$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer File: EFA0A80DF71CA377A289711EA4310F3117358BDA.cer (raw, json) Hash identifier: qEXJOdU5dYoDLLN/g/pjIfs3PWaVOJVBoRmG01Vd+iU= Subject key identifier: EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 120F133392F9AF4AB64D5B33AF77794E3548B487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:19:16 +0000 Certificate not after: Sun 02 May 2027 01:24:16 +0000 Subordinate resources: IP: 27.111.32.0/19 IP: 43.229.204.0/22 IP: 103.245.180.0/22 IP: 119.235.16.0/20 IP: 202.129.184.0/21 IP: 2403:2e00::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:0f:13:33:92:f9:af:4a:b6:4d:5b:33:af:77:79:4e:35:48:b4:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:19:16 2026 GMT Not After : May 2 01:24:16 2027 GMT Subject: CN=EFA0A80DF71CA377A289711EA4310F3117358BDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:71:d2:56:35:1c:ed:15:ec:5e:6e:be:cf:73: 79:ea:c0:ab:29:8a:2d:15:e3:3d:4c:f0:83:5e:5c: c0:53:80:36:40:f7:03:df:29:b2:9f:7b:3d:e8:4a: 5c:29:7f:5d:64:81:25:c3:43:30:d0:10:38:68:9e: bf:49:7d:ff:4f:fe:ca:26:c3:d3:c9:95:f1:10:bc: 49:62:77:68:b9:fb:56:e3:df:d4:a6:e6:c4:5a:28: 89:bb:07:7f:ad:5c:38:f8:5b:81:24:ad:84:72:7b: a2:68:e6:d1:cf:55:12:a6:5a:c5:ae:7f:35:01:e8: 45:0d:34:c8:46:eb:6c:ea:8b:c9:9a:27:98:b6:69: dd:6f:62:37:a6:c3:1a:25:64:51:03:9c:7e:b6:43: 07:92:ae:08:ee:b2:cc:04:2d:5a:3c:51:2b:c7:60: ac:b3:36:e6:3f:c1:36:32:46:82:a0:45:28:fe:8b: d1:95:0b:d7:5d:25:0c:24:ad:d6:61:61:7d:44:42: 91:f3:97:c4:dd:7f:97:1d:c5:79:ec:2d:37:39:c5: af:b1:39:c5:41:dc:79:5c:cf:86:c3:55:6e:d3:a5: 62:bc:b7:b2:3c:37:f1:87:42:7e:a0:3f:b2:94:c3: c7:51:7a:f9:98:30:fa:3f:72:39:cd:d5:b9:3a:9b: 3a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.111.32.0/19 43.229.204.0/22 103.245.180.0/22 119.235.16.0/20 202.129.184.0/21 IPv6: 2403:2e00::/32 Signature Algorithm: sha256WithRSAEncryption 94:81:79:fe:de:e2:1a:86:8a:da:43:5b:fb:13:18:7f:33:7e: 03:aa:db:57:8a:7e:2d:77:91:41:78:a6:1e:85:1c:f7:9b:5b: 3b:30:8e:0f:33:07:42:60:49:d0:bd:81:0b:43:b5:c8:47:c7: 46:d7:56:c5:36:14:a5:43:36:44:78:2f:e9:91:2d:68:0a:77: 7f:67:63:10:ad:4f:1d:5e:21:17:37:cd:b5:4d:5f:e0:f5:23: 8a:7e:a3:0e:a1:0b:cb:bd:04:81:97:7d:eb:0b:e6:d7:47:ed: 5a:1f:36:31:61:fc:cc:6e:7d:e6:f4:22:9a:d2:7f:5e:0e:47: 20:26:b0:52:23:81:9a:fc:3f:85:e7:bf:1f:b0:9b:2e:40:04: e5:68:44:86:e8:db:a5:6e:f4:bb:18:6c:42:f3:d8:99:e7:a5: a2:e5:4f:52:d0:ae:10:5c:0f:be:62:2a:4d:28:ff:03:a4:e2: 51:1f:d4:19:0b:02:9d:c3:53:7b:3c:33:d4:a8:9f:9f:82:c9: b2:ea:6a:e7:d3:15:dc:fd:59:d1:b6:df:70:5f:b4:78:0c:ce: 05:18:6a:80:af:e5:de:b8:87:ba:e6:19:22:5c:66:46:fb:d4: d7:c6:ae:a9:81:18:7a:78:5e:43:7d:5e:0e:a3:a1:f1:04:59: 14:6b:10:1a -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgIUEg8TM5L5r0q2TVszr3d5TjVItIcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTkxNloX DTI3MDUwMjAxMjQxNlowMzExMC8GA1UEAxMoRUZBMEE4MERGNzFDQTM3N0EyODk3 MTFFQTQzMTBGMzExNzM1OEJEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALpx0lY1HO0V7F5uvs9zeerAqymKLRXjPUzwg15cwFOANkD3A98psp97PehK XCl/XWSBJcNDMNAQOGiev0l9/0/+yibD08mV8RC8SWJ3aLn7VuPf1KbmxFooibsH f61cOPhbgSSthHJ7omjm0c9VEqZaxa5/NQHoRQ00yEbrbOqLyZonmLZp3W9iN6bD GiVkUQOcfrZDB5KuCO6yzAQtWjxRK8dgrLM25j/BNjJGgqBFKP6L0ZUL110lDCSt 1mFhfURCkfOXxN1/lx3FeewtNznFr7E5xUHceVzPhsNVbtOlYry3sjw38YdCfqA/ spTDx1F6+Zgw+j9yOc3VuTqbOqsCAwEAAaOCAuAwggLcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO+gqA33HKN3oolxHqQxDzEXNYvaMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk0M2UyZTY3LWExNzEtNGQ5ZS1hOTM1LTQwNjkwMmIxZTEzYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85NDNlMmU2 Ny1hMTcxLTRkOWUtYTkzNS00MDY5MDJiMWUxM2IvMC9FRkEwQTgwREY3MUNBMzc3 QTI4OTcxMUVBNDMxMEYzMTE3MzU4QkRBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAe AwQFG28gAwQCK+XMAwQCZ/W0AwQEd+sQAwQDyoG4MA0EAgACMAcDBQAkAy4AMA0G CSqGSIb3DQEBCwUAA4IBAQCUgXn+3uIahoraQ1v7Exh/M34DqttXin4td5FBeKYe hRz3m1s7MI4PMwdCYEnQvYELQ7XIR8dG11bFNhSlQzZEeC/pkS1oCnd/Z2MQrU8d XiEXN821TV/g9SOKfqMOoQvLvQSBl33rC+bXR+1aHzYxYfzMbn3m9CKa0n9eDkcg JrBSI4Ga/D+F578fsJsuQATlaESG6NulbvS7GGxC89iZ56Wi5U9S0K4QXA++YipN KP8DpOJRH9QZCwKdw1N7PDPUqJ+fgsmy6mrn0xXc/VnRtt9wX7R4DM4FGGqAr+Xe uIe65hkiXGZG+9TXxq6pgRh6eF5DfV4Oo6HxBFkUaxAa -----END CERTIFICATE-----Generated at Tue May 12 22:03:53 2026 by rpki-client