$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.cer File: EB57B4A8B7DB581F45D8854952928F5926755B5D.cer (raw, json) Hash identifier: IyDuLoKt/Dao63l6bbbli3ZiStXdL82nV4cQh998qM4= Subject key identifier: EB:57:B4:A8:B7:DB:58:1F:45:D8:85:49:52:92:8F:59:26:75:5B:5D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 022A5DDA38B8CC4A602786A1657D10A1C4B3AB87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:34:12 +0000 Certificate not after: Sun 02 May 2027 01:39:12 +0000 Subordinate resources: IP: 2001:df3:cf40::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:2a:5d:da:38:b8:cc:4a:60:27:86:a1:65:7d:10:a1:c4:b3:ab:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:34:12 2026 GMT Not After : May 2 01:39:12 2027 GMT Subject: CN=EB57B4A8B7DB581F45D8854952928F5926755B5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:db:d3:49:12:c0:30:95:6e:c0:7e:39:4c:b4: 3d:32:80:48:39:2f:9f:ea:24:c6:3e:b3:af:2c:98: bf:24:60:c3:90:e3:3c:7e:c5:8f:78:d0:13:90:7c: a9:c2:81:60:07:a4:88:18:44:7f:c3:a2:27:5f:f5: 6c:e2:ee:54:a3:b9:cb:5f:73:a1:b5:20:2d:0e:b3: 99:d6:15:6e:6b:1c:50:a1:e0:a5:a8:fd:0e:65:4a: d5:6c:97:0d:9d:2d:cd:4d:75:87:76:7e:2c:d0:ce: d2:35:24:d4:19:24:d4:b0:73:09:2d:e6:ec:62:66: 5a:08:32:b9:12:9f:52:14:39:f7:b6:9a:ed:88:35: 60:97:a0:df:73:2c:3f:36:2c:ec:c5:bf:4d:5f:ff: 30:c3:20:be:36:54:29:0c:d5:f1:17:1a:6b:65:55: 75:58:ff:77:2d:d5:20:ce:7c:cf:f2:d4:f0:1b:8a: 65:ce:12:42:72:82:69:32:02:c4:0f:55:5d:b9:fa: 27:b2:90:c8:d9:2d:98:c2:45:61:11:80:a3:96:a6: 4d:80:85:02:4b:aa:ef:38:8b:60:3c:f9:9e:81:71: d0:4d:ac:d9:13:73:85:d7:66:91:81:95:57:1e:81: 12:dc:bf:1b:a7:ef:27:1b:be:57:0f:33:18:3d:70: 3c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:57:B4:A8:B7:DB:58:1F:45:D8:85:49:52:92:8F:59:26:75:5B:5D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:cf40::/48 Signature Algorithm: sha256WithRSAEncryption 13:f3:ef:af:f4:70:df:03:29:a2:17:28:6f:74:00:5b:64:cc: 78:73:b9:59:e5:a9:0f:cd:a0:0d:37:9f:7c:8b:4a:75:a7:87: 76:9c:c5:82:a4:6e:23:d4:ae:f2:eb:11:b7:9b:56:b9:77:a5: e2:c8:8f:6e:ab:b6:b8:4b:3c:49:8a:77:cc:af:7f:e6:b0:af: 67:24:5a:51:59:68:19:99:56:43:21:63:4a:95:ed:0b:40:0c: 5e:db:bb:01:e6:70:3f:55:47:d8:f0:ab:a5:b7:07:9c:ac:f6: 84:ad:b0:cd:69:1b:61:e9:65:6e:69:ef:a5:f1:0c:bb:55:59: 4c:a5:5f:2a:9b:9d:2e:2a:ab:9f:8b:3a:d4:af:c8:b6:f6:75: b3:62:5a:c5:05:c5:b4:88:41:a2:a3:d1:ae:0b:88:b3:9f:ce: 7a:9d:eb:fd:5b:77:91:9a:9f:48:5a:66:77:64:55:6f:72:99: 22:2c:78:06:86:53:23:38:b4:98:6e:a1:02:cf:5d:b5:06:fe: 72:6f:6e:e2:3a:4d:51:58:a6:21:a3:e6:78:ab:45:c6:17:e5: cf:a0:19:e3:6b:f1:a3:91:1f:08:9a:ac:8a:24:db:0e:95:2a: ff:91:3f:aa:58:2b:c8:b8:74:02:6b:15:08:15:c9:63:82:70: c0:81:15:09 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUAipd2ji4zEpgJ4ahZX0QocSzq4cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzQxMloX DTI3MDUwMjAxMzkxMlowMzExMC8GA1UEAxMoRUI1N0I0QThCN0RCNTgxRjQ1RDg4 NTQ5NTI5MjhGNTkyNjc1NUI1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPb00kSwDCVbsB+OUy0PTKASDkvn+okxj6zryyYvyRgw5DjPH7Fj3jQE5B8 qcKBYAekiBhEf8OiJ1/1bOLuVKO5y19zobUgLQ6zmdYVbmscUKHgpaj9DmVK1WyX DZ0tzU11h3Z+LNDO0jUk1Bkk1LBzCS3m7GJmWggyuRKfUhQ597aa7Yg1YJeg33Ms PzYs7MW/TV//MMMgvjZUKQzV8Rcaa2VVdVj/dy3VIM58z/LU8BuKZc4SQnKCaTIC xA9VXbn6J7KQyNktmMJFYRGAo5amTYCFAkuq7ziLYDz5noFx0E2s2RNzhddmkYGV Vx6BEty/G6fvJxu+Vw8zGD1wPBcCAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOtXtKi321gfRdiFSVKSj1kmdVtdMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FhYjRlMTRkLTAyMWQtNDBkYy05MjNhLWMxMmQxYWY0NDNiNS8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hYWI0ZTE0 ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMS9FQjU3QjRBOEI3REI1ODFG NDVEODg1NDk1MjkyOEY1OTI2NzU1QjVELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN889AMA0GCSqGSIb3DQEBCwUAA4IBAQAT8++v9HDfAymiFyhvdABbZMx4 c7lZ5akPzaANN598i0p1p4d2nMWCpG4j1K7y6xG3m1a5d6XiyI9uq7a4SzxJinfM r3/msK9nJFpRWWgZmVZDIWNKle0LQAxe27sB5nA/VUfY8KultwecrPaErbDNaRth 6WVuae+l8Qy7VVlMpV8qm50uKqufizrUr8i29nWzYlrFBcW0iEGio9GuC4izn856 nev9W3eRmp9IWmZ3ZFVvcpkiLHgGhlMjOLSYbqECz121Bv5yb27iOk1RWKYho+Z4 q0XGF+XPoBnja/GjkR8ImqyKJNsOlSr/kT+qWCvIuHQCaxUIFcljgnDAgRUJ -----END CERTIFICATE-----Generated at Tue May 12 22:03:19 2026 by rpki-client