$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer File: 2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer (raw, json) Hash identifier: eTrc54XfDBygl/Ok5Aoay8rGIcngulJqUi4OWJRnQxs= Subject key identifier: 2E:B8:CB:E7:A4:79:27:7A:C0:3E:E8:0F:36:5D:D8:83:BE:38:DD:88 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3129794931C244C9A271F09055DC977C61B96F20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:04:52 +0000 Certificate not after: Sun 02 May 2027 02:09:52 +0000 Subordinate resources: IP: 103.166.6.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 05:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:29:79:49:31:c2:44:c9:a2:71:f0:90:55:dc:97:7c:61:b9:6f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:04:52 2026 GMT Not After : May 2 02:09:52 2027 GMT Subject: CN=2EB8CBE7A479277AC03EE80F365DD883BE38DD88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:28:c7:6b:fc:ba:57:38:ab:bf:1b:d1:27:70: ba:ab:b6:19:f6:d5:9a:b9:88:48:1c:ba:7d:65:d1: fe:1a:7e:f3:2a:ce:0b:fd:b7:88:c8:5a:8c:6c:07: 39:0a:30:ef:54:21:a3:d0:70:38:26:a3:fd:9c:27: 8c:ad:e5:78:83:ce:71:ba:38:47:ca:76:67:cf:e0: db:3e:32:42:14:c3:87:54:13:17:a1:73:bc:93:af: 8f:1a:30:e7:a9:8a:d3:b3:10:73:41:bb:10:da:0e: d9:2a:e5:63:e4:10:9d:4f:56:f7:4f:55:99:fe:42: cf:ae:4c:1e:bb:a7:03:f1:50:a9:f8:db:2d:c5:0e: 5c:00:8a:00:91:63:89:04:36:f7:7f:94:d1:94:f1: 73:50:a4:67:5d:32:7b:a8:cf:09:41:34:a6:8c:6d: fe:9f:90:8c:86:6d:9d:59:60:76:88:c6:39:01:0a: 6b:7c:b7:ab:d1:cf:1d:cf:c6:e5:16:15:19:d7:22: fb:09:8a:82:5e:f0:4c:33:18:4b:4b:ea:5a:60:1f: d6:f7:c1:b0:d3:08:16:3c:4b:bb:78:7c:55:61:8b: 13:5d:f2:6b:f7:92:04:a9:9a:e2:a1:c3:75:c9:95: 1c:38:02:cb:40:2d:8f:d1:79:45:53:57:ff:32:cd: 4d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:B8:CB:E7:A4:79:27:7A:C0:3E:E8:0F:36:5D:D8:83:BE:38:DD:88 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.6.0/23 Signature Algorithm: sha256WithRSAEncryption 63:3a:05:8e:e5:d3:68:df:da:3f:65:20:6c:8a:0d:21:6e:cc: 97:c4:d3:03:9c:2c:ff:b4:9c:7d:0b:df:e9:16:1d:83:35:40: 91:1e:96:df:59:da:6c:d1:8b:19:d7:8e:fa:b4:ad:0d:e1:8c: 2d:2d:17:4d:c3:7f:41:01:81:05:02:7d:c7:34:13:ff:9d:6b: 8a:e3:aa:49:02:56:13:c9:dd:0d:6c:54:d5:aa:06:45:65:bf: ca:b3:d2:18:40:da:07:91:da:24:6a:bc:79:a7:03:eb:df:c7: 82:40:a3:87:a4:c8:68:e0:d4:3b:52:b6:27:45:c0:56:2e:0e: f5:fd:23:6e:a7:c4:48:6a:5e:49:3f:be:9f:a4:b3:9c:09:eb: 21:a7:52:6a:e8:21:78:a8:bb:9c:a2:dd:f1:75:b0:66:39:b5: 95:86:ef:7d:45:57:48:56:50:b0:15:6a:56:2e:a6:ec:11:e9: 0c:1c:b1:53:db:67:31:ac:43:46:2a:c5:d2:12:a9:af:27:47: 52:9d:99:0b:0b:b7:f6:5d:75:3b:5f:06:4b:66:e8:97:b4:7d: c0:c8:ef:7f:7a:ee:1f:64:0f:c5:9f:40:93:e6:b9:2c:ff:f4: 08:66:d0:1c:92:d1:74:12:4f:02:88:5e:5a:a5:c3:53:9e:81: b5:7f:c6:b1 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUMSl5STHCRMmicfCQVdyXfGG5byAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDQ1MloX DTI3MDUwMjAyMDk1MlowMzExMC8GA1UEAxMoMkVCOENCRTdBNDc5Mjc3QUMwM0VF ODBGMzY1REQ4ODNCRTM4REQ4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOYox2v8ulc4q78b0Sdwuqu2GfbVmrmISBy6fWXR/hp+8yrOC/23iMhajGwH OQow71Qho9BwOCaj/ZwnjK3leIPOcbo4R8p2Z8/g2z4yQhTDh1QTF6FzvJOvjxow 56mK07MQc0G7ENoO2SrlY+QQnU9W909Vmf5Cz65MHrunA/FQqfjbLcUOXACKAJFj iQQ293+U0ZTxc1CkZ10ye6jPCUE0poxt/p+QjIZtnVlgdojGOQEKa3y3q9HPHc/G 5RYVGdci+wmKgl7wTDMYS0vqWmAf1vfBsNMIFjxLu3h8VWGLE13ya/eSBKma4qHD dcmVHDgCy0Atj9F5RVNX/zLNTeECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC64y+ekeSd6wD7oDzZd2IO+ON2IMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RkYjkyZTg5LTkyZDUtNDA2NC05NTExLTA2N2UzNTM2NzljZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kZGI5MmU4 OS05MmQ1LTQwNjQtOTUxMS0wNjdlMzUzNjc5Y2UvMC8yRUI4Q0JFN0E0NzkyNzdB QzAzRUU4MEYzNjVERDg4M0JFMzhERDg4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6YGMA0GCSqGSIb3DQEBCwUAA4IBAQBjOgWO5dNo39o/ZSBsig0hbsyXxNMD nCz/tJx9C9/pFh2DNUCRHpbfWdps0YsZ1476tK0N4YwtLRdNw39BAYEFAn3HNBP/ nWuK46pJAlYTyd0NbFTVqgZFZb/Ks9IYQNoHkdokarx5pwPr38eCQKOHpMho4NQ7 UrYnRcBWLg71/SNup8RIal5JP76fpLOcCeshp1Jq6CF4qLucot3xdbBmObWVhu99 RVdIVlCwFWpWLqbsEekMHLFT22cxrENGKsXSEqmvJ0dSnZkLC7f2XXU7XwZLZuiX tH3AyO9/eu4fZA/Fn0CT5rks//QIZtAcktF0Ek8CiF5apcNTnoG1f8ax -----END CERTIFICATE-----Generated at Fri May 8 07:29:36 2026 by rpki-client