$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer File: EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer (raw, json) Hash identifier: 9nF0tfHQLpSDL78AUBYbG7PmjLSUmE4drSLr6z/PxmA= Subject key identifier: EB:1A:7E:E5:39:E6:F1:EF:A3:D3:0C:62:14:9C:26:5E:BF:30:B5:37 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1D5AC9AE612E934A8462CAF3213E7B1A3194B8B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft caRepository: rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:33:54 +0000 Certificate not after: Sun 02 May 2027 01:38:54 +0000 Subordinate resources: IP: 103.255.108.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:5a:c9:ae:61:2e:93:4a:84:62:ca:f3:21:3e:7b:1a:31:94:b8:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:33:54 2026 GMT Not After : May 2 01:38:54 2027 GMT Subject: CN=EB1A7EE539E6F1EFA3D30C62149C265EBF30B537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:28:dd:df:93:f1:42:f3:97:74:3f:bb:a2:4e: 19:3d:cc:20:62:8e:18:af:26:0a:27:15:6e:fd:31: 4f:d8:68:eb:5c:c3:7f:e4:4a:92:a1:24:3f:c7:05: 83:f2:dc:8a:6f:61:4d:64:ba:24:99:e8:a3:14:76: 94:14:3a:47:b0:76:e9:8d:db:dc:29:72:32:6e:ff: 9b:db:f3:fd:7b:ab:30:e2:7e:09:76:d5:9d:86:f0: 7d:bd:bc:5b:0c:3a:eb:09:07:3d:17:fa:73:43:2a: e3:68:36:5c:28:61:b4:18:d1:a5:c5:e4:b8:27:40: 88:09:5e:ee:c9:1a:73:69:21:24:45:39:52:7f:38: d8:b0:de:5e:61:de:e7:64:a3:d8:77:06:bb:07:ec: 82:fa:a3:65:55:07:f2:7a:e4:68:fe:73:c5:3c:46: 3e:be:fb:00:f8:ab:3f:39:d4:6a:ce:29:a7:59:bd: b6:63:11:2f:c5:42:03:3f:8c:a1:c7:7d:0d:4e:80: 2d:7e:65:4d:a7:1e:12:5f:0f:cd:6a:cc:d2:4d:2c: 8a:fd:5d:14:9e:33:c5:3b:65:17:dd:06:70:bc:66: 41:fb:02:cd:f5:73:b0:55:80:1f:0f:83:55:b9:28: 64:e9:a1:42:99:87:8e:6f:17:b0:32:98:dc:0f:77: 37:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:1A:7E:E5:39:E6:F1:EF:A3:D3:0C:62:14:9C:26:5E:BF:30:B5:37 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.255.108.0/23 Signature Algorithm: sha256WithRSAEncryption a6:91:c0:66:76:6a:f2:38:b2:42:7b:bc:77:9b:82:64:2b:12: 52:40:9b:02:ef:3d:56:cc:91:d4:69:3c:66:c8:90:1a:89:de: fc:53:cd:12:2d:f0:6c:25:63:ee:eb:c0:1e:38:20:eb:1e:73: 3f:19:81:40:b4:93:b4:bc:70:a8:1e:6c:38:04:ea:d3:29:b6: b0:f0:69:e4:40:9e:3b:37:6b:7a:8f:02:34:69:da:b0:a1:ff: 7c:67:8a:5e:c0:63:2f:a9:5c:19:d3:1b:d0:19:0a:5c:6e:44: 9d:4d:36:7c:00:ec:36:75:aa:a3:d0:c4:bc:4c:46:39:d9:f3: fa:ae:4f:f9:8a:9c:5b:13:27:72:b4:7d:07:a1:ab:64:8c:f3: 60:bb:7d:fb:c2:1c:f0:3e:71:ae:9a:8f:69:a4:d4:9f:a8:8a: d9:66:4a:6d:ab:e3:ee:9e:3a:c2:b4:e9:f1:2c:37:75:1f:8f: 0c:bf:18:c1:97:63:5a:1e:ef:72:5b:e7:93:94:66:a4:74:b5: ce:5b:ee:32:07:7d:81:ef:b4:65:4e:b0:f6:17:4b:44:00:62: 36:07:66:ac:7f:97:20:5a:21:d7:76:42:de:99:8e:8e:98:df: 93:47:c4:d9:fa:56:cc:69:92:52:c8:83:e7:68:32:4e:c5:42: ad:10:06:56 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUHVrJrmEuk0qEYsrzIT57GjGUuLkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzM1NFoX DTI3MDUwMjAxMzg1NFowMzExMC8GA1UEAxMoRUIxQTdFRTUzOUU2RjFFRkEzRDMw QzYyMTQ5QzI2NUVCRjMwQjUzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANgo3d+T8ULzl3Q/u6JOGT3MIGKOGK8mCicVbv0xT9ho61zDf+RKkqEkP8cF g/Lcim9hTWS6JJnooxR2lBQ6R7B26Y3b3ClyMm7/m9vz/XurMOJ+CXbVnYbwfb28 Www66wkHPRf6c0Mq42g2XChhtBjRpcXkuCdAiAle7skac2khJEU5Un842LDeXmHe 52Sj2HcGuwfsgvqjZVUH8nrkaP5zxTxGPr77APirPznUas4pp1m9tmMRL8VCAz+M ocd9DU6ALX5lTaceEl8PzWrM0k0siv1dFJ4zxTtlF90GcLxmQfsCzfVzsFWAHw+D VbkoZOmhQpmHjm8XsDKY3A93N+MCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOsafuU55vHvo9MMYhScJl6/MLU3MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FhMTFlNmQ3LTU3YTEtNDkzNi1iN2E3LWRlMDkzNTI1Y2IyNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hYTExZTZk Ny01N2ExLTQ5MzYtYjdhNy1kZTA5MzUyNWNiMjcvMC9FQjFBN0VFNTM5RTZGMUVG QTNEMzBDNjIxNDlDMjY1RUJGMzBCNTM3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ/9sMA0GCSqGSIb3DQEBCwUAA4IBAQCmkcBmdmryOLJCe7x3m4JkKxJSQJsC 7z1WzJHUaTxmyJAaid78U80SLfBsJWPu68AeOCDrHnM/GYFAtJO0vHCoHmw4BOrT Kbaw8GnkQJ47N2t6jwI0adqwof98Z4pewGMvqVwZ0xvQGQpcbkSdTTZ8AOw2daqj 0MS8TEY52fP6rk/5ipxbEydytH0HoatkjPNgu337whzwPnGumo9ppNSfqIrZZkpt q+PunjrCtOnxLDd1H48MvxjBl2NaHu9yW+eTlGakdLXOW+4yB32B77RlTrD2F0tE AGI2B2asf5cgWiHXdkLemY6OmN+TR8TZ+lbMaZJSyIPnaDJOxUKtEAZW -----END CERTIFICATE-----Generated at Tue May 12 22:02:39 2026 by rpki-client