$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.cer File: EB05D5BB4356C8737A9AA4994302BCA8B46691CD.cer (raw, json) Hash identifier: dwlCFZfDyKCP5D7cq4D0LXLwJARdJTA+bQDc5k47jos= Subject key identifier: EB:05:D5:BB:43:56:C8:73:7A:9A:A4:99:43:02:BC:A8:B4:66:91:CD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0DCEF0E00063EA6C0B8394B2D68A0F5A722A9C17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:30:04 +0000 Certificate not after: Sun 02 May 2027 00:35:04 +0000 Subordinate resources: IP: 2001:df4:5f40::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ce:f0:e0:00:63:ea:6c:0b:83:94:b2:d6:8a:0f:5a:72:2a:9c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:30:04 2026 GMT Not After : May 2 00:35:04 2027 GMT Subject: CN=EB05D5BB4356C8737A9AA4994302BCA8B46691CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:92:37:79:40:75:4b:ca:c5:d0:d0:c3:e7:b7: 41:79:56:16:76:56:cb:dd:ba:35:3a:77:af:10:bf: bb:43:16:14:b9:c0:bc:4b:03:12:2a:bf:48:f1:25: 75:97:32:4c:7f:9a:d9:51:93:f3:89:99:92:08:57: 0b:d0:90:ec:31:3a:b4:75:8f:c7:4d:0c:54:d8:cf: 62:e0:b4:82:2f:0c:7b:96:c8:4b:d0:d3:14:8d:be: c2:17:34:3a:de:2c:da:73:42:8f:0e:34:90:a4:3d: ac:be:af:c0:26:17:16:68:ee:45:79:5a:3c:ae:19: a7:38:dc:71:e3:5b:4e:3a:61:24:b4:24:a8:4e:f7: e3:fb:1f:64:4f:fa:f5:5f:b2:e5:9c:dc:0a:d9:5c: f9:74:3d:77:a7:3b:40:e9:93:bf:6d:0f:04:f9:b5: 74:11:7b:54:11:1c:c4:0b:28:5a:92:d5:8c:6a:3b: 33:d9:7e:db:8d:24:2a:4b:d0:14:c4:22:c4:22:b1: 09:a4:c8:89:b3:11:fb:95:da:ba:c3:0b:9d:12:ed: 43:88:0d:95:2f:d8:ad:70:c2:c0:1f:ad:06:7e:7f: 05:d8:7b:74:de:4b:c2:d8:d2:29:32:fd:4e:62:02: fe:ee:c8:a6:88:46:39:e4:47:82:d5:11:65:93:dd: 25:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:05:D5:BB:43:56:C8:73:7A:9A:A4:99:43:02:BC:A8:B4:66:91:CD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:5f40::/48 Signature Algorithm: sha256WithRSAEncryption 1d:1c:b2:b0:5c:16:d3:64:61:7b:25:21:6e:ac:98:96:68:84: e4:5a:44:b3:4c:7e:24:12:b2:bb:ea:74:20:f7:2a:6c:00:3f: 35:f2:8f:5c:ba:02:e5:64:d4:40:eb:0d:af:bd:35:78:78:19: c1:49:41:04:54:f1:56:d0:14:2c:86:79:cd:4f:c6:d5:5c:12: 01:de:96:2e:4b:b0:06:f3:44:82:c6:7e:89:b5:34:24:a1:b6: a2:f5:06:9e:d1:cf:1e:ee:8c:a4:43:e6:b5:79:0b:97:32:49: a1:f1:01:8e:e9:cd:b3:51:97:84:75:35:f6:46:88:ef:80:ab: de:a9:80:22:72:4d:d4:1c:27:f9:e8:21:51:1a:bc:77:05:56: b2:ac:6a:81:38:29:d6:f6:13:4b:e4:ae:f0:a0:75:47:40:d4: f3:f2:a1:e5:9b:e4:cd:e1:64:15:74:66:77:7c:22:42:f8:c8: 78:6c:99:6f:c0:f9:22:60:c5:b4:21:36:5e:63:e8:17:d6:59: a2:6d:30:22:59:47:30:3c:97:dd:f8:fa:dc:2b:6c:ab:e7:c7: 5f:6b:69:f8:0a:1a:2a:ea:01:68:07:4a:88:c8:ad:ac:5f:4f: 32:ee:ca:bc:45:7d:a4:6f:19:d1:55:89:bc:03:fd:e0:db:5b: f4:07:64:ee -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDc7w4ABj6mwLg5Sy1ooPWnIqnBcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzAwNFoX DTI3MDUwMjAwMzUwNFowMzExMC8GA1UEAxMoRUIwNUQ1QkI0MzU2Qzg3MzdBOUFB NDk5NDMwMkJDQThCNDY2OTFDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI6SN3lAdUvKxdDQw+e3QXlWFnZWy926NTp3rxC/u0MWFLnAvEsDEiq/SPEl dZcyTH+a2VGT84mZkghXC9CQ7DE6tHWPx00MVNjPYuC0gi8Me5bIS9DTFI2+whc0 Ot4s2nNCjw40kKQ9rL6vwCYXFmjuRXlaPK4ZpzjcceNbTjphJLQkqE734/sfZE/6 9V+y5ZzcCtlc+XQ9d6c7QOmTv20PBPm1dBF7VBEcxAsoWpLVjGo7M9l+240kKkvQ FMQixCKxCaTIibMR+5XausMLnRLtQ4gNlS/YrXDCwB+tBn5/Bdh7dN5LwtjSKTL9 TmIC/u7IpohGOeRHgtURZZPdJd0CAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOsF1btDVshzepqkmUMCvKi0ZpHNMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzRjNThmYjdjLTY3YjgtNGJjZS05NmQ5LWJlOTEyZTNmNzNkZC8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80YzU4ZmI3 Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMS9FQjA1RDVCQjQzNTZDODcz N0E5QUE0OTk0MzAyQkNBOEI0NjY5MUNELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN9F9AMA0GCSqGSIb3DQEBCwUAA4IBAQAdHLKwXBbTZGF7JSFurJiWaITk WkSzTH4kErK76nQg9ypsAD818o9cugLlZNRA6w2vvTV4eBnBSUEEVPFW0BQshnnN T8bVXBIB3pYuS7AG80SCxn6JtTQkobai9Qae0c8e7oykQ+a1eQuXMkmh8QGO6c2z UZeEdTX2RojvgKveqYAick3UHCf56CFRGrx3BVayrGqBOCnW9hNL5K7woHVHQNTz 8qHlm+TN4WQVdGZ3fCJC+Mh4bJlvwPkiYMW0ITZeY+gX1lmibTAiWUcwPJfd+Prc K2yr58dfa2n4Choq6gFoB0qIyK2sX08y7sq8RX2kbxnRVYm8A/3g21v0B2Tu -----END CERTIFICATE-----Generated at Tue May 12 22:16:20 2026 by rpki-client