$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EEB70538199D447E9C92F6547EB45B40E5762DCF.cer File: EEB70538199D447E9C92F6547EB45B40E5762DCF.cer (raw, json) Hash identifier: rlUKjSrw3IPGiAU3NAJpF0WWasdpRarejL9ctj/YGkM= Subject key identifier: EE:B7:05:38:19:9D:44:7E:9C:92:F6:54:7E:B4:5B:40:E5:76:2D:CF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1DAA2C4553072DFB5A490781E88DDB6657800977 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:51:51 +0000 Certificate not after: Sun 02 May 2027 01:56:51 +0000 Subordinate resources: IP: 103.7.104.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:aa:2c:45:53:07:2d:fb:5a:49:07:81:e8:8d:db:66:57:80:09:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:51:51 2026 GMT Not After : May 2 01:56:51 2027 GMT Subject: CN=EEB70538199D447E9C92F6547EB45B40E5762DCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:44:f6:7e:bb:f5:d4:be:4a:de:cf:fc:55:38: 71:df:ff:db:08:bf:91:62:37:03:e8:c7:6c:41:6d: b7:86:49:b2:21:c7:18:bb:09:2b:76:d4:f6:a0:a1: 05:2e:3e:7f:0a:4b:4e:3e:af:56:e4:c7:58:e6:0f: 9a:a1:0d:64:d0:9b:ef:33:bc:bb:7d:48:aa:f4:1f: 34:47:25:3d:18:3d:c0:1f:47:05:5f:1b:83:5d:0c: 09:3d:bb:99:a7:72:38:e0:2a:29:68:94:32:23:4a: 1f:ed:a0:44:88:5c:84:82:fc:20:1e:87:14:bc:bf: ef:fe:48:6c:1e:03:e5:31:ec:aa:5e:f2:2b:d1:d2: 87:ab:b7:86:c6:16:fa:67:60:6f:d2:c9:39:3b:06: f5:90:2e:d2:2b:ff:76:10:4d:3d:00:ce:d7:e8:a2: b3:1e:97:8b:31:d3:3b:87:29:ae:6f:bf:b2:79:72: a5:2d:e9:a2:7d:1a:10:70:1b:3c:0e:37:c8:a2:bc: c9:3f:c3:b3:27:f7:2d:a4:bf:11:05:26:2f:b9:b7: 3e:62:6f:df:68:61:fd:ff:79:b6:73:09:85:af:63: c8:49:5a:b0:97:72:91:01:1a:dc:a6:99:65:e9:4c: ef:ef:ee:93:b1:c6:a3:be:c8:fb:01:98:98:4a:14: 6a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EE:B7:05:38:19:9D:44:7E:9C:92:F6:54:7E:B4:5B:40:E5:76:2D:CF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.7.104.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:6a:0d:43:37:51:fd:a8:d3:31:36:03:5d:2f:87:57:9a:b4: 16:46:74:e5:28:d0:4f:8f:8e:80:63:a7:a6:dd:38:7d:8e:bf: 89:ff:49:c6:2d:93:20:cd:61:5e:fa:75:2a:2e:63:4e:65:0a: 38:57:17:46:5e:97:bf:b8:cf:56:10:45:95:19:fc:63:81:ff: 56:c2:45:2d:2a:90:8a:9f:0e:8a:c5:76:96:7a:66:b2:67:0e: f3:84:bf:0b:36:1d:e2:e9:4b:98:67:22:c5:05:e6:97:9c:c3: 29:5a:ba:d2:51:c9:1c:d7:63:6c:17:79:62:45:b7:1c:cf:e6: 7c:61:a2:45:db:0b:4c:df:c9:5a:12:f9:a1:62:64:9d:fd:c3: d9:99:2e:34:b0:c8:39:4a:22:3f:15:ff:e4:ff:e9:48:64:2c: 5d:94:a6:4c:cd:df:91:34:f2:1c:f9:26:44:be:4d:30:4d:1b: ae:54:b1:76:cd:22:34:fd:b1:d3:23:2a:4e:50:99:1f:91:02: 02:b7:68:fe:e6:3f:f8:45:35:5a:5f:4b:40:fa:3e:d7:02:96: 4a:d7:d4:67:41:27:4c:b4:81:62:87:85:76:db:7a:f7:63:ca: 0a:3e:27:12:73:a9:3c:42:92:da:74:98:ac:fd:91:fd:e3:62: 66:42:20:9a -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUHaosRVMHLftaSQeB6I3bZleACXcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTE1MVoX DTI3MDUwMjAxNTY1MVowMzExMC8GA1UEAxMoRUVCNzA1MzgxOTlENDQ3RTlDOTJG NjU0N0VCNDVCNDBFNTc2MkRDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5E9n679dS+St7P/FU4cd//2wi/kWI3A+jHbEFtt4ZJsiHHGLsJK3bU9qCh BS4+fwpLTj6vVuTHWOYPmqENZNCb7zO8u31IqvQfNEclPRg9wB9HBV8bg10MCT27 madyOOAqKWiUMiNKH+2gRIhchIL8IB6HFLy/7/5IbB4D5THsql7yK9HSh6u3hsYW +mdgb9LJOTsG9ZAu0iv/dhBNPQDO1+iisx6XizHTO4cprm+/snlypS3pon0aEHAb PA43yKK8yT/Dsyf3LaS/EQUmL7m3PmJv32hh/f95tnMJha9jyElasJdykQEa3KaZ ZelM7+/uk7HGo77I+wGYmEoUamMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO63BTgZnUR+nJL2VH60W0Dldi3PMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M3NmM3ODI1LThiM2QtNDY2Yy1iYTBjLTk5NTUzYzFkNzNlYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jNzZjNzgy NS04YjNkLTQ2NmMtYmEwYy05OTU1M2MxZDczZWEvMC9FRUI3MDUzODE5OUQ0NDdF OUM5MkY2NTQ3RUI0NUI0MEU1NzYyRENGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZwdoMA0GCSqGSIb3DQEBCwUAA4IBAQALag1DN1H9qNMxNgNdL4dXmrQWRnTl KNBPj46AY6em3Th9jr+J/0nGLZMgzWFe+nUqLmNOZQo4VxdGXpe/uM9WEEWVGfxj gf9WwkUtKpCKnw6KxXaWemayZw7zhL8LNh3i6UuYZyLFBeaXnMMpWrrSUckc12Ns F3liRbccz+Z8YaJF2wtM38laEvmhYmSd/cPZmS40sMg5SiI/Ff/k/+lIZCxdlKZM zd+RNPIc+SZEvk0wTRuuVLF2zSI0/bHTIypOUJkfkQICt2j+5j/4RTVaX0tA+j7X ApZK19RnQSdMtIFih4V223r3Y8oKPicSc6k8QpLadJis/ZH942JmQiCa -----END CERTIFICATE-----Generated at Tue May 12 22:45:30 2026 by rpki-client