$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EB0A90C9D38126E4861B3243A60EFD2B08C19921.cer File: EB0A90C9D38126E4861B3243A60EFD2B08C19921.cer (raw, json) Hash identifier: GAn+e25xN3qX3YWJP2itvf3KX+3RKrl6bBhFUnk6sQs= Subject key identifier: EB:0A:90:C9:D3:81:26:E4:86:1B:32:43:A6:0E:FD:2B:08:C1:99:21 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1DFCF19193D0E99F25FCD12CFD6D8E0098BADEF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft caRepository: rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:15:07 +0000 Certificate not after: Sun 02 May 2027 00:20:07 +0000 Subordinate resources: IP: 103.87.201.0/24 IP: 2001:df0:9100::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:fc:f1:91:93:d0:e9:9f:25:fc:d1:2c:fd:6d:8e:00:98:ba:de:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:15:07 2026 GMT Not After : May 2 00:20:07 2027 GMT Subject: CN=EB0A90C9D38126E4861B3243A60EFD2B08C19921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e9:39:ba:ca:00:fa:67:cf:d3:55:b6:19:e1: 04:b3:ff:f1:63:4e:ec:96:74:b9:79:10:c5:e1:4b: b2:a1:a6:93:d8:3c:a7:b0:49:02:0b:2d:f7:6a:85: 11:b0:e1:41:8f:4a:19:02:78:80:60:9a:cf:07:7a: c2:61:73:ee:9f:cf:c4:0c:df:3b:41:5a:8d:3a:be: e3:61:38:6e:a6:12:5e:b2:7e:dd:ba:6d:ad:84:33: 59:54:7c:f7:0e:2d:e9:2f:04:47:dd:f0:13:2d:70: c8:a1:2c:5f:54:fa:ef:ad:33:35:8f:ea:78:d6:a7: 64:90:3f:d0:9a:9b:82:0a:ca:9e:fa:57:74:27:31: 31:42:7b:29:60:db:85:70:9d:f9:74:02:b3:49:b4: e9:bc:a6:e4:2a:70:11:1b:53:3f:71:f0:9d:ea:ba: 7f:cc:0c:3b:f5:0e:c7:2d:9e:90:00:7f:1d:78:15: 71:cc:25:91:52:6d:1f:7d:13:6e:fd:98:d4:d7:cd: 5f:5c:c0:33:58:11:e3:71:b4:15:ee:3e:f7:1f:dc: 2e:9f:ac:4f:5b:f4:72:95:61:3e:62:dc:65:56:54: 4a:44:f1:b0:e0:e9:3f:f6:aa:0d:31:e0:eb:ed:d4: 56:ca:bf:27:6e:fe:6d:93:ce:b1:52:44:c6:ca:7f: 96:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:0A:90:C9:D3:81:26:E4:86:1B:32:43:A6:0E:FD:2B:08:C1:99:21 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.87.201.0/24 IPv6: 2001:df0:9100::/48 Signature Algorithm: sha256WithRSAEncryption 26:62:1a:7b:d0:0f:f6:33:0b:e9:a1:2a:25:19:02:65:88:9e: 17:b4:85:25:4a:69:0c:c1:01:8d:18:4e:02:96:9b:29:44:f8: a0:d5:e2:5d:8c:28:e9:21:a8:d4:68:21:b5:58:89:b5:45:a0: 9b:3e:ad:c3:db:9b:bf:3e:5f:56:e8:57:c4:b7:e8:c5:b0:6b: b7:5a:6e:92:eb:67:bf:27:08:28:e6:cd:c0:59:89:96:0d:74: 91:bf:28:20:37:c7:ac:b5:c2:f7:fa:1f:c8:09:47:af:6b:17: 1d:5e:48:d7:b2:68:50:6f:a3:1b:d3:e9:0b:92:7d:43:6a:05: c1:80:59:14:45:b2:3d:a9:10:44:01:64:52:54:96:14:4d:43: 16:5a:6c:6b:24:47:95:25:d1:8e:7d:60:3a:e3:71:5b:ba:92: 48:16:8c:af:b9:c1:b4:6d:4a:70:f3:39:18:b8:df:87:4e:49: 75:88:d3:ee:3a:5a:03:82:40:ad:44:d3:16:8e:f9:02:2b:fb: b6:b3:33:bd:dc:c2:8f:0c:9d:da:fc:ee:4f:2c:f3:a5:98:f0: 10:53:d1:0b:aa:41:21:2d:3e:c0:19:dd:92:ce:e8:a5:c8:06: da:6a:b3:43:58:98:44:d9:ab:a7:4e:9c:a7:e9:ef:1c:f8:a9: 88:9d:d8:16 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUHfzxkZPQ6Z8l/NEs/W2OAJi63vEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTUwN1oX DTI3MDUwMjAwMjAwN1owMzExMC8GA1UEAxMoRUIwQTkwQzlEMzgxMjZFNDg2MUIz MjQzQTYwRUZEMkIwOEMxOTkyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAITpObrKAPpnz9NVthnhBLP/8WNO7JZ0uXkQxeFLsqGmk9g8p7BJAgst92qF EbDhQY9KGQJ4gGCazwd6wmFz7p/PxAzfO0FajTq+42E4bqYSXrJ+3bptrYQzWVR8 9w4t6S8ER93wEy1wyKEsX1T6760zNY/qeNanZJA/0JqbggrKnvpXdCcxMUJ7KWDb hXCd+XQCs0m06bym5CpwERtTP3Hwneq6f8wMO/UOxy2ekAB/HXgVccwlkVJtH30T bv2Y1NfNX1zAM1gR43G0Fe4+9x/cLp+sT1v0cpVhPmLcZVZUSkTxsODpP/aqDTHg 6+3UVsq/J27+bZPOsVJExsp/lrECAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOsKkMnTgSbkhhsyQ6YO/SsIwZkhMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM0YWNjMGQ4LWIwYzQtNDczNy05ZjQ0LTI5ZmYzMjQxYzc5Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zNGFjYzBk OC1iMGM0LTQ3MzctOWY0NC0yOWZmMzI0MWM3OWIvMC9FQjBBOTBDOUQzODEyNkU0 ODYxQjMyNDNBNjBFRkQyQjA4QzE5OTIxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ1fJMA8EAgACMAkDBwAgAQ3wkQAwDQYJKoZIhvcNAQELBQADggEBACZiGnvQ D/YzC+mhKiUZAmWInhe0hSVKaQzBAY0YTgKWmylE+KDV4l2MKOkhqNRoIbVYibVF oJs+rcPbm78+X1boV8S36MWwa7dabpLrZ78nCCjmzcBZiZYNdJG/KCA3x6y1wvf6 H8gJR69rFx1eSNeyaFBvoxvT6QuSfUNqBcGAWRRFsj2pEEQBZFJUlhRNQxZabGsk R5Ul0Y59YDrjcVu6kkgWjK+5wbRtSnDzORi434dOSXWI0+46WgOCQK1E0xaO+QIr +7azM73cwo8Mndr87k8s86WY8BBT0QuqQSEtPsAZ3ZLO6KXIBtpqs0NYmETZq6dO nKfp7xz4qYid2BY= -----END CERTIFICATE-----Generated at Tue May 12 22:15:52 2026 by rpki-client