$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.cer File: 6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.cer (raw, json) Hash identifier: It5DvPtjtwQriOk6dTNZ8j6iorUa/AaJGVXL58PGJe8= Subject key identifier: 6F:38:83:13:4B:AE:C7:C1:00:C8:B2:A4:93:7D:53:DE:9E:63:9A:CD Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 306EEBCF0DEC7E5C59403E817EED713E3861178D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft caRepository: rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:46:11 +0000 Certificate not after: Sun 02 May 2027 01:51:11 +0000 Subordinate resources: IP: 157.15.118.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:6e:eb:cf:0d:ec:7e:5c:59:40:3e:81:7e:ed:71:3e:38:61:17:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:46:11 2026 GMT Not After : May 2 01:51:11 2027 GMT Subject: CN=6F3883134BAEC7C100C8B2A4937D53DE9E639ACD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:00:67:b3:8a:01:1f:b0:8c:9c:05:92:83:3e: 87:8f:09:e7:34:bd:12:58:00:08:48:0a:2d:f1:2e: 4e:27:42:22:d9:3d:af:e1:61:f4:04:17:85:26:84: 91:1b:35:cd:36:31:ad:b5:db:85:8a:d8:cb:55:d3: ba:81:52:2a:b6:f3:b3:28:19:5e:16:d7:6a:2f:aa: 5f:3c:0b:e7:16:55:fb:73:50:d0:75:b7:19:2d:55: d9:a3:68:30:98:dc:4f:3a:43:9b:4b:2a:77:82:96: 3f:0c:e6:7a:1e:40:9f:b7:26:72:ed:ab:e5:40:a9: 6d:3e:a6:6e:95:55:ab:ad:fe:7b:3c:e5:be:2e:49: 5a:8e:b7:f0:58:f2:61:ce:41:0b:ef:09:9a:bd:ce: 3b:17:b1:1e:d6:3f:d1:07:10:25:32:4b:02:9d:14: d7:95:04:d5:9c:af:f4:ef:e7:b3:42:07:9f:6b:4c: 3b:db:5f:4d:32:31:5f:1e:eb:a3:02:67:d3:3f:7f: 1a:c7:4b:56:95:be:a0:b4:b2:d7:d5:d1:a7:31:bb: 90:5f:6e:08:ee:0e:5d:34:1f:9e:6d:f5:1e:cd:70: 2b:87:2f:ba:94:7b:c2:9a:63:a7:22:95:83:4d:4c: ec:fe:00:31:5f:5e:f4:f5:0b:be:1d:af:12:10:2d: 46:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6F:38:83:13:4B:AE:C7:C1:00:C8:B2:A4:93:7D:53:DE:9E:63:9A:CD X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.118.0/24 Signature Algorithm: sha256WithRSAEncryption 47:63:1c:7d:c7:e1:44:c8:9f:e6:19:54:99:75:2e:ee:06:58: 98:06:5d:df:0e:1b:97:a0:45:c5:6b:c5:38:41:c2:29:82:f0: 9b:91:a5:d9:b2:91:47:43:de:c3:b6:64:ed:6e:b3:40:90:ce: dd:54:f6:01:12:ce:81:63:df:b6:97:28:4f:9f:56:62:3b:2b: af:e5:e3:6f:76:03:f2:e7:18:0a:e7:e2:24:3c:b7:2d:cc:7f: 2a:1e:c3:dc:ba:d1:d5:9e:66:e1:49:d7:04:eb:e7:3f:a9:41: b7:5c:73:e3:21:de:e8:fe:3d:1e:f0:be:f4:8d:cf:0b:88:3d: 24:61:38:88:0a:a7:a4:98:c6:29:67:f4:38:b1:37:7f:79:ad: 37:4a:28:3f:f1:0c:e2:8a:34:ca:b3:61:cd:7e:ce:ae:58:7f: eb:f0:fc:6e:2c:89:bd:cc:13:57:17:c6:20:d5:66:d6:e2:64: d3:16:9b:37:be:fc:1f:b6:77:c3:f4:7d:e9:e9:fe:43:e8:83: f0:9b:c3:e5:f4:6e:a2:39:4a:86:66:49:a8:f6:fd:aa:5c:ce: 83:76:4f:e0:50:84:f7:97:93:07:75:05:21:f3:b0:ec:ea:a3: 1e:c8:1a:30:77:ec:26:6d:07:a7:83:d2:2f:32:dd:ce:17:0c: f5:ed:39:d6 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUMG7rzw3sflxZQD6Bfu1xPjhhF40wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNDYxMVoX DTI3MDUwMjAxNTExMVowMzExMC8GA1UEAxMoNkYzODgzMTM0QkFFQzdDMTAwQzhC MkE0OTM3RDUzREU5RTYzOUFDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOAAZ7OKAR+wjJwFkoM+h48J5zS9ElgACEgKLfEuTidCItk9r+Fh9AQXhSaE kRs1zTYxrbXbhYrYy1XTuoFSKrbzsygZXhbXai+qXzwL5xZV+3NQ0HW3GS1V2aNo MJjcTzpDm0sqd4KWPwzmeh5An7cmcu2r5UCpbT6mbpVVq63+ezzlvi5JWo638Fjy Yc5BC+8Jmr3OOxexHtY/0QcQJTJLAp0U15UE1Zyv9O/ns0IHn2tMO9tfTTIxXx7r owJn0z9/GsdLVpW+oLSy19XRpzG7kF9uCO4OXTQfnm31Hs1wK4cvupR7wppjpyKV g01M7P4AMV9e9PULvh2vEhAtRokCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG84gxNLrsfBAMiypJN9U96eY5rNMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2JlZDczNmRjLWU1ZGItNDM4MS05NzFmLTYyNDM2NzQxODU0Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iZWQ3MzZk Yy1lNWRiLTQzODEtOTcxZi02MjQzNjc0MTg1NGIvMC82RjM4ODMxMzRCQUVDN0Mx MDBDOEIyQTQ5MzdENTNERTlFNjM5QUNELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAnQ92MA0GCSqGSIb3DQEBCwUAA4IBAQBHYxx9x+FEyJ/mGVSZdS7uBliYBl3f DhuXoEXFa8U4QcIpgvCbkaXZspFHQ97DtmTtbrNAkM7dVPYBEs6BY9+2lyhPn1Zi Oyuv5eNvdgPy5xgK5+IkPLctzH8qHsPcutHVnmbhSdcE6+c/qUG3XHPjId7o/j0e 8L70jc8LiD0kYTiICqekmMYpZ/Q4sTd/ea03Sig/8QziijTKs2HNfs6uWH/r8Pxu LIm9zBNXF8Yg1WbW4mTTFps3vvwftnfD9H3p6f5D6IPwm8Pl9G6iOUqGZkmo9v2q XM6Ddk/gUIT3l5MHdQUh87Ds6qMeyBowd+wmbQeng9IvMt3OFwz17TnW -----END CERTIFICATE-----Generated at Tue May 12 22:16:38 2026 by rpki-client