$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer File: EC59C36AB88A35CEA64B4ED019F2F05317672299.cer (raw, json) Hash identifier: JXbVV82LF1+QYJaG27Y95lKbwsiEhfuBQKg2SpWbrZM= Subject key identifier: EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2C17F057E3884E7CD6EE4B3661F318F6E725DDAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft caRepository: rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:10:08 +0000 Certificate not after: Sun 02 May 2027 01:15:08 +0000 Subordinate resources: IP: 202.127.96.0/20 IP: 210.79.208.0/20 IP: 2406:5c00::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:17:f0:57:e3:88:4e:7c:d6:ee:4b:36:61:f3:18:f6:e7:25:dd:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:10:08 2026 GMT Not After : May 2 01:15:08 2027 GMT Subject: CN=EC59C36AB88A35CEA64B4ED019F2F05317672299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6a:36:3d:a6:c6:24:f6:4f:fc:02:d8:31:fc: 13:5f:43:09:53:ba:6a:cc:3b:6a:a7:26:ae:49:50: 96:1e:11:6f:89:03:57:5b:ba:4c:f2:20:5d:bd:8a: dd:92:54:81:f1:ad:f3:bd:08:be:f9:67:d1:ae:77: f9:c1:49:24:10:5a:79:7a:11:e5:da:b8:32:dd:9e: 4b:60:2e:7c:42:66:ed:c7:87:5d:8d:e4:05:95:e7: 1d:de:28:13:92:19:02:8b:18:86:0f:8f:32:a9:29: 4a:dd:71:e3:0d:4b:0c:fd:c0:0b:59:12:1d:7e:ec: 6e:2b:45:7b:8b:d9:03:9a:b1:27:92:78:46:61:54: d0:79:b1:c7:a0:8f:f7:0f:7f:83:c0:86:fd:ce:a0: 9c:60:3a:f4:72:02:ab:d2:4f:a4:91:bc:d4:c9:52: 0e:ff:62:44:70:4c:13:98:85:df:bd:98:fa:d8:41: dc:f5:ed:f9:dd:fd:2f:e7:02:9d:8a:06:a9:41:01: ac:98:67:5d:8d:a5:3f:5a:d5:61:fa:da:7d:7b:b6: 0e:48:12:ce:bb:32:98:37:78:3f:02:2e:a6:d7:ac: 26:7b:9c:7c:a7:be:be:39:09:8f:37:5d:92:d2:86: 07:6c:be:b2:41:8c:55:2f:05:7d:29:06:5d:41:55: e3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.127.96.0/20 210.79.208.0/20 IPv6: 2406:5c00::/32 Signature Algorithm: sha256WithRSAEncryption 1d:99:9f:f6:fb:86:11:dd:f3:12:bc:22:e1:9d:f4:30:5d:fc: f5:ac:b9:ed:7a:25:99:aa:a5:11:56:63:80:f5:a5:54:ac:23: 08:fb:57:af:51:91:53:97:21:d4:ec:8a:51:8d:a7:f8:75:68: 43:d5:98:14:a1:b5:8a:c6:ba:01:ad:63:6a:52:a1:91:63:d3: df:86:a7:09:d4:c0:be:0e:94:8d:ee:ec:93:ea:4d:ad:ad:de: 7a:16:d4:2b:0b:08:aa:a6:a6:ef:d5:11:5e:13:e6:ae:b8:7d: 23:d6:27:3c:03:e9:22:40:40:99:37:22:e8:30:3c:7a:6e:b1: b7:c5:7c:53:b1:6c:37:3b:ab:ff:8e:61:49:b2:27:0b:69:0e: 42:68:c6:a6:0d:0c:ff:a5:5d:d4:f8:02:8e:2b:5b:c2:c2:e8: c4:d2:e8:64:74:c1:9f:fe:7e:b3:8a:43:79:2d:b6:f8:80:a3: b0:e6:bb:62:4b:84:39:29:55:c8:97:21:85:1c:f2:30:8f:f9: 2a:84:24:d3:e4:91:42:1c:47:ce:ce:51:b5:71:2c:ae:b5:3f: b4:df:17:81:77:7a:68:cc:c9:de:2d:23:dd:94:e3:de:56:f4: cc:32:a8:a3:e0:66:bf:29:00:7d:c2:bc:17:aa:30:16:f4:39: 82:de:b7:2d -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIULBfwV+OITnzW7ks2YfMY9ucl3aswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTAwOFoX DTI3MDUwMjAxMTUwOFowMzExMC8GA1UEAxMoRUM1OUMzNkFCODhBMzVDRUE2NEI0 RUQwMTlGMkYwNTMxNzY3MjI5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANFqNj2mxiT2T/wC2DH8E19DCVO6asw7aqcmrklQlh4Rb4kDV1u6TPIgXb2K 3ZJUgfGt870Ivvln0a53+cFJJBBaeXoR5dq4Mt2eS2AufEJm7ceHXY3kBZXnHd4o E5IZAosYhg+PMqkpSt1x4w1LDP3AC1kSHX7sbitFe4vZA5qxJ5J4RmFU0Hmxx6CP 9w9/g8CG/c6gnGA69HICq9JPpJG81MlSDv9iRHBME5iF372Y+thB3PXt+d39L+cC nYoGqUEBrJhnXY2lP1rVYfrafXu2DkgSzrsymDd4PwIuptesJnucfKe+vjkJjzdd ktKGB2y+skGMVS8FfSkGXUFV4yMCAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOxZw2q4ijXOpktO0Bny8FMXZyKZMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg2NDUwMDMyLTU0OTItNGE1YS05NDNmLWJkYjQ3MzM0MTIzMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84NjQ1MDAz Mi01NDkyLTRhNWEtOTQzZi1iZGI0NzMzNDEyMzMvMC9FQzU5QzM2QUI4OEEzNUNF QTY0QjRFRDAxOUYyRjA1MzE3NjcyMjk5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQEyn9gAwQE0k/QMA0EAgACMAcDBQAkBlwAMA0GCSqGSIb3DQEBCwUAA4IBAQAd mZ/2+4YR3fMSvCLhnfQwXfz1rLnteiWZqqURVmOA9aVUrCMI+1evUZFTlyHU7IpR jaf4dWhD1ZgUobWKxroBrWNqUqGRY9PfhqcJ1MC+DpSN7uyT6k2trd56FtQrCwiq pqbv1RFeE+auuH0j1ic8A+kiQECZNyLoMDx6brG3xXxTsWw3O6v/jmFJsicLaQ5C aMamDQz/pV3U+AKOK1vCwujE0uhkdMGf/n6zikN5Lbb4gKOw5rtiS4Q5KVXIlyGF HPIwj/kqhCTT5JFCHEfOzlG1cSyutT+03xeBd3pozMneLSPdlOPeVvTMMqij4Ga/ KQB9wrwXqjAW9DmC3rct -----END CERTIFICATE-----Generated at Tue May 12 22:52:32 2026 by rpki-client