$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer File: EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer (raw, json) Hash identifier: wXUrJSLtpAntruijOVvd/zgRamxo1GSCZ7J+V82cUY4= Subject key identifier: EF:4A:2E:C5:53:79:CA:2F:E3:A7:D2:4D:D2:C2:85:E8:BF:3A:39:FC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7172BE4A5D536F68A7556D99592263B4B7366BEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:54:03 +0000 Certificate not after: Sun 02 May 2027 01:59:03 +0000 Subordinate resources: IP: 2001:df4:64c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:72:be:4a:5d:53:6f:68:a7:55:6d:99:59:22:63:b4:b7:36:6b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:54:03 2026 GMT Not After : May 2 01:59:03 2027 GMT Subject: CN=EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2c:d7:9b:4a:54:70:6d:50:a2:8a:8a:eb:41: 44:d8:66:4e:73:32:74:41:cb:16:9b:e8:f0:16:90: ce:32:a5:61:a9:24:41:31:20:f6:e2:23:f2:9e:89: 6b:0d:0a:92:fb:ed:9f:c0:a4:b2:a0:e7:96:5e:52: 7c:7a:88:92:67:79:6a:45:07:33:c6:5a:ce:ee:6a: 3e:5a:92:6a:1c:3b:1f:26:03:d1:bb:95:35:5c:0d: be:66:4c:08:a4:61:fc:65:0d:fd:ff:09:3a:3c:51: 75:49:f8:bc:ca:6d:43:ae:25:b2:ab:4e:80:90:26: 99:88:04:58:ff:b0:3b:3e:f4:f8:5a:5f:99:b2:59: 6b:c7:b8:80:e3:9a:b2:14:a4:2a:69:d6:8d:dc:04: 89:dc:5c:fd:bb:24:95:97:c7:29:e2:06:bf:4a:e4: 15:5f:69:80:5d:f4:7f:6d:4a:ea:1e:c3:41:c4:fa: 74:be:f0:b5:6b:a5:1d:14:77:6c:75:42:d5:a6:48: af:4c:12:b8:1e:16:c2:8b:9c:6f:1c:55:05:16:fb: 5d:a3:91:80:25:0d:f0:b7:08:fe:c4:3f:5b:0d:e9: d7:89:b2:d1:e5:bc:a8:58:72:c7:44:3a:33:4e:52: d8:cb:f1:29:1b:3c:ca:db:de:86:d9:2b:1e:25:45: eb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:4A:2E:C5:53:79:CA:2F:E3:A7:D2:4D:D2:C2:85:E8:BF:3A:39:FC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:64c0::/48 Signature Algorithm: sha256WithRSAEncryption 10:75:e1:d4:bb:d7:08:da:b1:66:dd:0e:33:01:de:dd:f2:20: 2c:e9:bc:e9:36:76:1e:f7:7e:7a:6a:d3:95:da:4a:64:0d:fb: e4:80:0b:83:89:b2:a2:b8:1b:70:10:3b:33:92:17:58:ea:62: ba:14:d8:2b:d5:d0:2e:53:7b:97:89:61:39:b9:d2:87:a1:78: 7b:87:16:ad:47:cb:ae:41:d6:a9:79:21:04:92:49:ab:97:91: 96:24:92:5c:42:32:59:f6:c5:74:3b:33:e9:bd:85:1b:32:8e: b1:d5:76:07:19:4e:3b:68:78:90:9a:e2:29:8c:d5:6d:88:71: c6:f5:9d:cd:06:f5:84:31:c2:fe:5f:cf:3e:64:d6:d1:18:2f: ef:64:da:fe:cb:54:4d:1c:76:30:d7:30:86:18:38:b4:38:d2: f2:44:6c:cc:8e:4e:88:98:a1:c8:ab:b2:66:f2:08:e6:f9:55: 87:0f:76:2b:55:b9:8c:33:5d:e7:b3:91:69:e0:d8:46:60:92: 29:b2:4c:6a:dd:de:1b:09:2d:de:71:f4:49:6a:c3:d0:e7:76: b7:01:ee:f1:d0:d3:ff:02:ff:fe:50:e2:38:eb:ef:a1:77:cc: 13:6b:93:6d:c2:54:8b:5e:e9:2e:8d:94:c5:4b:28:52:8d:7e: 61:04:6b:76 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUcXK+Sl1Tb2inVW2ZWSJjtLc2a+4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTQwM1oX DTI3MDUwMjAxNTkwM1owMzExMC8GA1UEAxMoRUY0QTJFQzU1Mzc5Q0EyRkUzQTdE MjRERDJDMjg1RThCRjNBMzlGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANUs15tKVHBtUKKKiutBRNhmTnMydEHLFpvo8BaQzjKlYakkQTEg9uIj8p6J aw0Kkvvtn8CksqDnll5SfHqIkmd5akUHM8Zazu5qPlqSahw7HyYD0buVNVwNvmZM CKRh/GUN/f8JOjxRdUn4vMptQ64lsqtOgJAmmYgEWP+wOz70+FpfmbJZa8e4gOOa shSkKmnWjdwEidxc/bsklZfHKeIGv0rkFV9pgF30f21K6h7DQcT6dL7wtWulHRR3 bHVC1aZIr0wSuB4WwoucbxxVBRb7XaORgCUN8LcI/sQ/Ww3p14my0eW8qFhyx0Q6 M05S2MvxKRs8ytvehtkrHiVF60cCAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO9KLsVTecov46fSTdLChei/Ojn8MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NhZmNiZmJiLWJhM2YtNGQ1My1hMDRmLTE0ZDZmNGJlMGNiMS8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jYWZjYmZi Yi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMS9FRjRBMkVDNTUzNzlDQTJG RTNBN0QyNEREMkMyODVFOEJGM0EzOUZDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN9GTAMA0GCSqGSIb3DQEBCwUAA4IBAQAQdeHUu9cI2rFm3Q4zAd7d8iAs 6bzpNnYe9356atOV2kpkDfvkgAuDibKiuBtwEDszkhdY6mK6FNgr1dAuU3uXiWE5 udKHoXh7hxatR8uuQdapeSEEkkmrl5GWJJJcQjJZ9sV0OzPpvYUbMo6x1XYHGU47 aHiQmuIpjNVtiHHG9Z3NBvWEMcL+X88+ZNbRGC/vZNr+y1RNHHYw1zCGGDi0ONLy RGzMjk6ImKHIq7Jm8gjm+VWHD3YrVbmMM13ns5Fp4NhGYJIpskxq3d4bCS3ecfRJ asPQ53a3Ae7x0NP/Av/+UOI46++hd8wTa5NtwlSLXukujZTFSyhSjX5hBGt2 -----END CERTIFICATE-----Generated at Tue May 12 22:39:10 2026 by rpki-client