:ac:cb:ab:6e:a3:71:72:d9:19:c2:0c:a1:e6:2f:b6:b7:92: f5:ac:4b:4f:cf:3d:db:b0:67:7d:ac:e6:b2:08:bd:7c:f3:59: a1:05:fb:cf:16:9a:61:16:3b:0d:de:57:71:9a:5a:87:c0:7e: 57:b6:3c:00:40:5e:64:b6:8b:ee:4d:d0:bb:6c:4a:90:2d:cb: 57:42:98:08:8f:34:b2:e3:45:ff:5f:5d:12:cd:62:f9:2c:14: 27:c6:bc:d7:bd:84:58:88:6c:cb:8b:8d:a1:f5:01:58:2b:0d: fb:4a:29:3c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUQrZXedcDgEPJqQGYXkfleNP6/tMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzAwMloX DTI3MDUwMjAxMzUwMlowMzExMC8GA1UEAxMoRUFGMTFBOEVEMDM1QURFRDE1OUUw OTc3QTU1QjhBMTM1QTJEQkFGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMmFR+VbFEj5bEQFwoSaZ1sAdoBXbFwHgI31mfhDKso6tGlCtJjg7Ba/3l+A zUPvhlBMjdXOvEx7cK41g3h3+/7nZ2cft8QW0Xwo1reySU1a1AT2HKcgEaKvvS6X aJJe8laV+HNcZoOKpdUqKebGcTUObWq6FSVQHODsGuoQchYwxYfsrAwyyPwpCZgs Xotipxh+cU53IS0siQtER3ZEBqf8afELS036XgjCENVSkLIgugJLOjvWxHCVuK+7 dLdH+Dj2r0VCsG6nP9NrWqeVtZ0GwecNBpaMVE7YX6S06eeU6ChY5JCau6RydbJG G7XqPvdnb9CWy9GawZTtr/P9pmcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOrxGo7QNa3tFZ4Jd6VbihNaLbrwMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E1NzJkZmJlLTRjYTAtNGE0Ni04MDM3LTQ5NjhlZDk3Y2FkYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hNTcyZGZi ZS00Y2EwLTRhNDYtODAzNy00OTY4ZWQ5N2NhZGMvMC9FQUYxMUE4RUQwMzVBREVE MTU5RTA5NzdBNTVCOEExMzVBMkRCQUYwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQDeWW4MA0GCSqGSIb3DQEBCwUAA4IBAQBoeuS1gui7YaSuHADwVHCshC1GIhWy OfTX9ClBbDDlpgRhgeY9rvfhfh3697pROHz+LLWQfe0gV34S/IDgyCH10z6QSS16 +8ej4acC6QosN/M7yXt6vPMf+UaaC+0s6YkAI0ZUtj3ju+YgNUIaYoY1BAQ+Tkf4 a7DmugmxQsP25e3C9EAIym/1XDcokMejaS0HrMurbqNxctkZwgyh5i+2t5L1rEtP zz3bsGd9rOayCL1881mhBfvPFpphFjsN3ldxmlqHwH5XtjwAQF5ktovuTdC7bEqQ LctXQpgIjzSy40X/X10SzWL5LBQnxrzXvYRYiGzLi42h9QFYKw37Sik8 -----END CERTIFICATE-----Generated at Tue May 12 22:45:45 2026 by rpki-client