$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer File: 6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer (raw, json) Hash identifier: 5IMHDBwhpnzKZok2eQkM6213eiS46UwedXgfu33dg3E= Subject key identifier: 63:09:09:1B:8F:7D:4A:6A:E8:C6:A1:16:85:D8:3D:C2:F9:26:FB:7F Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 630802D24BC3AA499B80D9C092FDEF27484110DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:43:22 +0000 Certificate not after: Sat 01 May 2027 23:48:22 +0000 Subordinate resources: IP: 160.22.126.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:08:02:d2:4b:c3:aa:49:9b:80:d9:c0:92:fd:ef:27:48:41:10:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 23:43:22 2026 GMT Not After : May 1 23:48:22 2027 GMT Subject: CN=6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:43:94:00:5d:dc:3a:4b:f9:a9:ae:78:8b:13: e1:b1:3d:7d:02:3f:37:85:0d:b3:c9:c6:59:18:a1: c2:17:49:71:5b:90:c3:39:c6:17:67:fa:02:ea:a0: 53:96:e6:fa:50:dd:d5:3f:45:b0:64:e6:6d:c3:07: 97:fa:0a:fd:ae:0c:3b:8a:e7:2a:20:b0:d3:79:cc: 11:8c:f1:68:31:7f:52:bc:8a:81:78:2e:fd:fc:5e: be:e2:72:54:7c:8c:09:9a:76:c4:1c:34:a8:55:a2: 7f:51:f6:94:45:a7:40:6b:ef:4e:68:ab:f8:5e:d5: 35:73:24:3d:dc:e4:5b:96:68:58:7e:5f:5c:1b:4f: ce:af:32:e4:ac:b0:f3:50:18:94:3c:d4:4c:50:04: 83:e8:bf:f5:e4:a6:06:4b:f8:10:ff:6a:55:fc:e7: f9:5f:83:f6:21:dd:22:f3:3f:29:07:28:07:c7:0f: 5a:e1:3f:ed:f6:76:7e:f3:6f:33:fb:7f:38:32:f0: da:0c:d2:06:69:aa:5b:e2:f0:94:7c:23:e0:6d:d7: 38:73:a2:05:60:fd:e2:09:0b:40:9e:e0:a5:50:77: 7c:ae:cd:98:38:18:2b:95:9a:69:cb:12:fd:ce:70: ad:ba:5c:63:78:68:b7:b7:08:0f:11:bf:44:95:af: c7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 63:09:09:1B:8F:7D:4A:6A:E8:C6:A1:16:85:D8:3D:C2:F9:26:FB:7F X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.126.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:23:5b:dc:a8:2b:77:74:aa:62:e8:02:24:51:f8:ce:09:09: fe:7f:9e:6c:84:c3:69:3d:ed:d2:eb:b8:50:68:b4:b5:dc:4d: 00:67:49:8b:24:a2:5f:17:51:08:cc:ad:15:c6:4e:53:7a:f3: ef:a5:f9:aa:80:67:4f:7b:64:b3:e5:7b:78:10:54:eb:34:76: 9e:bd:b8:1e:e2:7a:fa:7c:15:d4:d3:f8:68:30:67:07:44:46: e5:9d:e8:44:ae:e3:ac:33:35:40:1f:14:34:2d:c2:24:38:15: c0:90:00:9f:2f:dc:b9:35:6c:d5:19:6a:61:7a:2c:9b:95:b2: 6c:53:bd:d2:09:9e:74:3f:23:8b:5b:6b:0e:bb:78:e2:e1:ab: da:55:23:15:5a:a6:f1:fd:6b:8c:bf:f4:c2:14:69:cb:60:1f: 47:19:3e:25:99:9c:78:ca:7e:eb:9e:61:d3:d5:ba:a8:21:ed: 90:9c:e0:8a:75:b9:10:f7:e4:37:6c:d9:40:16:82:55:90:f3: 69:18:70:f4:a0:e6:da:0c:1c:e6:fa:6d:cc:cc:7d:6f:98:72: 92:b1:45:bf:f1:bd:e4:fb:c2:6c:d6:42:d8:a2:ce:ef:81:78: 77:46:55:c0:26:da:af:b9:4f:ae:13:4f:67:f7:0f:43:cf:ed: 78:ef:65:8c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYwgC0kvDqkmbgNnAkv3vJ0hBEN4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjIzNDMyMloX DTI3MDUwMTIzNDgyMlowMzExMC8GA1UEAxMoNjMwOTA5MUI4RjdENEE2QUU4QzZB MTE2ODVEODNEQzJGOTI2RkI3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKtDlABd3DpL+amueIsT4bE9fQI/N4UNs8nGWRihwhdJcVuQwznGF2f6Auqg U5bm+lDd1T9FsGTmbcMHl/oK/a4MO4rnKiCw03nMEYzxaDF/UryKgXgu/fxevuJy VHyMCZp2xBw0qFWif1H2lEWnQGvvTmir+F7VNXMkPdzkW5ZoWH5fXBtPzq8y5Kyw 81AYlDzUTFAEg+i/9eSmBkv4EP9qVfzn+V+D9iHdIvM/KQcoB8cPWuE/7fZ2fvNv M/t/ODLw2gzSBmmqW+LwlHwj4G3XOHOiBWD94gkLQJ7gpVB3fK7NmDgYK5WaacsS /c5wrbpcY3hot7cIDxG/RJWvx5sCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGMJCRuPfUpq6MahFoXYPcL5Jvt/MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzA1NDZlMDlhLWMwMDctNGIwYy05NDYwLTdjNDAzNDFjYTJmNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wNTQ2ZTA5 YS1jMDA3LTRiMGMtOTQ2MC03YzQwMzQxY2EyZjcvMC82MzA5MDkxQjhGN0Q0QTZB RThDNkExMTY4NUQ4M0RDMkY5MjZGQjdGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBZ+MA0GCSqGSIb3DQEBCwUAA4IBAQALI1vcqCt3dKpi6AIkUfjOCQn+f55s hMNpPe3S67hQaLS13E0AZ0mLJKJfF1EIzK0Vxk5TevPvpfmqgGdPe2Sz5Xt4EFTr NHaevbge4nr6fBXU0/hoMGcHREblnehEruOsMzVAHxQ0LcIkOBXAkACfL9y5NWzV GWpheiyblbJsU73SCZ50PyOLW2sOu3ji4avaVSMVWqbx/WuMv/TCFGnLYB9HGT4l mZx4yn7rnmHT1bqoIe2QnOCKdbkQ9+Q3bNlAFoJVkPNpGHD0oObaDBzm+m3MzH1v mHKSsUW/8b3k+8Js1kLYos7vgXh3RlXAJtqvuU+uE09n9w9Dz+1472WM -----END CERTIFICATE-----Generated at Tue May 12 22:47:27 2026 by rpki-client