$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer File: 6D171A25D57FF823724FB6208343D200F64CBBB9.cer (raw, json) Hash identifier: i1TtQ9+9/RXpvqo6MpFDW8y+Ce+7Dniqdtm1dS04lq0= Subject key identifier: 6D:17:1A:25:D5:7F:F8:23:72:4F:B6:20:83:43:D2:00:F6:4C:BB:B9 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 4C21B2CCC437FE8677EBB920C32F31F7C2A1F863 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:54:47 +0000 Certificate not after: Sun 02 May 2027 00:59:47 +0000 Subordinate resources: IP: 160.19.16.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:21:b2:cc:c4:37:fe:86:77:eb:b9:20:c3:2f:31:f7:c2:a1:f8:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:54:47 2026 GMT Not After : May 2 00:59:47 2027 GMT Subject: CN=6D171A25D57FF823724FB6208343D200F64CBBB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e3:4e:3a:e9:8a:0d:77:90:5b:b8:10:c0:1f: dd:e7:b3:68:b7:66:9f:38:96:56:b9:fa:15:f2:81: ca:7b:37:f2:2e:a4:55:af:88:fe:c7:6d:f1:e2:6d: 0c:74:93:27:59:5e:72:0c:f6:3a:38:bc:16:6e:4f: a1:3c:28:d4:2d:84:0c:32:a7:5e:1f:fa:6d:cb:2b: c6:78:d8:35:6e:8a:68:db:0f:2c:7b:4b:e4:a6:0f: 95:6f:62:d1:c2:ef:b7:71:f9:dc:2b:e0:9b:f2:8d: 72:5f:9c:c4:c7:31:7d:4e:da:9f:b0:e4:38:96:63: 68:79:b0:f3:1e:da:b0:c6:a2:9f:68:3e:57:7d:e8: 1d:8e:dc:25:7e:1f:f2:01:e0:70:20:11:46:53:ac: fd:94:73:3e:7f:0e:2b:87:a8:04:47:e4:68:0d:20: 60:17:fb:d8:74:81:5e:82:20:e2:0d:5c:fd:a3:f9: 1b:a8:5d:81:88:59:ac:ee:94:c7:5b:32:21:50:d6: 0b:45:54:9f:86:ef:95:54:1b:5e:06:bd:21:46:91: a2:31:7d:62:24:0a:44:33:e0:e8:1d:fe:05:1b:9e: 74:b3:ad:bc:0c:d0:22:da:67:0a:53:a4:0e:8c:93: 20:a7:e5:e3:ea:70:b9:f9:03:64:f8:53:82:ea:c3: 21:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6D:17:1A:25:D5:7F:F8:23:72:4F:B6:20:83:43:D2:00:F6:4C:BB:B9 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.16.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:d8:0d:a6:a9:d7:01:c0:3e:6c:a7:c8:dc:6b:08:1a:d2:7d: 21:30:ed:ab:54:7b:9f:05:d0:95:92:66:43:34:a3:bb:2f:8e: 58:32:8f:f7:6a:bc:bd:b2:43:02:e8:ed:66:69:93:88:bb:9a: 8b:60:c7:29:06:42:ec:4a:41:26:3a:35:4f:07:92:58:b6:b5: e3:8a:f7:3a:7a:26:c4:3e:ba:cf:36:53:93:4d:46:20:cc:00: ad:3b:d4:13:b4:3d:b8:35:32:84:4f:eb:e0:3a:47:f6:8a:89: 89:6d:93:dd:d9:c0:2e:99:a2:c2:b6:05:79:17:6f:6e:ca:39: c2:a7:17:5b:88:a8:f1:9e:93:1c:8e:99:8a:89:d9:65:dd:bf: c1:80:05:52:82:4f:6b:64:dd:50:68:34:bc:6b:c6:fb:6e:0e: 99:85:89:36:99:ad:3d:e6:75:18:dc:08:eb:ab:14:87:bb:85: 8b:73:21:e8:1f:82:21:e7:d1:fd:d9:7a:f0:95:e4:82:7f:f5: ce:4a:eb:78:66:7f:cc:7a:3e:d4:5d:35:59:55:c6:47:af:78: 5d:39:0a:53:71:2b:78:04:85:e0:4c:33:ef:30:68:e6:00:ff: b9:03:bb:f5:18:e7:86:2f:f2:bb:60:b6:53:d4:ea:fa:c7:d1: ee:5e:29:69 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUTCGyzMQ3/oZ367kgwy8x98Kh+GMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwNTQ0N1oX DTI3MDUwMjAwNTk0N1owMzExMC8GA1UEAxMoNkQxNzFBMjVENTdGRjgyMzcyNEZC NjIwODM0M0QyMDBGNjRDQkJCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKDjTjrpig13kFu4EMAf3eezaLdmnziWVrn6FfKByns38i6kVa+I/sdt8eJt DHSTJ1lecgz2Oji8Fm5PoTwo1C2EDDKnXh/6bcsrxnjYNW6KaNsPLHtL5KYPlW9i 0cLvt3H53Cvgm/KNcl+cxMcxfU7an7DkOJZjaHmw8x7asMain2g+V33oHY7cJX4f 8gHgcCARRlOs/ZRzPn8OK4eoBEfkaA0gYBf72HSBXoIg4g1c/aP5G6hdgYhZrO6U x1syIVDWC0VUn4bvlVQbXga9IUaRojF9YiQKRDPg6B3+BRuedLOtvAzQItpnClOk DoyTIKfl4+pwufkDZPhTgurDITsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG0XGiXVf/gjck+2IIND0gD2TLu5MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzcxNDAzNDA5LWJmMDQtNDJlOS05NTY3LWIwNmVjODIzZDkwMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83MTQwMzQw OS1iZjA0LTQyZTktOTU2Ny1iMDZlYzgyM2Q5MDEvMC82RDE3MUEyNUQ1N0ZGODIz NzI0RkI2MjA4MzQzRDIwMEY2NENCQkI5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBMQMA0GCSqGSIb3DQEBCwUAA4IBAQBP2A2mqdcBwD5sp8jcawga0n0hMO2r VHufBdCVkmZDNKO7L45YMo/3ary9skMC6O1maZOIu5qLYMcpBkLsSkEmOjVPB5JY trXjivc6eibEPrrPNlOTTUYgzACtO9QTtD24NTKET+vgOkf2iomJbZPd2cAumaLC tgV5F29uyjnCpxdbiKjxnpMcjpmKidll3b/BgAVSgk9rZN1QaDS8a8b7bg6ZhYk2 ma095nUY3AjrqxSHu4WLcyHoH4Ih59H92XrwleSCf/XOSut4Zn/Mej7UXTVZVcZH r3hdOQpTcSt4BIXgTDPvMGjmAP+5A7v1GOeGL/K7YLZT1Or6x9HuXilp -----END CERTIFICATE-----Generated at Tue May 12 22:32:32 2026 by rpki-client