$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.cer File: EBFE4CA91514CAC61F1B83534BB158D90BDD4142.cer (raw, json) Hash identifier: vuJpJRiazzggSCoJmE49FZoG1TuEcqBew1C+Z0rLSxA= Subject key identifier: EB:FE:4C:A9:15:14:CA:C6:1F:1B:83:53:4B:B1:58:D9:0B:DD:41:42 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 417079AE5EF4E6EF104C5FC0E7F24B6AFDF8221D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft caRepository: rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:45:42 +0000 Certificate not after: Sun 02 May 2027 01:50:42 +0000 Subordinate resources: IP: 203.175.126.0/23 IP: 2001:df3:5c40::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:70:79:ae:5e:f4:e6:ef:10:4c:5f:c0:e7:f2:4b:6a:fd:f8:22:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:45:42 2026 GMT Not After : May 2 01:50:42 2027 GMT Subject: CN=EBFE4CA91514CAC61F1B83534BB158D90BDD4142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5c:b7:91:ac:95:bc:a9:27:43:c8:37:a2:f4: c6:0a:8b:14:6a:33:6d:57:96:9f:df:1b:3a:27:d6: 44:56:e4:a2:78:a9:5e:92:42:39:59:a5:2f:7d:80: 64:c4:c5:ee:5f:ba:d4:36:62:c9:7e:74:7e:b6:37: 06:5d:bd:33:95:12:fb:c3:12:c7:c2:52:ef:1a:bf: 86:4d:a2:c9:55:89:46:9f:e2:34:20:12:bd:3f:ca: dd:11:79:5e:c7:e6:f2:9a:8a:e7:b2:93:e5:ce:bd: 72:cb:b1:8b:57:51:84:24:37:5b:61:c1:d4:e9:b1: d7:a8:9d:c0:9e:8e:8e:26:56:16:e9:83:60:3c:f3: 42:94:e2:38:2c:b8:db:95:7c:cd:b8:4a:76:d1:e0: fb:71:5d:e2:6c:dd:8a:71:6e:e3:13:84:12:51:b3: 70:dc:2c:4f:80:e3:7d:78:9b:94:f0:b3:23:50:a1: 43:6c:ed:5e:43:29:a0:8b:67:d5:80:02:ae:20:25: 07:fb:91:15:b7:3f:4c:80:f4:f9:7a:7b:2c:85:c5: c7:f4:7d:f5:0f:5d:4e:3a:7b:15:5d:b7:9f:ed:dd: 41:fc:f6:c1:b6:88:9a:4e:bc:38:f4:d1:9f:ce:1f: 93:30:36:99:18:df:e1:87:ad:0a:ed:dd:02:79:07: ee:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:FE:4C:A9:15:14:CA:C6:1F:1B:83:53:4B:B1:58:D9:0B:DD:41:42 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.175.126.0/23 IPv6: 2001:df3:5c40::/48 Signature Algorithm: sha256WithRSAEncryption 1f:4a:10:4b:ad:bf:71:e9:74:30:85:a6:ce:fb:d1:5c:c0:cb: a8:96:9d:db:fb:3f:b5:ed:3e:5f:89:2d:55:f8:ef:9d:eb:93: 80:ee:de:45:64:09:4a:08:01:56:1a:1f:40:63:07:7b:b3:fe: a1:77:70:dd:ba:13:ca:8d:6d:3f:80:71:1e:ad:a9:84:ad:0c: 66:f0:1a:22:87:9f:58:ca:b5:c0:3e:17:6a:ae:33:00:e7:65: 93:a0:8c:73:72:cd:65:ed:1a:f8:cf:c6:a0:19:d8:c1:5d:3b: 5f:9c:8c:38:35:d9:e1:d7:8d:15:f5:bd:c1:e4:cf:5e:70:6d: c4:50:fd:7e:95:25:5b:7c:77:fc:c8:3e:64:6e:db:23:db:9c: 53:4f:c5:1d:83:df:3f:b6:6b:ed:a2:69:bd:2f:08:16:d6:42: 7f:cb:44:99:22:bc:d2:fa:0c:68:f0:8a:60:41:bf:da:da:88: 66:7f:be:8d:2e:8a:d5:e5:2f:ee:a5:91:1d:70:b6:fb:4c:f5: df:26:7b:b6:93:32:0d:5b:a0:6b:fe:67:cc:55:a8:57:d0:2b: 9d:3a:58:25:ae:a9:9e:67:5b:a4:20:f9:0a:d4:69:37:ac:61: 54:2e:0a:e0:d5:38:a6:04:85:06:98:5b:91:06:d1:04:d1:d8: 8e:8c:91:67 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUQXB5rl705u8QTF/A5/JLav34Ih0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDU0MloX DTI3MDUwMjAxNTA0MlowMzExMC8GA1UEAxMoRUJGRTRDQTkxNTE0Q0FDNjFGMUI4 MzUzNEJCMTU4RDkwQkRENDE0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALdct5GslbypJ0PIN6L0xgqLFGozbVeWn98bOifWRFbkonipXpJCOVmlL32A ZMTF7l+61DZiyX50frY3Bl29M5US+8MSx8JS7xq/hk2iyVWJRp/iNCASvT/K3RF5 Xsfm8pqK57KT5c69csuxi1dRhCQ3W2HB1Omx16idwJ6OjiZWFumDYDzzQpTiOCy4 25V8zbhKdtHg+3Fd4mzdinFu4xOEElGzcNwsT4DjfXiblPCzI1ChQ2ztXkMpoItn 1YACriAlB/uRFbc/TID0+Xp7LIXFx/R99Q9dTjp7FV23n+3dQfz2wbaImk68OPTR n84fkzA2mRjf4YetCu3dAnkH7lsCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOv+TKkVFMrGHxuDU0uxWNkL3UFCMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2JlMGNiNjMwLTYzNmEtNGI2YS05M2RmLWI1ZDkwOGZlNmVlNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iZTBjYjYz MC02MzZhLTRiNmEtOTNkZi1iNWQ5MDhmZTZlZTcvMC9FQkZFNENBOTE1MTRDQUM2 MUYxQjgzNTM0QkIxNThEOTBCREQ0MTQyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBy69+MA8EAgACMAkDBwAgAQ3zXEAwDQYJKoZIhvcNAQELBQADggEBAB9KEEut v3HpdDCFps770VzAy6iWndv7P7XtPl+JLVX4753rk4Du3kVkCUoIAVYaH0BjB3uz /qF3cN26E8qNbT+AcR6tqYStDGbwGiKHn1jKtcA+F2quMwDnZZOgjHNyzWXtGvjP xqAZ2MFdO1+cjDg12eHXjRX1vcHkz15wbcRQ/X6VJVt8d/zIPmRu2yPbnFNPxR2D 3z+2a+2iab0vCBbWQn/LRJkivNL6DGjwimBBv9raiGZ/vo0uitXlL+6lkR1wtvtM 9d8me7aTMg1boGv+Z8xVqFfQK506WCWuqZ5nW6Qg+QrUaTesYVQuCuDVOKYEhQaY W5EG0QTR2I6MkWc= -----END CERTIFICATE-----Generated at Tue May 12 22:32:19 2026 by rpki-client