$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.cer File: 6099B74D5C9BD1B7AE0DC675E9888F94EA780223.cer (raw, json) Hash identifier: Fv56m4+Kbq86wjy2/OrL0PMAfHYADunfsF9Q/SQ++7c= Subject key identifier: 60:99:B7:4D:5C:9B:D1:B7:AE:0D:C6:75:E9:88:8F:94:EA:78:02:23 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 730090D89E2A391890EF17C3CEA7DA6223E37D5D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.mft caRepository: rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:05:07 +0000 Certificate not after: Sun 02 May 2027 00:10:07 +0000 Subordinate resources: IP: 157.66.50.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:00:90:d8:9e:2a:39:18:90:ef:17:c3:ce:a7:da:62:23:e3:7d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:05:07 2026 GMT Not After : May 2 00:10:07 2027 GMT Subject: CN=6099B74D5C9BD1B7AE0DC675E9888F94EA780223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e0:99:74:89:22:1b:bd:81:47:78:67:0b:5e: 1d:95:f7:d1:ca:8c:29:39:c9:aa:75:10:98:57:88: 44:2c:f5:84:a3:a3:e5:c4:86:a9:41:aa:7e:26:45: 92:14:c2:ba:30:27:e2:32:8d:dc:d2:64:d2:ee:84: 21:62:d0:02:27:1c:94:3f:62:e6:37:94:c6:11:6e: b4:18:62:75:0f:a5:50:5a:ab:9a:35:50:74:d7:c0: c7:2d:25:7f:6f:3e:33:4e:33:f7:5e:f1:ca:bf:49: 9d:71:0e:25:8e:a0:a8:60:db:f2:e1:50:46:6b:4b: 99:dd:43:ba:39:cf:e2:d6:e2:2f:93:52:1b:03:cc: a4:cf:29:e1:48:f0:53:45:7c:08:97:19:45:88:6a: 11:55:a6:e5:19:9b:8b:90:0d:d2:51:e7:d9:c4:56: a4:f0:df:63:e9:0a:fb:81:76:30:e2:f0:8c:46:3b: a2:0f:5c:3d:66:42:76:96:1f:c3:30:cd:36:93:09: 41:16:91:bd:f2:b2:bb:c5:ce:98:74:de:54:3d:5c: 7d:41:04:0d:26:3e:27:4e:4d:9f:c2:38:f6:33:da: 83:ee:aa:f8:ad:5a:e5:82:0f:4b:0f:01:89:cb:82: 70:36:0d:d2:75:e6:36:33:70:c3:41:f9:34:75:18: d4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 60:99:B7:4D:5C:9B:D1:B7:AE:0D:C6:75:E9:88:8F:94:EA:78:02:23 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.50.0/23 Signature Algorithm: sha256WithRSAEncryption 02:16:0d:01:92:2c:30:dc:70:61:8e:26:2a:ac:08:67:b6:c3: 68:e5:d6:00:39:df:e6:17:d7:1c:fa:c7:d3:43:cd:24:94:9a: df:26:15:74:69:6c:c6:9a:60:03:db:16:91:86:ef:ba:8b:02: 8e:bc:13:4c:b0:78:87:80:5c:06:c6:f8:e8:2b:c9:bd:0a:92: bd:9a:4d:32:dc:46:bd:e6:82:32:48:ad:72:80:bf:35:05:26: 7a:18:3d:59:09:05:f5:b9:f7:9b:7d:45:20:e4:f6:83:ea:30: db:8d:9e:8f:4f:8b:94:1d:25:02:48:50:42:79:a9:a8:bc:26: 57:04:b6:87:78:55:c6:d6:b5:e7:31:42:ce:09:19:f6:77:98: 78:45:fe:99:38:8b:76:3b:3e:9d:80:25:28:b7:b7:d5:ba:bd: ac:ba:6e:2f:3a:60:79:59:97:7e:f9:8c:44:8b:a0:1f:4b:19: ec:a1:47:2e:5a:dc:33:08:af:5f:86:b9:e9:3f:6e:bd:4f:91: ab:1b:92:8d:bc:73:fd:95:44:b5:95:59:4a:31:a3:34:53:0b: 04:19:94:65:1d:36:d1:56:d3:93:0f:03:8d:27:bf:6d:26:b5: 37:0c:fb:f7:eb:72:21:e6:41:19:ae:fd:c5:85:76:d1:68:bb: 2b:a2:61:41 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUcwCQ2J4qORiQ7xfDzqfaYiPjfV0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMDUwN1oX DTI3MDUwMjAwMTAwN1owMzExMC8GA1UEAxMoNjA5OUI3NEQ1QzlCRDFCN0FFMERD Njc1RTk4ODhGOTRFQTc4MDIyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALngmXSJIhu9gUd4ZwteHZX30cqMKTnJqnUQmFeIRCz1hKOj5cSGqUGqfiZF khTCujAn4jKN3NJk0u6EIWLQAicclD9i5jeUxhFutBhidQ+lUFqrmjVQdNfAxy0l f28+M04z917xyr9JnXEOJY6gqGDb8uFQRmtLmd1DujnP4tbiL5NSGwPMpM8p4Ujw U0V8CJcZRYhqEVWm5Rmbi5AN0lHn2cRWpPDfY+kK+4F2MOLwjEY7og9cPWZCdpYf wzDNNpMJQRaRvfKyu8XOmHTeVD1cfUEEDSY+J05Nn8I49jPag+6q+K1a5YIPSw8B icuCcDYN0nXmNjNww0H5NHUY1JsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGCZt01cm9G3rg3GdemIj5TqeAIjMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzI2ZmE5NTg0LTZmOTctNDA0MS05YzhkLThiMzk1OWU0ZjliMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yNmZhOTU4 NC02Zjk3LTQwNDEtOWM4ZC04YjM5NTllNGY5YjMvMC82MDk5Qjc0RDVDOUJEMUI3 QUUwREM2NzVFOTg4OEY5NEVBNzgwMjIzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnUIyMA0GCSqGSIb3DQEBCwUAA4IBAQACFg0Bkiww3HBhjiYqrAhntsNo5dYA Od/mF9cc+sfTQ80klJrfJhV0aWzGmmAD2xaRhu+6iwKOvBNMsHiHgFwGxvjoK8m9 CpK9mk0y3Ea95oIySK1ygL81BSZ6GD1ZCQX1ufebfUUg5PaD6jDbjZ6PT4uUHSUC SFBCeamovCZXBLaHeFXG1rXnMULOCRn2d5h4Rf6ZOIt2Oz6dgCUot7fVur2sum4v OmB5WZd++YxEi6AfSxnsoUcuWtwzCK9fhrnpP269T5GrG5KNvHP9lUS1lVlKMaM0 UwsEGZRlHTbRVtOTDwONJ79tJrU3DPv363Ih5kEZrv3FhXbRaLsromFB -----END CERTIFICATE-----Generated at Wed May 13 02:16:21 2026 by rpki-client