$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.cer File: EF52E239F082CFB1C35BB8D60B4615A60D4926E9.cer (raw, json) Hash identifier: CH5P8wPPXCTxxFBtR4KOyGa+2pIbbn50RyZksp86TII= Subject key identifier: EF:52:E2:39:F0:82:CF:B1:C3:5B:B8:D6:0B:46:15:A6:0D:49:26:E9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5FFB81963BEADEC76DFB5AEF4CAEA73F730F0675 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:36:19 +0000 Certificate not after: Sun 02 May 2027 02:41:19 +0000 Subordinate resources: IP: 103.102.0.0/23 IP: 103.131.50.0/23 IP: 2001:df2:bd00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:fb:81:96:3b:ea:de:c7:6d:fb:5a:ef:4c:ae:a7:3f:73:0f:06:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:36:19 2026 GMT Not After : May 2 02:41:19 2027 GMT Subject: CN=EF52E239F082CFB1C35BB8D60B4615A60D4926E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f6:71:54:e5:e6:f9:e6:27:d8:20:36:43:5a: c6:9f:1b:70:f4:88:a7:71:9b:3c:3e:25:4b:40:f4: 69:5c:af:51:37:4e:b2:9e:ab:fd:2e:2c:84:c1:cf: 57:3b:4b:db:0f:79:a9:e4:cc:cb:fd:83:37:24:a6: a4:1d:0a:0f:9b:f4:83:cf:cb:bc:3a:36:9d:4c:28: d5:4f:7a:4a:b5:f8:68:be:fb:a9:37:07:d2:3d:2a: 60:08:6d:c3:16:08:13:43:11:05:ee:b1:11:5e:07: 0c:11:17:d1:0a:f6:40:f4:9e:64:b2:fa:78:f2:70: 58:75:ad:f7:07:63:a0:b2:91:53:52:99:3e:b7:06: bb:75:f0:b5:37:e1:04:99:1b:06:de:24:fe:ac:35: 15:81:4b:6b:c4:ea:df:9c:90:bd:55:17:1a:52:8f: bf:7b:5c:c9:62:62:52:b2:7c:87:7b:50:0e:39:5d: 84:59:49:e6:7c:32:14:c3:43:52:21:74:96:c4:f0: 75:ac:7f:11:80:f5:2a:95:88:61:3d:43:01:c9:29: 07:78:ea:70:d2:15:67:e5:70:b2:27:a6:cd:c3:5e: a0:30:4b:07:54:d8:1c:61:28:30:16:23:14:71:3a: 1d:2b:b2:05:75:66:8d:75:e4:04:2b:04:d6:5e:a4: ab:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:52:E2:39:F0:82:CF:B1:C3:5B:B8:D6:0B:46:15:A6:0D:49:26:E9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.0.0/23 103.131.50.0/23 IPv6: 2001:df2:bd00::/48 Signature Algorithm: sha256WithRSAEncryption 71:36:f3:50:00:d8:cf:5c:62:d0:5f:06:a8:3a:ee:0c:38:51: ba:ad:79:37:06:a5:bc:56:30:23:ed:72:9a:78:07:93:0b:f5: 98:db:d5:bb:59:cb:5e:c7:4e:dc:af:97:37:a0:27:dc:98:41: 94:fc:25:68:e4:14:07:27:5b:51:02:1c:cf:70:91:66:b3:eb: 2c:fe:b9:29:ff:01:7a:e2:fd:f1:33:17:97:b0:85:1a:25:cc: 15:dd:95:25:16:64:ce:97:87:47:f9:1d:e2:7c:cc:84:09:02: b9:31:aa:89:72:db:99:04:6b:98:d9:fc:ff:6f:24:8b:7b:24: b7:82:7e:e5:b5:f4:25:b6:41:78:b5:c8:c4:f9:8d:59:b2:79: 99:05:d6:3f:32:06:31:e4:3d:4e:f4:07:a4:87:67:b8:36:ae: 6c:f3:89:3b:ac:0c:12:ae:f5:f7:ed:b1:d6:e8:14:9a:98:d7: 0e:bf:8a:a9:3e:d9:bc:ca:c0:69:e8:c3:5c:c7:c6:af:ea:b0: 6f:f4:b0:c8:ce:97:29:48:4b:a9:82:ee:eb:18:6a:58:20:c4: 09:f0:1b:3d:d8:6a:49:37:2d:23:83:c4:5f:86:c5:50:ce:02: 8e:50:ae:56:a6:e3:54:6a:3d:87:56:fb:1d:e7:c2:60:c0:9d: 2d:38:49:55 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUX/uBljvq3sdt+1rvTK6nP3MPBnUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzYxOVoX DTI3MDUwMjAyNDExOVowMzExMC8GA1UEAxMoRUY1MkUyMzlGMDgyQ0ZCMUMzNUJC OEQ2MEI0NjE1QTYwRDQ5MjZFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANP2cVTl5vnmJ9ggNkNaxp8bcPSIp3GbPD4lS0D0aVyvUTdOsp6r/S4shMHP VztL2w95qeTMy/2DNySmpB0KD5v0g8/LvDo2nUwo1U96SrX4aL77qTcH0j0qYAht wxYIE0MRBe6xEV4HDBEX0Qr2QPSeZLL6ePJwWHWt9wdjoLKRU1KZPrcGu3XwtTfh BJkbBt4k/qw1FYFLa8Tq35yQvVUXGlKPv3tcyWJiUrJ8h3tQDjldhFlJ5nwyFMND UiF0lsTwdax/EYD1KpWIYT1DAckpB3jqcNIVZ+VwsiemzcNeoDBLB1TYHGEoMBYj FHE6HSuyBXVmjXXkBCsE1l6kq48CAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO9S4jnwgs+xw1u41gtGFaYNSSbpMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y0YjRlYzk4LTRkMWYtNGU2Zi1hNzY4LTAyNjg5NDIwMjIyMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mNGI0ZWM5 OC00ZDFmLTRlNmYtYTc2OC0wMjY4OTQyMDIyMjMvMC9FRjUyRTIzOUYwODJDRkIx QzM1QkI4RDYwQjQ2MTVBNjBENDkyNkU5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQBZ2YAAwQBZ4MyMA8EAgACMAkDBwAgAQ3yvQAwDQYJKoZIhvcNAQELBQADggEB AHE281AA2M9cYtBfBqg67gw4UbqteTcGpbxWMCPtcpp4B5ML9Zjb1btZy17HTtyv lzegJ9yYQZT8JWjkFAcnW1ECHM9wkWaz6yz+uSn/AXri/fEzF5ewhRolzBXdlSUW ZM6Xh0f5HeJ8zIQJArkxqoly25kEa5jZ/P9vJIt7JLeCfuW19CW2QXi1yMT5jVmy eZkF1j8yBjHkPU70B6SHZ7g2rmzziTusDBKu9fftsdboFJqY1w6/iqk+2bzKwGno w1zHxq/qsG/0sMjOlylIS6mC7usYalggxAnwGz3Yakk3LSODxF+GxVDOAo5Qrlam 41RqPYdW+x3nwmDAnS04SVU= -----END CERTIFICATE-----Generated at Tue May 12 22:33:06 2026 by rpki-client