$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.cer File: EBA9D784E9CC3F2A70EB526976A01F48F5F52951.cer (raw, json) Hash identifier: H8GhsI/Sqp7U/dgzL1zHf/VYqgMJDUMS/5Yr5pr2YTg= Subject key identifier: EB:A9:D7:84:E9:CC:3F:2A:70:EB:52:69:76:A0:1F:48:F5:F5:29:51 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 512713640DE7DE7CF35CC6F165602C561BD28D68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft caRepository: rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:40:43 +0000 Certificate not after: Sat 01 May 2027 23:45:43 +0000 Subordinate resources: IP: 203.161.24.0/21 IP: 2405:c9c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:27:13:64:0d:e7:de:7c:f3:5c:c6:f1:65:60:2c:56:1b:d2:8d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:40:43 2026 GMT Not After : May 1 23:45:43 2027 GMT Subject: CN=EBA9D784E9CC3F2A70EB526976A01F48F5F52951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d3:0d:36:eb:ba:1b:b5:04:4c:4f:7e:ec:3c: ed:af:68:33:c4:3e:8f:46:f8:5c:11:84:5f:16:6e: a7:e0:d0:13:4a:a6:9c:c4:df:9e:e1:78:07:9c:48: 56:0f:3c:e8:5d:a2:b3:4a:e7:30:b2:3a:51:d4:b0: 81:ec:bc:4e:56:1b:06:fa:ff:05:ef:70:3c:95:ef: 82:cc:f8:6e:94:f5:37:e0:3e:df:c7:08:aa:d6:4d: f7:1c:72:70:4e:c8:91:c9:6c:07:07:7f:9d:17:7f: 51:c6:54:e7:dc:03:4c:55:5f:dd:f0:bd:7a:bf:a5: 7c:3c:92:68:e1:07:55:5c:51:92:9f:4d:30:23:fd: aa:97:b3:e7:d7:f2:a4:c5:bd:42:d3:14:9e:43:77: 6c:7c:0b:d4:5a:9f:1e:ac:8b:d6:2f:51:7b:bf:95: 30:31:0e:74:60:4c:ce:04:cc:45:89:ad:18:42:b1: 81:1b:e7:0e:2b:25:5f:b0:e1:d1:13:78:17:e1:35: 1d:65:4a:e5:65:b6:d5:34:8f:28:17:4f:63:d8:40: b4:b9:9a:80:70:8e:fc:a1:74:46:95:2f:ab:ef:7e: ab:01:1a:8e:e6:bd:ac:b8:66:ae:08:4b:b9:ca:53: da:ed:2d:c9:b0:31:d7:7c:29:30:5e:67:0a:05:be: 6e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:A9:D7:84:E9:CC:3F:2A:70:EB:52:69:76:A0:1F:48:F5:F5:29:51 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.161.24.0/21 IPv6: 2405:c9c0::/32 Signature Algorithm: sha256WithRSAEncryption 26:a3:7f:48:fe:f6:8f:a4:5b:4d:b5:9e:ef:f9:2f:b0:10:ee: f9:27:a5:21:fb:01:20:d5:44:9e:43:21:e6:a4:80:7d:2f:9f: 7d:27:d4:91:6c:10:92:95:e9:f4:08:02:f7:d0:09:21:69:c8: 9b:ef:9b:b2:98:7e:6f:64:e7:9c:9c:86:23:42:32:c4:1b:64: c5:23:7f:12:1a:42:72:1c:b9:4c:88:93:38:7a:81:5a:b4:26: 92:0a:19:65:48:af:61:49:11:af:67:3e:a8:48:8f:cc:1b:94: 87:8f:73:a3:2d:b8:7b:64:06:d2:7d:5b:4c:50:0b:43:79:50: 61:10:f2:77:1a:6d:8f:9d:51:13:e2:6b:8b:fd:d2:46:cb:ba: 6a:1a:3a:ce:b5:ea:3f:f1:4a:27:50:ba:0c:8f:d1:a2:81:9a: c4:9d:5f:f1:f0:4d:22:37:84:77:c4:f6:5a:72:f8:0a:30:a3: f1:e1:8e:74:d7:38:07:ba:6d:b5:c3:a4:e0:2d:a1:78:c3:f2: 39:10:9d:e8:50:24:bf:a7:5a:7c:f4:4f:cb:e6:0b:6c:d6:26: f0:fc:79:87:8b:c5:99:c9:53:c2:c7:90:e3:59:77:18:1a:15: 8c:2f:2e:fe:77:88:f8:67:79:a4:42:a7:e3:06:b3:4f:2b:b4: 77:37:44:16 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUUScTZA3n3nzzXMbxZWAsVhvSjWgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDA0M1oX DTI3MDUwMTIzNDU0M1owMzExMC8GA1UEAxMoRUJBOUQ3ODRFOUNDM0YyQTcwRUI1 MjY5NzZBMDFGNDhGNUY1Mjk1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPTDTbruhu1BExPfuw87a9oM8Q+j0b4XBGEXxZup+DQE0qmnMTfnuF4B5xI Vg886F2is0rnMLI6UdSwgey8TlYbBvr/Be9wPJXvgsz4bpT1N+A+38cIqtZN9xxy cE7IkclsBwd/nRd/UcZU59wDTFVf3fC9er+lfDySaOEHVVxRkp9NMCP9qpez59fy pMW9QtMUnkN3bHwL1FqfHqyL1i9Re7+VMDEOdGBMzgTMRYmtGEKxgRvnDislX7Dh 0RN4F+E1HWVK5WW21TSPKBdPY9hAtLmagHCO/KF0RpUvq+9+qwEajua9rLhmrghL ucpT2u0tybAx13wpMF5nCgW+bhUCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOup14TpzD8qcOtSaXagH0j19SlRMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzAyMTU4YWVjLTUyODEtNDJlNi05NzliLWZjYTYxZDQ3Yzg0NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wMjE1OGFl Yy01MjgxLTQyZTYtOTc5Yi1mY2E2MWQ0N2M4NDUvMC9FQkE5RDc4NEU5Q0MzRjJB NzBFQjUyNjk3NkEwMUY0OEY1RjUyOTUxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQDy6EYMA0EAgACMAcDBQAkBcnAMA0GCSqGSIb3DQEBCwUAA4IBAQAmo39I/vaP pFtNtZ7v+S+wEO75J6Uh+wEg1USeQyHmpIB9L599J9SRbBCSlen0CAL30Akhacib 75uymH5vZOecnIYjQjLEG2TFI38SGkJyHLlMiJM4eoFatCaSChllSK9hSRGvZz6o SI/MG5SHj3OjLbh7ZAbSfVtMUAtDeVBhEPJ3Gm2PnVET4muL/dJGy7pqGjrOteo/ 8UonULoMj9GigZrEnV/x8E0iN4R3xPZacvgKMKPx4Y501zgHum21w6TgLaF4w/I5 EJ3oUCS/p1p89E/L5gts1ibw/HmHi8WZyVPCx5DjWXcYGhWMLy7+d4j4Z3mkQqfj BrNPK7R3N0QW -----END CERTIFICATE-----Generated at Wed May 13 01:07:09 2026 by rpki-client