$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/6E24FCB26084F4518683107BCD2BBF81AB6AC68B.cer File: 6E24FCB26084F4518683107BCD2BBF81AB6AC68B.cer (raw, json) Hash identifier: v4ay7UeXshzVBwqJt+Rf9f35/tqyycorq0a306kFFTs= Subject key identifier: 6E:24:FC:B2:60:84:F4:51:86:83:10:7B:CD:2B:BF:81:AB:6A:C6:8B Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 39865239912C1A06AE18F0036F6384E2F25E1362 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/6E24FCB26084F4518683107BCD2BBF81AB6AC68B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:32:30 +0000 Certificate not after: Sun 02 May 2027 00:37:30 +0000 Subordinate resources: IP: 160.25.242.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:86:52:39:91:2c:1a:06:ae:18:f0:03:6f:63:84:e2:f2:5e:13:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:32:30 2026 GMT Not After : May 2 00:37:30 2027 GMT Subject: CN=6E24FCB26084F4518683107BCD2BBF81AB6AC68B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:42:6e:0b:5e:99:f3:b3:d3:6c:60:8f:8d:60: 78:2d:43:ab:94:f2:25:09:97:18:42:97:64:9a:22: fc:2b:50:28:a5:8c:73:85:ca:fd:d6:ac:c2:2d:3c: 39:77:fa:64:98:15:6c:70:78:8b:16:25:36:17:ab: de:65:c7:94:df:a6:7d:08:a9:c8:e0:3c:ba:cc:f7: 70:4e:64:23:de:02:3a:5f:40:bb:d6:fb:b1:e4:25: 60:25:f6:ff:de:88:c5:0b:43:c5:da:2a:bf:55:9e: 6b:0d:9c:c0:9e:84:1a:89:31:bc:7c:87:3d:3d:88: 6c:d7:88:0e:12:c9:5a:f4:f9:95:b8:03:ab:3f:8b: 60:1c:22:d0:ce:1c:a1:56:c2:b2:96:33:fc:08:9d: e9:d6:03:83:34:54:14:00:4b:55:bc:ce:60:15:73: a9:31:78:e6:50:7e:f9:c8:83:91:a2:d5:5e:a2:3d: b5:91:ab:41:5c:c9:73:ba:e9:6b:81:0f:bb:ba:a3: 9e:60:28:58:2b:3d:62:d2:da:5b:cc:e6:b5:88:03: 8b:5b:dd:96:75:b8:7e:80:9c:88:f3:a3:9a:64:30: 8d:94:8b:99:c1:d5:fe:80:93:a8:61:30:24:9c:17: 10:ca:a8:36:0b:c6:30:e2:b5:af:f9:dd:75:1a:f8: 8f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6E:24:FC:B2:60:84:F4:51:86:83:10:7B:CD:2B:BF:81:AB:6A:C6:8B X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/6E24FCB26084F4518683107BCD2BBF81AB6AC68B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.242.0/23 Signature Algorithm: sha256WithRSAEncryption 75:68:52:5a:f6:46:07:bf:65:90:5e:f5:46:fb:14:81:ad:c5: 4e:94:25:ec:72:8c:ef:72:4b:27:70:c5:4b:82:73:d7:22:f0: 0e:5b:53:3d:76:e5:80:b5:96:3d:99:26:c6:45:55:1c:db:1c: 9b:e4:6e:f8:85:0f:4f:f1:e6:62:16:5c:7c:5c:2d:1b:01:8a: d3:d6:18:b2:3c:1d:00:56:de:03:4f:b9:2a:c4:3a:ce:30:ed: cf:ac:66:37:68:2d:e4:24:de:53:60:e5:8f:6a:2d:55:cc:a6: 67:e4:ce:10:0a:70:62:f4:c4:dc:44:f1:af:f6:cd:ef:9e:79: 50:ba:bb:87:c3:38:24:d5:7a:29:8d:bf:42:eb:55:be:96:c7: fa:09:15:5e:be:8e:85:dc:da:79:94:ba:3d:6a:e4:4b:7f:5a: 07:36:95:ae:0e:91:b4:2a:1f:82:fe:1b:4a:a2:93:8b:13:5f: 2a:2d:4a:b7:f5:37:01:c1:c8:1d:3c:55:ea:bd:d8:76:0c:c7: f6:47:37:0a:a4:18:41:9b:50:05:f7:93:86:9c:f1:b6:9b:dc: f1:43:32:4d:22:54:c2:ba:32:0e:44:88:5b:dd:3d:17:49:83: 2d:fa:10:bf:ad:39:bc:d3:2e:99:24:eb:f6:55:09:a9:a0:b5: 4d:98:39:88 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUOYZSOZEsGgauGPADb2OE4vJeE2IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMzIzMFoX DTI3MDUwMjAwMzczMFowMzExMC8GA1UEAxMoNkUyNEZDQjI2MDg0RjQ1MTg2ODMx MDdCQ0QyQkJGODFBQjZBQzY4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKBCbgtemfOz02xgj41geC1Dq5TyJQmXGEKXZJoi/CtQKKWMc4XK/daswi08 OXf6ZJgVbHB4ixYlNher3mXHlN+mfQipyOA8usz3cE5kI94COl9Au9b7seQlYCX2 /96IxQtDxdoqv1Weaw2cwJ6EGokxvHyHPT2IbNeIDhLJWvT5lbgDqz+LYBwi0M4c oVbCspYz/Aid6dYDgzRUFABLVbzOYBVzqTF45lB++ciDkaLVXqI9tZGrQVzJc7rp a4EPu7qjnmAoWCs9YtLaW8zmtYgDi1vdlnW4foCciPOjmmQwjZSLmcHV/oCTqGEw JJwXEMqoNgvGMOK1r/nddRr4j5kCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG4k/LJghPRRhoMQe80rv4GrasaLMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzUwNTM4OGY0LTEwN2ItNDRhOS05ZDhmLTE2MDNmZWNmZGVlOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81MDUzODhm NC0xMDdiLTQ0YTktOWQ4Zi0xNjAzZmVjZmRlZTkvMC82RTI0RkNCMjYwODRGNDUx ODY4MzEwN0JDRDJCQkY4MUFCNkFDNjhCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBnyMA0GCSqGSIb3DQEBCwUAA4IBAQB1aFJa9kYHv2WQXvVG+xSBrcVOlCXs cozvcksncMVLgnPXIvAOW1M9duWAtZY9mSbGRVUc2xyb5G74hQ9P8eZiFlx8XC0b AYrT1hiyPB0AVt4DT7kqxDrOMO3PrGY3aC3kJN5TYOWPai1VzKZn5M4QCnBi9MTc RPGv9s3vnnlQuruHwzgk1Xopjb9C61W+lsf6CRVevo6F3Np5lLo9auRLf1oHNpWu DpG0Kh+C/htKopOLE18qLUq39TcBwcgdPFXqvdh2DMf2RzcKpBhBm1AF95OGnPG2 m9zxQzJNIlTCujIORIhb3T0XSYMt+hC/rTm80y6ZJOv2VQmpoLVNmDmI -----END CERTIFICATE-----Generated at Tue May 12 22:02:41 2026 by rpki-client