$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.cer File: 6FFB900EDEAE8469264C3200683452F52D2C7D20.cer (raw, json) Hash identifier: PSDL6LNW0b0mMNTgYfCT/rjxz8Fal5T1j08/zCRov+w= Subject key identifier: 6F:FB:90:0E:DE:AE:84:69:26:4C:32:00:68:34:52:F5:2D:2C:7D:20 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 0B4A607DB6321D224714CB148C8AE7BA2DD9424F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.mft caRepository: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:54:24 +0000 Certificate not after: Sat 01 May 2027 23:59:24 +0000 Subordinate resources: IP: 160.22.24.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:4a:60:7d:b6:32:1d:22:47:14:cb:14:8c:8a:e7:ba:2d:d9:42:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 23:54:24 2026 GMT Not After : May 1 23:59:24 2027 GMT Subject: CN=6FFB900EDEAE8469264C3200683452F52D2C7D20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:dd:d2:28:fa:02:25:ab:99:6b:5d:f1:b8:fa: 46:c3:3c:98:40:cc:0c:50:47:cb:40:26:14:e0:82: 90:6b:df:ac:22:aa:73:1d:e4:69:22:95:72:42:7a: b5:2a:75:e1:2b:ab:a5:53:82:ca:60:94:38:84:bf: 45:b9:69:28:b5:20:b2:b8:70:83:d2:9c:67:22:02: 92:c2:94:14:c8:02:62:35:88:00:bb:1d:d6:25:ed: c6:48:ce:38:22:f8:0b:bc:5a:06:6c:cf:df:ad:c1: 87:d4:69:9a:fe:bb:e6:8a:b3:c5:f5:91:e3:a9:a3: 81:86:ff:bc:af:57:ef:a3:47:09:4d:7a:f3:9d:c7: cb:c2:dd:db:f4:9d:2b:61:d0:eb:40:ab:24:d4:d9: 82:22:fd:ef:49:4f:5b:86:31:ba:fe:84:2a:88:09: 3e:0a:0d:1d:e5:9e:fc:64:95:f9:cf:d4:5e:2d:47: f7:88:4f:05:0f:c7:44:ee:41:a8:de:61:be:14:bb: 56:50:54:72:80:89:f3:42:2a:15:85:de:33:1d:18: be:2c:f4:8f:75:84:98:ed:c6:c6:32:01:45:93:bb: f5:7a:86:26:10:cf:dc:c1:e9:f5:c5:eb:d1:ae:e6: 95:13:19:42:22:ce:45:82:cd:91:71:ed:18:45:5c: 35:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6F:FB:90:0E:DE:AE:84:69:26:4C:32:00:68:34:52:F5:2D:2C:7D:20 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.24.0/23 Signature Algorithm: sha256WithRSAEncryption 07:a4:13:be:05:98:03:d6:4e:1a:f7:b7:cc:53:66:25:4b:03: e9:76:4c:49:6e:ee:69:ab:d0:9e:31:52:c0:c6:a3:2a:34:62: ee:ad:b1:57:e9:c6:10:ea:f3:84:e2:54:50:02:07:67:5b:5a: 8b:45:1a:a9:33:72:13:df:29:9f:97:56:2e:70:56:bb:59:2f: 0c:42:4f:c1:df:0f:cd:98:0e:cc:06:b7:e2:f9:03:03:93:9c: 5d:73:81:5a:c6:0a:00:82:b8:09:bc:e1:37:e7:49:2c:26:2f: 63:6c:d5:77:f0:ed:55:31:3c:ac:2e:a3:d5:e1:e8:f2:24:cb: ea:a3:26:dc:a5:c5:7d:0e:70:ad:51:1f:91:f0:5a:11:7f:fd: 9e:89:5f:61:1b:9d:49:24:bc:4e:14:e9:70:da:91:87:f2:11: 85:1f:5c:1d:7a:18:7a:7e:61:b0:c9:6a:dc:76:1f:e1:4e:96: ab:15:56:f0:3d:68:b5:4c:7e:7d:f0:8d:a0:9c:2f:d4:0b:73: 97:76:a0:1d:6b:53:48:ee:71:31:bb:8c:8a:77:1c:97:15:11: 75:bb:b0:59:25:4d:f4:56:08:c7:1c:6a:85:04:1a:80:11:03: e7:24:61:25:a2:cb:24:dd:c4:f8:3b:bd:24:88:c2:a0:e0:38: b9:fb:15:3f -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUC0pgfbYyHSJHFMsUjIrnui3ZQk8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjIzNTQyNFoX DTI3MDUwMTIzNTkyNFowMzExMC8GA1UEAxMoNkZGQjkwMEVERUFFODQ2OTI2NEMz MjAwNjgzNDUyRjUyRDJDN0QyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM/d0ij6AiWrmWtd8bj6RsM8mEDMDFBHy0AmFOCCkGvfrCKqcx3kaSKVckJ6 tSp14SurpVOCymCUOIS/RblpKLUgsrhwg9KcZyICksKUFMgCYjWIALsd1iXtxkjO OCL4C7xaBmzP363Bh9Rpmv675oqzxfWR46mjgYb/vK9X76NHCU16853Hy8Ld2/Sd K2HQ60CrJNTZgiL970lPW4Yxuv6EKogJPgoNHeWe/GSV+c/UXi1H94hPBQ/HRO5B qN5hvhS7VlBUcoCJ80IqFYXeMx0Yviz0j3WEmO3GxjIBRZO79XqGJhDP3MHp9cXr 0a7mlRMZQiLORYLNkXHtGEVcNdsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG/7kA7eroRpJkwyAGg0UvUtLH0gMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE2ZGEwZTgyLTA3NjQtNDVkMy1hZWQ5LWZkMjU4ZTcyYjZlMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xNmRhMGU4 Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMC82RkZCOTAwRURFQUU4NDY5 MjY0QzMyMDA2ODM0NTJGNTJEMkM3RDIwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBYYMA0GCSqGSIb3DQEBCwUAA4IBAQAHpBO+BZgD1k4a97fMU2YlSwPpdkxJ bu5pq9CeMVLAxqMqNGLurbFX6cYQ6vOE4lRQAgdnW1qLRRqpM3IT3ymfl1YucFa7 WS8MQk/B3w/NmA7MBrfi+QMDk5xdc4FaxgoAgrgJvOE350ksJi9jbNV38O1VMTys LqPV4ejyJMvqoybcpcV9DnCtUR+R8FoRf/2eiV9hG51JJLxOFOlw2pGH8hGFH1wd ehh6fmGwyWrcdh/hTparFVbwPWi1TH598I2gnC/UC3OXdqAda1NI7nExu4yKdxyX FRF1u7BZJU30VgjHHGqFBBqAEQPnJGElossk3cT4O70kiMKg4Di5+xU/ -----END CERTIFICATE-----Generated at Tue May 12 22:47:39 2026 by rpki-client