$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.cer File: EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.cer (raw, json) Hash identifier: b2L2BccbuQGn1w5Ah7NQgAJMtTXjTt26jYqSRFCO89o= Subject key identifier: EF:BC:69:85:9D:4C:E7:D4:7B:71:A9:D2:30:22:FD:EA:93:DF:1A:02 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5DF0E64D6394034394DDCC0A67CB6B7C79B9632F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:27:46 +0000 Certificate not after: Sun 02 May 2027 02:32:46 +0000 Subordinate resources: IP: 103.156.74.0/23 IP: 2406:8140::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:f0:e6:4d:63:94:03:43:94:dd:cc:0a:67:cb:6b:7c:79:b9:63:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:27:46 2026 GMT Not After : May 2 02:32:46 2027 GMT Subject: CN=EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d7:6a:b2:51:80:2e:ee:a3:b4:a9:a0:11:c0: 6e:60:82:d0:e6:f4:cc:9d:e9:1f:98:64:28:00:a8: f0:94:90:7b:f8:28:89:6b:11:61:fd:c4:7d:74:17: 30:63:b5:3a:de:27:f8:ec:44:44:ae:d1:99:d4:d4: da:77:26:cd:90:ba:6d:40:d4:13:c3:65:05:67:0f: 31:b1:2e:d4:86:b2:47:86:5b:69:a5:5b:ad:49:a1: da:44:ba:e4:65:e4:75:e1:7b:19:7d:ec:6e:dd:c0: e9:ab:35:4c:0f:ad:19:64:9e:7f:11:32:e6:a6:8b: e3:c2:5e:ef:1c:f3:1b:bb:76:0f:5d:28:ec:48:91: 18:46:ac:69:ee:f4:08:9a:04:6a:82:3a:54:ca:10: f3:c8:46:3b:26:37:2f:b6:8d:54:15:fd:7d:df:30: 03:1c:0f:ee:0c:74:07:8d:60:12:5a:07:ba:0d:4c: 0e:6e:3d:b3:44:26:8a:d8:43:41:fb:3b:db:e2:69: 5f:e1:f2:89:7a:3f:c6:3b:15:82:4e:2c:24:bc:da: b5:bb:a8:dc:8c:26:36:33:8e:bd:3c:33:fb:a7:9e: 58:46:6c:6c:fc:8c:de:a0:a0:8e:bb:77:a1:ba:da: 16:01:26:e8:82:57:d7:8b:3d:f2:95:05:97:93:66: 00:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:BC:69:85:9D:4C:E7:D4:7B:71:A9:D2:30:22:FD:EA:93:DF:1A:02 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.74.0/23 IPv6: 2406:8140::/32 Signature Algorithm: sha256WithRSAEncryption 5c:0a:5c:65:c1:2a:74:be:6f:a3:b1:90:96:77:c0:24:f2:7c: 90:55:df:f5:5c:ff:52:f5:5f:de:3b:de:9f:88:81:d0:a3:d1: 70:39:e6:74:ba:1b:2a:2b:66:97:e0:8f:a9:1a:ba:9b:65:3d: 8a:5b:94:bf:8c:72:6d:09:f1:a1:0d:40:29:55:c4:c3:20:5e: 57:4c:46:99:9b:bb:b9:d1:4a:57:26:30:a8:78:23:9e:a7:ec: 6a:32:6f:0e:04:40:05:95:68:3e:e7:d5:83:a1:c8:fd:af:b4: 04:44:9f:c1:af:38:db:e8:f9:43:a8:a0:cf:3f:c4:7e:40:72: 73:56:89:50:58:b0:73:b8:b6:89:60:bb:f7:71:19:23:0c:42: 83:69:a1:9e:88:e9:00:10:28:e3:2e:0b:38:11:ed:bb:7a:47: bf:a5:13:22:1a:6e:a4:55:67:12:e5:c5:89:db:aa:73:03:7a: f2:66:df:26:42:b8:d8:cd:59:a4:8d:c5:63:96:f2:55:78:2c: b6:f5:8f:a1:25:99:31:7e:39:c7:95:3d:f0:c0:18:25:60:76: fe:b8:56:d9:4c:7e:1b:22:4f:8c:42:60:6e:65:17:f0:9a:a8: 27:a8:08:7a:7c:eb:e0:fc:a7:78:16:d5:94:6e:2d:d8:60:3b: 69:d7:d1:69 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUXfDmTWOUA0OU3cwKZ8trfHm5Yy8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjc0NloX DTI3MDUwMjAyMzI0NlowMzExMC8GA1UEAxMoRUZCQzY5ODU5RDRDRTdENDdCNzFB OUQyMzAyMkZERUE5M0RGMUEwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ7XarJRgC7uo7SpoBHAbmCC0Ob0zJ3pH5hkKACo8JSQe/goiWsRYf3EfXQX MGO1Ot4n+OxERK7RmdTU2ncmzZC6bUDUE8NlBWcPMbEu1IayR4ZbaaVbrUmh2kS6 5GXkdeF7GX3sbt3A6as1TA+tGWSefxEy5qaL48Je7xzzG7t2D10o7EiRGEasae70 CJoEaoI6VMoQ88hGOyY3L7aNVBX9fd8wAxwP7gx0B41gEloHug1MDm49s0QmithD Qfs72+JpX+HyiXo/xjsVgk4sJLzatbuo3IwmNjOOvTwz+6eeWEZsbPyM3qCgjrt3 obraFgEm6IJX14s98pUFl5NmACsCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO+8aYWdTOfUe3Gp0jAi/eqT3xoCMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2YwMDEwMmQwLTcxNGYtNGI1Mi05YmU1LWRlZDE2ZWRmZTRhMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mMDAxMDJk MC03MTRmLTRiNTItOWJlNS1kZWQxNmVkZmU0YTIvMC9FRkJDNjk4NTlENENFN0Q0 N0I3MUE5RDIzMDIyRkRFQTkzREYxQTAyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5xKMA0EAgACMAcDBQAkBoFAMA0GCSqGSIb3DQEBCwUAA4IBAQBcClxlwSp0 vm+jsZCWd8Ak8nyQVd/1XP9S9V/eO96fiIHQo9FwOeZ0uhsqK2aX4I+pGrqbZT2K W5S/jHJtCfGhDUApVcTDIF5XTEaZm7u50UpXJjCoeCOep+xqMm8OBEAFlWg+59WD ocj9r7QERJ/Brzjb6PlDqKDPP8R+QHJzVolQWLBzuLaJYLv3cRkjDEKDaaGeiOkA ECjjLgs4Ee27eke/pRMiGm6kVWcS5cWJ26pzA3ryZt8mQrjYzVmkjcVjlvJVeCy2 9Y+hJZkxfjnHlT3wwBglYHb+uFbZTH4bIk+MQmBuZRfwmqgnqAh6fOvg/Kd4FtWU bi3YYDtp19Fp -----END CERTIFICATE-----Generated at Tue May 12 22:03:01 2026 by rpki-client