$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer File: EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer (raw, json) Hash identifier: zeGT3cypfrKwulbBbbSJDbmGeV7tTpHqoYAxV2gttqY= Subject key identifier: EE:75:1C:DC:39:E4:73:04:C1:EE:51:ED:F5:BC:3F:DA:D0:F0:9B:86 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0FAFDFF775736F7AF645EEE318680A09FC36CFF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:53:50 +0000 Certificate not after: Sun 02 May 2027 01:58:50 +0000 Subordinate resources: IP: 103.144.128.0/23 IP: 2405:6d40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:af:df:f7:75:73:6f:7a:f6:45:ee:e3:18:68:0a:09:fc:36:cf:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:53:50 2026 GMT Not After : May 2 01:58:50 2027 GMT Subject: CN=EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a6:f2:6a:f9:ed:69:90:c6:3a:db:35:b3:e0: e9:57:49:f8:53:41:0f:6b:ee:fc:f9:35:ef:18:3d: 46:78:27:11:76:d3:e2:6b:3b:81:8b:d0:43:d1:20: 27:a4:4e:ee:fc:80:61:70:64:f7:80:a5:22:38:78: 4c:57:d6:79:ff:a3:2e:a7:52:bd:4b:67:89:d0:be: 54:b7:42:c0:3c:b8:c0:a7:e8:50:a0:09:9b:d1:e8: ad:58:35:0a:6f:27:1c:c8:c5:ce:da:9f:3f:b1:66: 49:6a:64:f5:0b:8a:0b:62:df:79:7b:0f:bf:a9:05: 44:09:8a:b2:b6:80:e2:0b:b0:b5:db:bf:3e:4f:12: c1:a3:39:3f:74:8f:a8:4e:62:60:12:7d:b6:1a:65: a8:fe:a3:35:03:7d:6d:06:53:39:15:39:39:3a:1e: 52:79:d7:20:3f:f7:3a:89:8f:d8:4e:2d:5f:66:0e: 43:af:fe:e6:04:51:d9:cc:63:2e:e2:9e:6b:f0:e4: 85:d0:60:6c:63:ee:c3:ba:06:64:f7:03:51:c2:f5: d3:1e:1e:06:75:90:73:a6:4d:0d:7f:6c:86:29:47: ee:d0:ed:af:96:f4:a7:64:6f:31:87:c9:5b:01:75: f8:fd:79:59:9e:99:45:89:d0:b4:fc:1d:f6:80:9c: 64:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EE:75:1C:DC:39:E4:73:04:C1:EE:51:ED:F5:BC:3F:DA:D0:F0:9B:86 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.128.0/23 IPv6: 2405:6d40::/32 Signature Algorithm: sha256WithRSAEncryption 24:cd:4f:e6:d5:8d:5c:41:43:5b:4d:f3:81:1f:fb:3c:b3:bd: aa:00:cb:2d:19:ba:79:55:4b:0d:b2:fc:6d:9a:95:02:e6:da: 11:cd:62:03:5d:51:68:87:91:6b:ac:66:2d:5b:c0:0c:1a:a3: f7:6c:18:3c:09:19:eb:8b:7e:3d:41:ac:fa:c3:ac:e6:2d:72: 52:39:10:95:d9:bc:fe:67:d4:cf:1f:a0:97:76:3b:da:9c:f5: e3:73:17:97:de:f1:3c:8b:9a:44:36:0e:cf:63:d0:2e:e3:fe: 54:0d:98:88:f1:1e:e1:34:f5:28:df:a3:e9:43:04:0a:dc:ed: 58:29:d9:71:ce:b2:47:2c:d2:98:cb:80:db:e8:c0:06:34:c5: 45:c9:1f:ed:5e:e7:b4:16:dc:b9:26:02:b3:d8:c4:43:55:bb: 11:11:b8:cf:b7:27:7b:f4:a1:b6:b5:90:74:be:f5:d8:87:73: b2:c2:2b:1c:cb:4a:2a:75:47:15:98:42:6f:fe:af:a0:ab:2e: 1f:de:26:3d:b3:90:48:6a:c9:ce:1c:0a:7f:e4:c9:cb:4f:b5: 7a:c5:18:1b:20:72:bf:08:21:a7:43:61:bc:8d:da:dc:0d:88: bc:44:fe:d8:b5:2e:e6:62:8d:5e:e0:b0:e4:8f:9d:28:9a:ef: 8c:bb:bf:cf -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUD6/f93Vzb3r2Re7jGGgKCfw2z/kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTM1MFoX DTI3MDUwMjAxNTg1MFowMzExMC8GA1UEAxMoRUU3NTFDREMzOUU0NzMwNEMxRUU1 MUVERjVCQzNGREFEMEYwOUI4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMKm8mr57WmQxjrbNbPg6VdJ+FNBD2vu/Pk17xg9RngnEXbT4ms7gYvQQ9Eg J6RO7vyAYXBk94ClIjh4TFfWef+jLqdSvUtnidC+VLdCwDy4wKfoUKAJm9HorVg1 Cm8nHMjFztqfP7FmSWpk9QuKC2LfeXsPv6kFRAmKsraA4guwtdu/Pk8SwaM5P3SP qE5iYBJ9thplqP6jNQN9bQZTORU5OToeUnnXID/3OomP2E4tX2YOQ6/+5gRR2cxj LuKea/DkhdBgbGPuw7oGZPcDUcL10x4eBnWQc6ZNDX9shilH7tDtr5b0p2RvMYfJ WwF1+P15WZ6ZRYnQtPwd9oCcZC0CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO51HNw55HMEwe5R7fW8P9rQ8JuGMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NhOTZmNDU4LWNlNWUtNDFhMi1hMjMyLTk5NjRmNDk4OGEwNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jYTk2ZjQ1 OC1jZTVlLTQxYTItYTIzMi05OTY0ZjQ5ODhhMDYvMC9FRTc1MUNEQzM5RTQ3MzA0 QzFFRTUxRURGNUJDM0ZEQUQwRjA5Qjg2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5CAMA0EAgACMAcDBQAkBW1AMA0GCSqGSIb3DQEBCwUAA4IBAQAkzU/m1Y1c QUNbTfOBH/s8s72qAMstGbp5VUsNsvxtmpUC5toRzWIDXVFoh5FrrGYtW8AMGqP3 bBg8CRnri349Qaz6w6zmLXJSORCV2bz+Z9TPH6CXdjvanPXjcxeX3vE8i5pENg7P Y9Au4/5UDZiI8R7hNPUo36PpQwQK3O1YKdlxzrJHLNKYy4Db6MAGNMVFyR/tXue0 Fty5JgKz2MRDVbsREbjPtyd79KG2tZB0vvXYh3Oywiscy0oqdUcVmEJv/q+gqy4f 3iY9s5BIasnOHAp/5MnLT7V6xRgbIHK/CCGnQ2G8jdrcDYi8RP7YtS7mYo1e4LDk j50omu+Mu7/P -----END CERTIFICATE-----Generated at Tue May 12 22:10:27 2026 by rpki-client