$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer File: EFFB61EDA88A3976415A737CCC5A79284C873C9A.cer (raw, json) Hash identifier: /D7DxQR1QcLka/JAFHlQE9Nfx0ugbh6o1WB9WBnit+A= Subject key identifier: EF:FB:61:ED:A8:8A:39:76:41:5A:73:7C:CC:5A:79:28:4C:87:3C:9A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 64DD74A472AA49A04508B29D7D616A79E953EAB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:51:03 +0000 Certificate not after: Sat 01 May 2027 23:56:03 +0000 Subordinate resources: IP: 103.180.250.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:dd:74:a4:72:aa:49:a0:45:08:b2:9d:7d:61:6a:79:e9:53:ea:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:51:03 2026 GMT Not After : May 1 23:56:03 2027 GMT Subject: CN=EFFB61EDA88A3976415A737CCC5A79284C873C9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b7:53:05:ad:b8:8f:f1:e8:a4:32:e0:6e:cb: 75:d0:62:ef:ed:c8:e6:dc:ea:ef:f2:da:6b:5f:04: b8:7f:98:85:98:e6:42:93:88:2b:e5:3b:52:a6:4a: aa:f2:e3:b8:8a:cd:d9:09:79:4a:9a:43:e1:d3:88: a6:fd:f8:00:c1:a7:c3:bf:bc:39:43:d9:3e:89:00: a6:89:e5:d5:cb:ec:ca:1d:3a:6f:d3:d4:79:3a:09: 20:a7:c0:7c:2d:97:be:10:9f:03:a9:dd:ca:69:a2: 8f:ed:39:3c:3a:27:34:54:c5:27:10:26:e7:83:21: 99:e4:57:a0:de:3c:2e:60:eb:4f:59:42:c0:9a:1c: 51:fb:9a:d9:ce:a1:d9:64:fd:e2:de:7e:5b:d2:8c: e3:6a:be:71:eb:24:6e:c6:0e:9a:96:55:0f:78:1c: b1:52:cb:bf:7a:8a:01:0b:cc:c1:71:bc:69:ef:9d: 97:14:92:73:eb:32:33:29:54:c7:cc:bf:b9:a4:cf: af:7b:25:4d:20:5e:1a:05:73:06:7b:56:07:99:ac: a7:d8:9e:cd:1e:07:1a:7e:39:28:d3:b0:a8:71:2e: fb:39:f2:8c:4a:e6:eb:38:99:43:63:b5:13:f8:95: 5e:18:c9:eb:23:b1:1f:49:2c:5d:d3:49:27:e4:38: 74:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:FB:61:ED:A8:8A:39:76:41:5A:73:7C:CC:5A:79:28:4C:87:3C:9A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/EFFB61EDA88A3976415A737CCC5A79284C873C9A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.250.0/23 Signature Algorithm: sha256WithRSAEncryption 83:48:70:03:d4:21:c4:f3:99:dd:0b:a2:47:50:9a:0c:ef:6c: 56:ea:fa:3e:26:c9:02:c0:5c:9e:b0:42:7d:98:4b:8f:ce:5d: a0:4c:c7:f2:fe:01:f4:3d:e3:e4:7c:cf:af:d7:b2:74:d5:e0: f5:09:bd:66:a4:4a:dc:5b:ad:ee:3e:31:5a:46:2e:04:7a:87: 46:fa:f2:b0:28:06:f9:ff:6a:67:76:be:e7:28:18:e3:f1:11: 15:fc:f1:48:00:12:d5:77:bc:b2:37:da:6d:aa:cf:b3:33:16: d1:76:01:98:9c:06:d6:e4:b4:34:dd:b2:92:84:e9:3a:4c:a1: a2:3c:f3:ca:62:df:71:96:d6:4e:62:57:1a:53:75:89:c9:0a: 23:81:d0:0e:cc:a1:ab:63:af:d8:65:75:8e:c7:52:c7:8e:8d: b4:5e:85:1f:83:39:c5:ec:09:3a:14:62:a7:22:36:2a:7f:18: 02:67:f6:ad:0d:3e:52:f8:3b:d6:e7:77:6a:e7:e4:1a:7e:52: a1:e9:6d:e9:ca:af:ab:85:0b:50:ec:8d:b6:4c:f3:70:78:ab: d5:06:66:2d:4a:9a:0c:b9:8c:5a:c2:db:6a:bf:96:84:0a:35: 81:91:69:6e:3b:91:70:1b:35:6e:4b:5f:83:5a:85:2d:ab:29: a0:2e:48:ac -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUZN10pHKqSaBFCLKdfWFqeelT6rgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTEwM1oX DTI3MDUwMTIzNTYwM1owMzExMC8GA1UEAxMoRUZGQjYxRURBODhBMzk3NjQxNUE3 MzdDQ0M1QTc5Mjg0Qzg3M0M5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ+3UwWtuI/x6KQy4G7LddBi7+3I5tzq7/Laa18EuH+YhZjmQpOIK+U7UqZK qvLjuIrN2Ql5SppD4dOIpv34AMGnw7+8OUPZPokAponl1cvsyh06b9PUeToJIKfA fC2XvhCfA6ndymmij+05PDonNFTFJxAm54MhmeRXoN48LmDrT1lCwJocUfua2c6h 2WT94t5+W9KM42q+ceskbsYOmpZVD3gcsVLLv3qKAQvMwXG8ae+dlxSSc+syMylU x8y/uaTPr3slTSBeGgVzBntWB5msp9iezR4HGn45KNOwqHEu+znyjErm6ziZQ2O1 E/iVXhjJ6yOxH0ksXdNJJ+Q4dNsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO/7Ye2oijl2QVpzfMxaeShMhzyaMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzEyNDlkMzg3LTcwY2YtNDBlOS04NzU5LTliODZlMGM2NTEyOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xMjQ5ZDM4 Ny03MGNmLTQwZTktODc1OS05Yjg2ZTBjNjUxMjgvMC9FRkZCNjFFREE4OEEzOTc2 NDE1QTczN0NDQzVBNzkyODRDODczQzlBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7T6MA0GCSqGSIb3DQEBCwUAA4IBAQCDSHAD1CHE85ndC6JHUJoM72xW6vo+ JskCwFyesEJ9mEuPzl2gTMfy/gH0PePkfM+v17J01eD1Cb1mpErcW63uPjFaRi4E eodG+vKwKAb5/2pndr7nKBjj8REV/PFIABLVd7yyN9ptqs+zMxbRdgGYnAbW5LQ0 3bKShOk6TKGiPPPKYt9xltZOYlcaU3WJyQojgdAOzKGrY6/YZXWOx1LHjo20XoUf gznF7Ak6FGKnIjYqfxgCZ/atDT5S+DvW53dq5+QaflKh6W3pyq+rhQtQ7I22TPNw eKvVBmYtSpoMuYxawttqv5aECjWBkWluO5FwGzVuS1+DWoUtqymgLkis -----END CERTIFICATE-----Generated at Tue May 12 22:03:01 2026 by rpki-client