$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer File: EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer (raw, json) Hash identifier: wTWlloW9CxNL+SreeO2tb35QCZ9D5URX63qW8HIb9s8= Subject key identifier: EE:C8:29:8F:63:51:E0:D1:E9:09:9D:89:D5:2C:21:BD:F5:51:07:3F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 172B4E975F0A156223D659DB296D48A1DB1F3C5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:19:11 +0000 Certificate not after: Sun 02 May 2027 01:24:11 +0000 Subordinate resources: IP: 103.125.184.0/23 IP: 2001:df7:2f00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:2b:4e:97:5f:0a:15:62:23:d6:59:db:29:6d:48:a1:db:1f:3c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:19:11 2026 GMT Not After : May 2 01:24:11 2027 GMT Subject: CN=EEC8298F6351E0D1E9099D89D52C21BDF551073F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f4:61:8d:19:62:95:64:ff:88:73:a8:20:80: f9:7f:6a:48:ab:ce:62:b9:f2:f6:71:8d:a8:e7:12: 74:d4:53:e1:13:29:76:fc:c2:d9:69:ce:32:2f:fe: 0b:e5:29:bd:47:84:39:f2:9f:a7:b0:77:6d:7c:be: c6:fa:e2:17:f6:03:7e:41:41:db:fd:12:8f:62:ff: f8:1f:9f:e1:0d:22:1a:ef:14:85:82:f8:f0:07:8d: 64:6c:45:6b:c7:50:a1:d8:75:ac:30:69:e6:f9:4e: 81:0c:03:19:9c:c9:fe:5e:12:c3:87:f4:50:6b:ac: 6c:f5:5d:b2:d3:34:c2:72:7f:39:39:d8:1e:00:90: 9b:92:10:d2:d1:88:f4:97:d8:eb:a1:65:98:f4:9c: fc:e0:a2:c0:f4:4e:23:7a:6d:6b:60:33:19:c8:87: 8d:82:b5:56:a1:6a:26:df:44:9a:aa:3f:98:31:be: 7a:9c:17:20:35:4d:d6:a1:18:70:33:96:51:4f:99: 4a:fa:41:9d:58:dd:52:b3:09:eb:80:d3:b4:42:a5: 71:9a:75:d7:80:8a:9a:31:52:3f:48:f4:2a:3e:53: 27:26:30:bd:cd:8b:73:6e:d9:9e:19:90:0f:c0:e8: 9c:a6:8b:84:23:fb:b8:b9:1c:33:0f:dc:69:b6:64: 20:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EE:C8:29:8F:63:51:E0:D1:E9:09:9D:89:D5:2C:21:BD:F5:51:07:3F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.125.184.0/23 IPv6: 2001:df7:2f00::/48 Signature Algorithm: sha256WithRSAEncryption 99:b9:73:78:2a:0c:d9:b0:e1:be:29:69:ee:a3:0b:2d:15:bd: 26:0c:9f:d2:65:0d:ff:af:ec:37:40:d3:31:45:b9:1b:5f:f7: a0:02:62:3f:ca:3b:ae:10:ac:45:98:69:cd:b0:58:7e:aa:1d: b5:96:b3:7b:ca:90:e9:e2:33:26:76:02:2c:3f:b7:ed:dc:b5: 26:d3:b8:9d:3f:ad:82:e1:ef:5e:5b:21:84:4c:52:09:fb:74: c2:03:97:66:4b:42:f1:09:05:22:d5:68:78:9a:3c:ce:a4:68: a5:78:04:e6:00:35:44:04:7f:db:79:b5:63:45:71:7a:86:bf: 9a:d7:67:1b:09:31:bf:f6:cc:1b:8a:18:d1:b4:44:3b:e4:f7: 5c:d4:22:7f:3b:89:5f:63:7c:f5:e5:8d:09:d2:4c:67:83:0a: aa:d1:d3:4b:af:4a:25:f0:2f:8b:7a:eb:1b:da:e6:ca:8b:cd: 36:be:30:00:a0:d3:b4:41:e3:df:e9:86:80:01:db:f4:dd:09: 89:ff:2b:f5:9c:b0:9f:5e:b2:84:c2:93:4e:ea:1c:e4:b1:1c: 51:e0:de:f8:63:3b:f8:c2:3c:a8:5d:d3:8f:f4:6d:2b:9d:38: 92:19:28:ce:2d:ee:41:aa:e8:a9:71:7c:d1:df:62:34:60:ce: 84:1a:0e:f9 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUFytOl18KFWIj1lnbKW1IodsfPF8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTkxMVoX DTI3MDUwMjAxMjQxMVowMzExMC8GA1UEAxMoRUVDODI5OEY2MzUxRTBEMUU5MDk5 RDg5RDUyQzIxQkRGNTUxMDczRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/0YY0ZYpVk/4hzqCCA+X9qSKvOYrny9nGNqOcSdNRT4RMpdvzC2WnOMi/+ C+UpvUeEOfKfp7B3bXy+xvriF/YDfkFB2/0Sj2L/+B+f4Q0iGu8UhYL48AeNZGxF a8dQodh1rDBp5vlOgQwDGZzJ/l4Sw4f0UGusbPVdstM0wnJ/OTnYHgCQm5IQ0tGI 9JfY66FlmPSc/OCiwPROI3pta2AzGciHjYK1VqFqJt9Emqo/mDG+epwXIDVN1qEY cDOWUU+ZSvpBnVjdUrMJ64DTtEKlcZp114CKmjFSP0j0Kj5TJyYwvc2Lc27ZnhmQ D8DonKaLhCP7uLkcMw/cabZkICkCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO7IKY9jUeDR6QmdidUsIb31UQc/MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzkzZDkyNjhiLTVlNjEtNDNiMi1hNjI0LTQxYjAxZDdkNzZiMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85M2Q5MjY4 Yi01ZTYxLTQzYjItYTYyNC00MWIwMWQ3ZDc2YjIvMC9FRUM4Mjk4RjYzNTFFMEQx RTkwOTlEODlENTJDMjFCREY1NTEwNzNGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ324MA8EAgACMAkDBwAgAQ33LwAwDQYJKoZIhvcNAQELBQADggEBAJm5c3gq DNmw4b4pae6jCy0VvSYMn9JlDf+v7DdA0zFFuRtf96ACYj/KO64QrEWYac2wWH6q HbWWs3vKkOniMyZ2Aiw/t+3ctSbTuJ0/rYLh715bIYRMUgn7dMIDl2ZLQvEJBSLV aHiaPM6kaKV4BOYANUQEf9t5tWNFcXqGv5rXZxsJMb/2zBuKGNG0RDvk91zUIn87 iV9jfPXljQnSTGeDCqrR00uvSiXwL4t66xva5sqLzTa+MACg07RB49/phoAB2/Td CYn/K/WcsJ9esoTCk07qHOSxHFHg3vhjO/jCPKhd04/0bSudOJIZKM4t7kGq6Klx fNHfYjRgzoQaDvk= -----END CERTIFICATE-----Generated at Tue May 12 22:45:29 2026 by rpki-client