$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer File: EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer (raw, json) Hash identifier: e+uwQzao6EY/htzD1GHDWIbyIAqjwRsQq4hWiF23y5M= Subject key identifier: EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6A27CF73213043A1B3E26AC59541348C70E7AC5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:32:32 +0000 Certificate not after: Sun 02 May 2027 01:37:32 +0000 Subordinate resources: IP: 103.3.58.0/24 IP: 103.76.148.0/22 IP: 120.89.90.0/23 IP: 203.29.26.0/24 IP: 2407:6f80::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:27:cf:73:21:30:43:a1:b3:e2:6a:c5:95:41:34:8c:70:e7:ac:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:32:32 2026 GMT Not After : May 2 01:37:32 2027 GMT Subject: CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1c:83:8a:b7:50:f1:a6:bb:cc:f7:fe:61:6c: 0c:3b:16:43:08:5f:3b:9b:4f:15:a9:26:12:8d:b6: 74:65:a1:d6:2f:6e:05:96:4c:1d:61:ed:95:c5:6e: b5:84:69:96:37:43:dd:58:ca:02:43:f2:89:ee:f2: 56:01:d4:e1:c9:52:88:d1:eb:98:92:0d:79:fb:89: 2e:b4:38:e2:68:6d:e7:ce:1e:79:15:89:ae:ea:bb: 64:6e:21:47:44:28:3b:47:27:63:28:c1:62:da:3c: 78:8d:60:8f:a0:e7:1b:06:d2:4e:b7:2d:3f:86:90: d6:42:8b:16:18:bf:f7:e3:cc:12:51:0b:b3:c7:ab: eb:d2:39:00:ba:49:5e:bb:79:9a:35:01:c7:60:e9: cd:7c:7e:19:76:75:1d:08:20:a3:a6:a3:ca:72:ac: 69:21:c7:4a:72:ad:68:83:cc:5e:06:06:1c:45:09: be:a7:40:67:6f:e6:0a:30:46:88:b7:9a:4c:8c:f9: 8d:66:33:23:a1:18:6e:fb:6f:d3:bd:1b:92:bc:ac: bd:53:45:e7:fc:73:bb:41:2f:30:53:6b:80:76:cc: 28:ff:eb:7f:6e:5c:ab:54:29:49:18:a1:1e:8f:31: 82:3e:20:b8:90:98:44:94:46:56:81:dc:d4:f3:1a: 5d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.3.58.0/24 103.76.148.0/22 120.89.90.0/23 203.29.26.0/24 IPv6: 2407:6f80::/32 Signature Algorithm: sha256WithRSAEncryption 4e:91:a6:31:99:1c:cf:9d:20:c7:5c:c9:65:67:75:bf:1c:db: 68:d1:e4:40:f0:fc:c8:b8:92:e7:78:f8:c4:90:df:2d:65:a6: 84:a9:5d:79:d5:7b:60:e0:b6:06:d2:f1:d2:68:c7:aa:89:e8: db:e3:f7:05:57:8a:eb:cf:17:43:79:70:0f:02:28:09:88:81: 88:5c:ad:e6:15:7a:13:a5:68:90:b7:07:4c:92:33:20:4c:81: d3:79:0f:45:4d:2c:70:47:cd:0e:12:a5:7b:2c:fd:2a:0f:0e: 33:01:f0:ad:ce:92:54:9c:3e:cd:61:34:c9:cd:dd:6b:6c:5d: f1:11:3d:04:16:e4:84:56:b6:10:f8:42:7a:7f:d0:b2:79:b0: 36:42:ef:93:51:32:03:ca:bf:66:a2:89:47:4f:88:d5:c3:d9: 56:00:23:c4:38:0d:3a:8c:94:5e:ee:e0:14:73:ac:d8:90:12: 38:26:6e:de:9d:cf:e6:54:9d:e9:b2:4d:48:3f:97:cc:a3:98: 77:00:a8:8c:f4:a6:80:c3:6d:bc:fa:b5:b4:a4:f9:19:34:8f: b6:0d:70:85:e6:86:41:d5:3e:e6:b8:f3:fb:9d:50:2b:2f:d7: 35:03:78:e4:f8:d4:5b:1d:4f:35:39:23:1a:30:4b:80:dd:43: 41:4c:19:94 -----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgIUaifPcyEwQ6Gz4mrFlUE0jHDnrF4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzIzMloX DTI3MDUwMjAxMzczMlowMzExMC8GA1UEAxMoRUFGMUJCQzJFNzg1MkEwOEVDOTcy NkRGMDM3QjdBOTAwMjBGNjEzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUcg4q3UPGmu8z3/mFsDDsWQwhfO5tPFakmEo22dGWh1i9uBZZMHWHtlcVu tYRpljdD3VjKAkPyie7yVgHU4clSiNHrmJINefuJLrQ44mht584eeRWJruq7ZG4h R0QoO0cnYyjBYto8eI1gj6DnGwbSTrctP4aQ1kKLFhi/9+PMElELs8er69I5ALpJ Xrt5mjUBx2DpzXx+GXZ1HQggo6ajynKsaSHHSnKtaIPMXgYGHEUJvqdAZ2/mCjBG iLeaTIz5jWYzI6EYbvtv070bkrysvVNF5/xzu0EvMFNrgHbMKP/rf25cq1QpSRih Ho8xgj4guJCYRJRGVoHc1PMaXYcCAwEAAaOCAtowggLWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOrxu8LnhSoI7Jcm3wN7epACD2E8MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E3ZmRmNDNlLTRhNGMtNGRiYy1iNzg1LWRkN2NiZjFhNjdiNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hN2ZkZjQz ZS00YTRjLTRkYmMtYjc4NS1kZDdjYmYxYTY3YjcvMC9FQUYxQkJDMkU3ODUyQTA4 RUM5NzI2REYwMzdCN0E5MDAyMEY2MTNDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAY AwQAZwM6AwQCZ0yUAwQBeFlaAwQAyx0aMA0EAgACMAcDBQAkB2+AMA0GCSqGSIb3 DQEBCwUAA4IBAQBOkaYxmRzPnSDHXMllZ3W/HNto0eRA8PzIuJLnePjEkN8tZaaE qV151Xtg4LYG0vHSaMeqiejb4/cFV4rrzxdDeXAPAigJiIGIXK3mFXoTpWiQtwdM kjMgTIHTeQ9FTSxwR80OEqV7LP0qDw4zAfCtzpJUnD7NYTTJzd1rbF3xET0EFuSE VrYQ+EJ6f9CyebA2Qu+TUTIDyr9moolHT4jVw9lWACPEOA06jJRe7uAUc6zYkBI4 Jm7enc/mVJ3psk1IP5fMo5h3AKiM9KaAw228+rW0pPkZNI+2DXCF5oZB1T7muPP7 nVArL9c1A3jk+NRbHU81OSMaMEuA3UNBTBmU -----END CERTIFICATE-----Generated at Tue May 12 22:10:10 2026 by rpki-client