$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EE80ECA632F6BC4C8D648613C84A416B8D271E30.cer File: EE80ECA632F6BC4C8D648613C84A416B8D271E30.cer (raw, json) Hash identifier: h6U3ZOBfdyP7Hu4H/B2D53w9qXfudvWbCoiflLHo1Oo= Subject key identifier: EE:80:EC:A6:32:F6:BC:4C:8D:64:86:13:C8:4A:41:6B:8D:27:1E:30 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6B81E0365279B4EA6391603983E335DAB7AF7A6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/EE80ECA632F6BC4C8D648613C84A416B8D271E30.mft caRepository: rsync://rpki-rsync.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:59:54 +0000 Certificate not after: Sun 02 May 2027 01:04:54 +0000 Subordinate resources: IP: 103.166.8.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:81:e0:36:52:79:b4:ea:63:91:60:39:83:e3:35:da:b7:af:7a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:59:54 2026 GMT Not After : May 2 01:04:54 2027 GMT Subject: CN=EE80ECA632F6BC4C8D648613C84A416B8D271E30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e9:86:63:b8:00:f4:3d:88:af:be:1d:22:53: 92:31:69:be:db:b0:c0:dd:2f:6d:13:78:a1:3f:c6: 00:d9:83:c2:4a:45:6d:ee:51:6c:fa:88:ef:04:d1: 64:d6:3d:b4:67:4f:eb:35:e2:5a:ae:33:81:45:c7: f0:b1:63:9a:9c:1e:bd:4a:9e:48:f0:b8:1b:1d:91: c8:50:35:6e:2c:4a:8e:57:8b:47:09:98:e0:32:67: 56:6c:26:7e:cb:b1:f5:c0:9c:a1:9e:8e:d2:99:f4: 32:44:f0:c6:ce:32:d3:78:e0:d1:e0:b0:ed:cd:39: 7d:fb:0e:b6:35:cd:66:97:36:7f:9e:08:72:65:85: e3:8c:c0:53:5a:c4:43:a4:a3:70:a6:5e:88:ab:0a: 2c:87:76:01:80:f4:f4:dd:13:15:60:7a:49:eb:40: 7b:57:08:f3:14:44:10:0f:93:0e:94:93:c0:90:e3: 08:59:e9:3f:ec:99:1d:a3:8a:ac:62:0e:b6:36:b7: 99:ba:16:9f:45:d5:c9:37:e7:3d:36:5f:3d:27:d4: 26:b1:34:16:ca:71:bb:c8:68:8b:e4:5c:a5:65:4e: 9c:06:bd:e8:57:6e:81:f6:f2:f3:73:4a:57:34:36: b2:cc:33:fc:49:4e:ea:f9:a8:7e:9d:81:a8:50:b7: c5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EE:80:EC:A6:32:F6:BC:4C:8D:64:86:13:C8:4A:41:6B:8D:27:1E:30 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/EE80ECA632F6BC4C8D648613C84A416B8D271E30.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.8.0/23 Signature Algorithm: sha256WithRSAEncryption 94:ad:84:9e:c1:b2:a6:3d:1d:a2:26:bc:de:ce:31:da:2f:2f: 5b:c6:73:c7:91:6f:33:58:24:c4:72:11:bf:8a:4a:c2:d7:f9: 75:61:8c:64:9d:65:e3:b9:e7:07:6a:d0:ef:48:6a:17:a9:11: 67:2e:7e:5d:ab:85:14:27:dd:23:19:1d:cc:50:87:7e:5a:6b: 58:11:87:9c:b4:df:60:db:54:3e:c2:d0:c1:ae:c1:d7:1b:f5: 66:a3:40:04:65:44:e2:15:0f:43:38:fc:c2:78:ce:51:be:0d: 44:32:32:3d:c1:1f:04:c8:49:27:4b:8a:b6:48:3e:5e:91:71: c0:8f:ae:37:2a:a3:de:c0:84:48:df:52:e2:24:49:8c:c7:d6: 14:f3:6f:71:88:6e:bc:c0:c5:0f:8c:08:05:b9:09:10:cd:58: 69:10:b2:3a:c7:78:a4:40:2c:79:5d:a0:3c:e1:e2:ac:99:2d: a0:9e:ac:3b:05:67:88:a5:44:6b:d7:5e:ad:df:18:4f:c3:4c: 25:0a:d6:8d:93:d8:c4:05:80:2e:ce:56:0c:4c:a5:f1:1d:6d: 3c:24:4a:24:84:7a:52:a7:c7:0a:5e:45:b7:fc:dd:b0:eb:6d: 70:5d:d4:3a:b6:64:f4:9e:e6:5a:04:ab:83:53:86:1b:bc:36: 5c:b3:ce:c3 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUa4HgNlJ5tOpjkWA5g+M12revemowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTk1NFoX DTI3MDUwMjAxMDQ1NFowMzExMC8GA1UEAxMoRUU4MEVDQTYzMkY2QkM0QzhENjQ4 NjEzQzg0QTQxNkI4RDI3MUUzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPphmO4APQ9iK++HSJTkjFpvtuwwN0vbRN4oT/GANmDwkpFbe5RbPqI7wTR ZNY9tGdP6zXiWq4zgUXH8LFjmpwevUqeSPC4Gx2RyFA1bixKjleLRwmY4DJnVmwm fsux9cCcoZ6O0pn0MkTwxs4y03jg0eCw7c05ffsOtjXNZpc2f54IcmWF44zAU1rE Q6SjcKZeiKsKLId2AYD09N0TFWB6SetAe1cI8xREEA+TDpSTwJDjCFnpP+yZHaOK rGIOtja3mboWn0XVyTfnPTZfPSfUJrE0Fspxu8hoi+RcpWVOnAa96Fdugfby83NK VzQ2sswz/ElO6vmofp2BqFC3xQcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO6A7KYy9rxMjWSGE8hKQWuNJx4wMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc4MjIxMmMyLTNkNjgtNDg2Ny1iOTljLWZjNWNmNGQwZGJmMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ODIyMTJj Mi0zZDY4LTQ4NjctYjk5Yy1mYzVjZjRkMGRiZjEvMC9FRTgwRUNBNjMyRjZCQzRD OEQ2NDg2MTNDODRBNDE2QjhEMjcxRTMwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6YIMA0GCSqGSIb3DQEBCwUAA4IBAQCUrYSewbKmPR2iJrzezjHaLy9bxnPH kW8zWCTEchG/ikrC1/l1YYxknWXjuecHatDvSGoXqRFnLn5dq4UUJ90jGR3MUId+ WmtYEYectN9g21Q+wtDBrsHXG/Vmo0AEZUTiFQ9DOPzCeM5Rvg1EMjI9wR8EyEkn S4q2SD5ekXHAj643KqPewIRI31LiJEmMx9YU829xiG68wMUPjAgFuQkQzVhpELI6 x3ikQCx5XaA84eKsmS2gnqw7BWeIpURr116t3xhPw0wlCtaNk9jEBYAuzlYMTKXx HW08JEokhHpSp8cKXkW3/N2w621wXdQ6tmT0nuZaBKuDU4YbvDZcs87D -----END CERTIFICATE-----Generated at Tue May 12 22:03:37 2026 by rpki-client