$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer File: 6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer (raw, json) Hash identifier: ESbdiiE9DGywaGn0KlNraG4r5zl5ZeHWMmG5bjH970g= Subject key identifier: 6E:65:C4:E0:43:F0:4A:81:5F:83:77:E5:AD:2C:02:BF:2A:F7:9B:F6 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 1844138C8627A431BD2AA1415C98430B33A82D4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:28:32 +0000 Certificate not after: Sun 02 May 2027 01:33:32 +0000 Subordinate resources: IP: 160.191.12.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:44:13:8c:86:27:a4:31:bd:2a:a1:41:5c:98:43:0b:33:a8:2d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:28:32 2026 GMT Not After : May 2 01:33:32 2027 GMT Subject: CN=6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:81:3f:5d:1d:5a:29:91:bc:c0:70:39:04:1e: 58:61:5d:eb:07:8f:a2:da:f3:24:da:2d:1c:1d:71: 90:d8:49:ec:dd:51:00:bf:bc:75:49:b7:04:99:5a: 52:f3:f9:97:2b:63:38:ce:6b:a3:09:4f:96:a3:68: 34:7c:f7:50:be:55:4a:7d:07:34:dc:50:c6:9a:6a: a5:2b:3e:2c:e9:4d:4f:af:a8:cb:78:41:d8:0d:ee: e9:12:25:bc:a7:c7:1d:94:12:76:65:0a:c9:72:3e: 5c:76:c6:69:4d:4f:b6:3f:31:a7:1a:b8:cb:ed:58: 70:f8:ff:bc:5e:3c:71:8c:16:54:e3:37:05:31:c3: 24:2f:28:80:7b:62:e2:4f:41:6f:3c:c7:29:0a:68: b8:55:b7:5f:99:f2:af:17:72:68:b5:90:76:af:38: d9:82:9b:01:c1:c4:0b:60:f0:3c:5c:26:d0:0f:24: bf:5a:e3:62:60:89:d3:db:6b:d8:3f:5b:2c:22:b2: 26:aa:58:0f:c3:74:eb:03:dd:35:00:b4:cc:65:ab: 2f:c6:d8:59:19:cf:54:01:b8:c5:9c:40:3a:bb:fd: b6:4b:33:b5:15:48:43:de:fc:b8:e8:86:bd:f2:f3: ca:4b:80:be:a9:30:d3:d8:de:a6:e8:4e:35:99:09: 1e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6E:65:C4:E0:43:F0:4A:81:5F:83:77:E5:AD:2C:02:BF:2A:F7:9B:F6 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.12.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:6d:41:2b:e2:41:23:ef:5a:ef:47:d0:a5:91:0e:22:b4:38: 3e:e5:ca:0d:1d:1e:51:4a:0c:8f:8f:65:0b:b3:06:00:59:18: 3f:24:8e:01:2e:12:66:fc:a4:79:09:5a:86:e2:4d:e0:1d:0f: ea:cc:6c:a5:31:48:24:2a:a6:13:91:bd:19:52:5e:86:07:fe: ba:46:7d:ce:bf:ae:7b:08:8b:50:05:97:ab:14:d4:76:0a:cf: cb:a3:7a:81:0e:68:72:a6:e1:d0:51:9f:0f:07:6c:fd:5f:94: 44:86:c6:3f:a7:07:dc:be:3f:a7:f7:67:b8:6c:b8:53:46:60: 5d:17:5a:0a:d0:ca:36:6f:24:48:15:8e:68:0c:bd:a7:10:ab: 8a:50:a7:a6:47:6d:2a:18:00:9f:eb:14:2a:39:02:e6:1b:3f: 0b:23:26:3f:97:8d:79:a0:3a:40:14:4b:83:e6:2b:79:5a:f0: ff:c0:3f:5c:ca:30:86:8e:4a:56:b6:5e:a9:2d:1c:ca:51:bf: d1:b8:f6:13:f3:d7:2a:37:ca:80:d8:28:f3:40:1c:08:03:ce: f7:65:0e:f0:7e:cd:96:2e:41:9a:43:03:01:13:2d:ee:16:ce: 0a:92:c6:bc:9e:23:b0:31:fb:3b:bf:1b:89:e8:7f:9a:8a:30: 35:c0:61:db -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUGEQTjIYnpDG9KqFBXJhDCzOoLU8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMjgzMloX DTI3MDUwMjAxMzMzMlowMzExMC8GA1UEAxMoNkU2NUM0RTA0M0YwNEE4MTVGODM3 N0U1QUQyQzAyQkYyQUY3OUJGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANGBP10dWimRvMBwOQQeWGFd6wePotrzJNotHB1xkNhJ7N1RAL+8dUm3BJla UvP5lytjOM5rowlPlqNoNHz3UL5VSn0HNNxQxppqpSs+LOlNT6+oy3hB2A3u6RIl vKfHHZQSdmUKyXI+XHbGaU1Ptj8xpxq4y+1YcPj/vF48cYwWVOM3BTHDJC8ogHti 4k9BbzzHKQpouFW3X5nyrxdyaLWQdq842YKbAcHEC2DwPFwm0A8kv1rjYmCJ09tr 2D9bLCKyJqpYD8N06wPdNQC0zGWrL8bYWRnPVAG4xZxAOrv9tksztRVIQ978uOiG vfLzykuAvqkw09jepuhONZkJHmkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG5lxOBD8EqBX4N35a0sAr8q95v2MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2EyMTFmMzQ3LWExZTctNDcxZC1hZDIwLWRhNzZhYWJmMzg0Yy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hMjExZjM0 Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMC82RTY1QzRFMDQzRjA0QTgx NUY4Mzc3RTVBRDJDMDJCRjJBRjc5QkY2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoL8MMA0GCSqGSIb3DQEBCwUAA4IBAQBubUEr4kEj71rvR9ClkQ4itDg+5coN HR5RSgyPj2ULswYAWRg/JI4BLhJm/KR5CVqG4k3gHQ/qzGylMUgkKqYTkb0ZUl6G B/66Rn3Ov657CItQBZerFNR2Cs/Lo3qBDmhypuHQUZ8PB2z9X5REhsY/pwfcvj+n 92e4bLhTRmBdF1oK0Mo2byRIFY5oDL2nEKuKUKemR20qGACf6xQqOQLmGz8LIyY/ l415oDpAFEuD5it5WvD/wD9cyjCGjkpWtl6pLRzKUb/RuPYT89cqN8qA2CjzQBwI A873ZQ7wfs2WLkGaQwMBEy3uFs4Kksa8niOwMfs7vxuJ6H+aijA1wGHb -----END CERTIFICATE-----Generated at Tue May 12 22:39:07 2026 by rpki-client