$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer File: EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer (raw, json) Hash identifier: 6WdLTOhQn4q5ZwnU2WI0TpvvglO1EjQmY18E4B6v4gE= Subject key identifier: EF:44:D1:A9:52:06:A2:0C:B3:AB:52:60:7D:C9:81:EE:C1:AA:87:44 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2417B808C8621F5BDF4D77485141D32F44016032 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:21:30 +0000 Certificate not after: Sun 02 May 2027 00:26:30 +0000 Subordinate resources: IP: 103.39.74.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 09:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:17:b8:08:c8:62:1f:5b:df:4d:77:48:51:41:d3:2f:44:01:60:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:21:30 2026 GMT Not After : May 2 00:26:30 2027 GMT Subject: CN=EF44D1A95206A20CB3AB52607DC981EEC1AA8744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e1:a5:c1:b5:9c:f1:33:9d:19:a4:a2:af:28: 1e:15:4f:73:53:34:c8:0d:3c:c1:ce:1a:35:21:9e: f4:bf:7d:17:11:a9:2d:44:58:ca:0e:92:24:da:97: 3b:cd:ec:8b:c5:b9:1e:fd:ae:11:79:a0:41:07:52: a0:36:c2:a9:e1:7c:51:60:36:e4:69:e9:85:a3:1a: ee:43:41:d4:06:40:c9:59:f5:ef:c5:32:4e:0d:0d: d0:4a:2a:d2:14:fe:75:37:0e:58:fc:b2:3f:02:10: 9a:4b:f2:4e:ac:05:6b:25:19:cc:9c:46:fd:64:42: d1:29:4a:75:74:1f:c2:6b:62:50:72:ec:11:e8:b9: c8:41:54:98:bd:87:9c:81:ad:69:e2:ae:d4:b5:75: 24:07:87:a6:a2:d8:24:fd:13:b2:b8:0a:30:d8:4f: fa:6d:59:93:14:d3:fd:d2:62:73:cc:5d:9c:29:d8: c3:ac:b8:86:c0:58:9c:8e:14:a4:32:d5:39:75:4e: ac:68:d9:7b:97:dd:2b:c5:ec:bc:ad:db:a4:a4:2d: ba:9e:85:1d:62:4f:81:8e:2f:65:9d:05:80:b2:11: dd:80:46:03:4b:f0:7e:3c:35:ac:b4:47:a3:c4:ee: 77:05:99:f2:f7:ff:87:ca:62:d3:e4:c2:30:a7:61: 61:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:44:D1:A9:52:06:A2:0C:B3:AB:52:60:7D:C9:81:EE:C1:AA:87:44 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.39.74.0/23 Signature Algorithm: sha256WithRSAEncryption 87:de:42:10:15:60:f9:9d:69:e8:90:f6:c1:e2:a2:dc:40:17: a0:8e:2a:15:d5:e3:e4:67:ae:eb:d8:43:ac:ee:3f:02:e2:79: 06:01:71:c3:3b:ec:05:16:78:06:f0:19:3c:f1:90:af:e9:37: 86:02:91:c2:64:11:72:45:c9:59:5f:73:db:bf:53:4a:c6:8b: 58:c5:60:86:03:3d:f0:d4:5f:e8:ef:46:df:ce:d5:b2:70:39: cf:82:83:5f:96:9c:64:a8:01:8d:0b:18:d2:62:07:cf:1a:5c: 24:0e:c1:7f:f4:f1:70:f2:2e:dc:aa:77:8a:3f:01:69:cf:b5: a1:e2:fb:97:da:c6:a0:c0:0e:37:52:33:77:64:2a:f9:74:48: e0:a4:be:ce:81:a5:5f:37:25:3d:a7:a8:f0:26:0f:7f:76:aa: 32:1b:e1:68:65:74:a7:9d:84:e3:0c:b8:cf:34:04:17:06:06: 0e:93:b7:82:8d:c5:2a:3d:14:a7:8b:e4:50:4f:fa:35:46:a0: aa:ec:44:77:38:f8:c8:fa:21:36:9c:88:af:be:41:6e:ba:63: 5a:19:36:e8:29:1a:02:41:0e:2b:23:f1:f9:c5:92:4d:1d:5c: 24:fb:83:4a:e5:d2:92:89:b2:21:d6:2c:c3:20:ba:c3:c4:c7: 9b:f5:a5:d4 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUJBe4CMhiH1vfTXdIUUHTL0QBYDIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjEzMFoX DTI3MDUwMjAwMjYzMFowMzExMC8GA1UEAxMoRUY0NEQxQTk1MjA2QTIwQ0IzQUI1 MjYwN0RDOTgxRUVDMUFBODc0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANXhpcG1nPEznRmkoq8oHhVPc1M0yA08wc4aNSGe9L99FxGpLURYyg6SJNqX O83si8W5Hv2uEXmgQQdSoDbCqeF8UWA25GnphaMa7kNB1AZAyVn178UyTg0N0Eoq 0hT+dTcOWPyyPwIQmkvyTqwFayUZzJxG/WRC0SlKdXQfwmtiUHLsEei5yEFUmL2H nIGtaeKu1LV1JAeHpqLYJP0TsrgKMNhP+m1ZkxTT/dJic8xdnCnYw6y4hsBYnI4U pDLVOXVOrGjZe5fdK8XsvK3bpKQtup6FHWJPgY4vZZ0FgLIR3YBGA0vwfjw1rLRH o8TudwWZ8vf/h8pi0+TCMKdhYW0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO9E0alSBqIMs6tSYH3Jge7BqodEMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNlMTlhYmM4LTg1MDctNDFlZC04Mjg5LTdlM2FjN2IyNDkzNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zZTE5YWJj OC04NTA3LTQxZWQtODI4OS03ZTNhYzdiMjQ5MzUvMC9FRjQ0RDFBOTUyMDZBMjBD QjNBQjUyNjA3REM5ODFFRUMxQUE4NzQ0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZydKMA0GCSqGSIb3DQEBCwUAA4IBAQCH3kIQFWD5nWnokPbB4qLcQBegjioV 1ePkZ67r2EOs7j8C4nkGAXHDO+wFFngG8Bk88ZCv6TeGApHCZBFyRclZX3Pbv1NK xotYxWCGAz3w1F/o70bfztWycDnPgoNflpxkqAGNCxjSYgfPGlwkDsF/9PFw8i7c qneKPwFpz7Wh4vuX2sagwA43UjN3ZCr5dEjgpL7OgaVfNyU9p6jwJg9/dqoyG+Fo ZXSnnYTjDLjPNAQXBgYOk7eCjcUqPRSni+RQT/o1RqCq7ER3OPjI+iE2nIivvkFu umNaGTboKRoCQQ4rI/H5xZJNHVwk+4NK5dKSibIh1izDILrDxMeb9aXU -----END CERTIFICATE-----Generated at Tue May 5 10:45:43 2026 by rpki-client