$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.cer File: EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.cer (raw, json) Hash identifier: w9EWdd0NiIuicE+7jDnj4txvTWlI3bPlIOM7PD7Y340= Subject key identifier: EF:DB:09:4B:3A:4B:DD:FF:AE:7A:31:18:46:33:B6:D1:4D:8E:5F:5E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2E75E02CF1E491466C69DF4EAB20042F39FA6090 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:53:49 +0000 Certificate not after: Sun 02 May 2027 00:58:49 +0000 Subordinate resources: IP: 103.153.62.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:75:e0:2c:f1:e4:91:46:6c:69:df:4e:ab:20:04:2f:39:fa:60:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:53:49 2026 GMT Not After : May 2 00:58:49 2027 GMT Subject: CN=EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ef:f8:b0:32:af:7b:df:d4:b8:9a:e9:96:f0: 8e:ec:1d:92:94:a2:33:be:2b:e9:1b:2f:6c:84:21: 08:92:0e:31:e3:3d:e3:70:8f:93:37:48:12:4c:97: 7f:32:48:54:aa:9b:0a:b2:e8:43:9b:4b:f1:a4:70: 9d:92:59:94:ac:01:84:d2:af:22:af:cb:6b:08:5b: ac:f1:bb:f3:3a:37:8b:80:79:94:96:4b:64:7f:1b: 4f:c6:be:6a:00:e5:e5:48:a2:00:95:ac:32:33:02: 28:25:76:63:99:79:a0:a8:94:74:b6:7d:4d:c8:a0: 09:e0:ac:04:fb:16:4c:60:8b:e3:67:5e:34:5f:d7: a6:30:ab:86:bc:48:90:92:de:26:ac:4f:44:5f:5e: cf:50:54:90:b0:20:c0:11:79:2e:6d:88:70:dd:b7: 6f:a9:f7:3b:69:9b:69:3b:1c:b9:6c:02:8b:81:e1: 6a:ef:29:d1:d4:1d:b8:12:8b:1c:44:e0:6a:1f:21: e4:d0:22:04:eb:ff:36:fb:a9:ca:2f:fa:30:55:ca: 09:c2:84:ce:3b:83:b9:fb:97:5f:1c:b8:88:fa:8b: 43:0e:32:b6:7a:9e:20:ab:ff:96:d5:aa:4b:34:b5: f7:63:52:92:d0:fa:bc:cf:1f:ef:e9:82:6d:23:bf: 3f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:DB:09:4B:3A:4B:DD:FF:AE:7A:31:18:46:33:B6:D1:4D:8E:5F:5E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.62.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:78:85:5c:99:bb:e3:7b:c3:7e:d9:5e:f7:66:80:19:d8:4e: 40:34:bc:5f:be:f6:2e:60:94:73:e2:32:c9:bc:d4:35:f1:cb: d1:12:75:5e:82:14:41:da:91:d8:6a:0a:b8:c0:f7:d6:5f:80: 8a:b7:07:f0:c6:74:7f:8f:c9:1f:6b:16:f0:86:e2:60:b9:3e: 89:45:d6:d3:f6:2c:aa:84:9d:da:e9:65:93:07:c4:31:2d:d4: ce:c1:00:43:9c:c1:d8:db:33:72:0c:88:35:0d:99:05:83:b6: 7a:37:f9:18:ed:53:db:19:60:55:ee:26:3b:29:86:06:06:cf: ec:43:42:df:40:a7:4a:0c:cb:8a:9d:1d:58:ed:cb:2a:5f:50: 88:ce:13:3d:a9:50:ce:e8:7f:da:f5:1f:13:60:d0:4e:90:86: 66:6a:fc:68:e0:81:be:c5:62:24:62:c0:73:d1:7d:d7:f1:02: 03:96:86:85:c7:66:ed:b0:a2:7c:27:52:4d:de:1c:84:b2:ff: e8:f2:93:b0:f4:de:cf:eb:1e:c6:ea:13:69:c0:6c:21:04:5b: 04:60:79:c9:ee:1a:70:f7:fa:f6:aa:92:c4:ab:05:31:80:cf: 32:95:cd:61:a3:ae:1d:00:42:6d:9e:e0:ad:9d:39:ad:fe:5f: 53:f8:c9:d9 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIULnXgLPHkkUZsad9OqyAELzn6YJAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTM0OVoX DTI3MDUwMjAwNTg0OVowMzExMC8GA1UEAxMoRUZEQjA5NEIzQTRCRERGRkFFN0Ez MTE4NDYzM0I2RDE0RDhFNUY1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTv+LAyr3vf1Lia6ZbwjuwdkpSiM74r6RsvbIQhCJIOMeM943CPkzdIEkyX fzJIVKqbCrLoQ5tL8aRwnZJZlKwBhNKvIq/LawhbrPG78zo3i4B5lJZLZH8bT8a+ agDl5UiiAJWsMjMCKCV2Y5l5oKiUdLZ9TcigCeCsBPsWTGCL42deNF/XpjCrhrxI kJLeJqxPRF9ez1BUkLAgwBF5Lm2IcN23b6n3O2mbaTscuWwCi4Hhau8p0dQduBKL HETgah8h5NAiBOv/Nvupyi/6MFXKCcKEzjuDufuXXxy4iPqLQw4ytnqeIKv/ltWq SzS192NSktD6vM8f7+mCbSO/P9MCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO/bCUs6S93/rnoxGEYzttFNjl9eMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZmNjQ0MGY2LTZmNWEtNGY0Yi1hNTk3LWU3NGI1NDNlNzg1Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82ZjY0NDBm Ni02ZjVhLTRmNGItYTU5Ny1lNzRiNTQzZTc4NWIvMC9FRkRCMDk0QjNBNEJEREZG QUU3QTMxMTg0NjMzQjZEMTREOEU1RjVFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ5k+MA0GCSqGSIb3DQEBCwUAA4IBAQAfeIVcmbvje8N+2V73ZoAZ2E5ANLxf vvYuYJRz4jLJvNQ18cvREnVeghRB2pHYagq4wPfWX4CKtwfwxnR/j8kfaxbwhuJg uT6JRdbT9iyqhJ3a6WWTB8QxLdTOwQBDnMHY2zNyDIg1DZkFg7Z6N/kY7VPbGWBV 7iY7KYYGBs/sQ0LfQKdKDMuKnR1Y7csqX1CIzhM9qVDO6H/a9R8TYNBOkIZmavxo 4IG+xWIkYsBz0X3X8QIDloaFx2btsKJ8J1JN3hyEsv/o8pOw9N7P6x7G6hNpwGwh BFsEYHnJ7hpw9/r2qpLEqwUxgM8ylc1ho64dAEJtnuCtnTmt/l9T+MnZ -----END CERTIFICATE-----Generated at Tue May 5 22:08:57 2026 by rpki-client