$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer File: C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer (raw, json) Hash identifier: Iynjzp3SYYDLvK5cdw7SPMmzdlkFf7OU0b4pHy9OAzk= Subject key identifier: C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 23708A9EB4868665B7397B0EB8FCCB5431E5FC2B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:19:04 +0000 Certificate not after: Sun 02 May 2027 00:24:04 +0000 Subordinate resources: IP: 160.25.218.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:70:8a:9e:b4:86:86:65:b7:39:7b:0e:b8:fc:cb:54:31:e5:fc:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:19:04 2026 GMT Not After : May 2 00:24:04 2027 GMT Subject: CN=C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8a:db:cb:e7:ef:05:ec:2b:32:37:f7:90:13: f9:93:b0:f2:35:8d:a7:e2:69:b3:5f:43:e9:98:a9: 92:3f:e8:86:2a:5d:34:26:21:93:03:4e:bd:4d:4f: 52:38:8f:ab:2e:d8:ed:65:8a:1d:7a:10:9a:74:04: 8f:4e:45:33:85:4b:e3:a1:50:14:af:1f:5c:65:80: 2d:23:b4:3b:44:60:4e:8d:e0:b3:47:12:90:78:b8: 5f:f6:3b:67:fd:ae:06:ee:83:c0:c7:9e:6d:6c:5b: 45:af:c2:1b:a6:b9:62:21:58:74:67:73:c7:fe:f2: f7:ba:cf:a8:48:4f:26:6f:ba:eb:1b:82:2a:d0:12: 1e:ab:60:57:c7:46:05:3d:d7:e8:5b:ff:9d:66:b8: 4e:80:f0:43:d9:9e:cc:6c:93:1a:e7:bc:c4:05:0d: e1:0c:74:e4:30:72:f7:75:e2:02:cf:98:3b:7b:a5: 28:07:d1:c6:73:48:ff:5d:b6:e4:b5:e2:e3:d0:7d: 53:7a:99:f4:3b:58:5f:d1:e6:9b:59:59:73:56:bd: 6f:55:3e:5d:dd:e0:ee:e8:85:60:27:db:09:45:46: 0e:5c:19:b6:40:c4:96:1e:c0:c9:2c:d5:f7:09:64: 0f:7c:6e:b9:d2:b7:22:b8:5e:3d:72:6a:bd:4d:65: 9c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.218.0/23 Signature Algorithm: sha256WithRSAEncryption 96:95:df:27:90:43:e0:6a:76:a0:86:55:8a:03:20:42:cd:32: 0e:39:ce:fc:01:35:5c:1f:95:3e:90:ac:98:0c:83:5d:47:7e: 87:f1:0c:3a:69:7c:60:f9:58:e1:ea:2b:51:c4:4a:97:fc:13: c9:7c:6a:12:70:70:08:33:18:34:14:5c:f3:38:cd:2b:ae:65: 6c:b1:4c:f9:05:ca:5f:b0:05:ac:ca:d6:d0:82:65:ca:87:c4: 2f:40:46:26:c0:4b:b2:33:93:b1:4d:d4:6c:6a:95:15:6d:f8: 26:dc:dc:cd:fd:70:ec:15:2d:73:d3:33:62:0f:c2:68:55:44: c2:f9:cc:41:8e:a3:1c:41:e3:dc:df:fd:ca:ff:f2:2a:d6:a6: 4e:62:4a:56:6b:59:31:5d:46:c0:6b:83:2a:2f:42:05:8a:10: a7:9f:65:8e:f5:41:75:c1:f6:62:22:ca:39:ac:11:a0:7f:f9: 6a:4d:97:92:a4:a3:07:95:7b:3a:36:13:38:b1:60:bd:68:8a: 96:ea:3a:79:06:8a:c6:09:92:f1:32:c3:16:77:32:0e:a7:3b: 04:37:5c:93:0c:3d:59:fa:c9:1c:63:3b:7a:aa:fe:9b:75:d5: 1c:33:d0:e4:33:df:bf:9f:a0:09:db:dc:d0:ed:f3:f9:a9:d4: 3f:57:d7:8e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUI3CKnrSGhmW3OXsOuPzLVDHl/CswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMTkwNFoX DTI3MDUwMjAwMjQwNFowMzExMC8GA1UEAxMoQzZDQkIzQTk4REQ0NzRDNDQ5NzBC OEI0RjA2QzE5NDRDM0JBMDVFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMyK28vn7wXsKzI395AT+ZOw8jWNp+Jps19D6Zipkj/ohipdNCYhkwNOvU1P UjiPqy7Y7WWKHXoQmnQEj05FM4VL46FQFK8fXGWALSO0O0RgTo3gs0cSkHi4X/Y7 Z/2uBu6DwMeebWxbRa/CG6a5YiFYdGdzx/7y97rPqEhPJm+66xuCKtASHqtgV8dG BT3X6Fv/nWa4ToDwQ9mezGyTGue8xAUN4Qx05DBy93XiAs+YO3ulKAfRxnNI/122 5LXi49B9U3qZ9DtYX9Hmm1lZc1a9b1U+Xd3g7uiFYCfbCUVGDlwZtkDElh7AySzV 9wlkD3xuudK3IrhePXJqvU1lnKcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMbLs6mN1HTESXC4tPBsGUTDugXqMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNhZjA3ZjE4LTVjNDktNDEyOS1hYTUzLTcwODVjY2Q1N2I2My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zYWYwN2Yx OC01YzQ5LTQxMjktYWE1My03MDg1Y2NkNTdiNjMvMC9DNkNCQjNBOThERDQ3NEM0 NDk3MEI4QjRGMDZDMTk0NEMzQkEwNUVBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBnaMA0GCSqGSIb3DQEBCwUAA4IBAQCWld8nkEPganaghlWKAyBCzTIOOc78 ATVcH5U+kKyYDINdR36H8Qw6aXxg+Vjh6itRxEqX/BPJfGoScHAIMxg0FFzzOM0r rmVssUz5BcpfsAWsytbQgmXKh8QvQEYmwEuyM5OxTdRsapUVbfgm3NzN/XDsFS1z 0zNiD8JoVUTC+cxBjqMcQePc3/3K//Iq1qZOYkpWa1kxXUbAa4MqL0IFihCnn2WO 9UF1wfZiIso5rBGgf/lqTZeSpKMHlXs6NhM4sWC9aIqW6jp5BorGCZLxMsMWdzIO pzsEN1yTDD1Z+skcYzt6qv6bddUcM9DkM9+/n6AJ29zQ7fP5qdQ/V9eO -----END CERTIFICATE-----Generated at Tue May 12 22:16:37 2026 by rpki-client