$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer File: F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer (raw, json) Hash identifier: xRde1T7zqp/URnmO406ifW+MXTk6EgnZCl7QYksMg3E= Subject key identifier: F6:B8:6F:E2:0E:73:A2:2D:9A:35:3C:C9:2E:D8:DB:F9:D2:21:F9:6F Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 272CB9D18FBD4B0058ADE28AC7101A800CBD002D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:53:36 +0000 Certificate not after: Sun 02 May 2027 01:58:36 +0000 Subordinate resources: IP: 157.10.222.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:2c:b9:d1:8f:bd:4b:00:58:ad:e2:8a:c7:10:1a:80:0c:bd:00:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:53:36 2026 GMT Not After : May 2 01:58:36 2027 GMT Subject: CN=F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f4:8c:9e:97:69:36:17:cc:08:36:20:8e:8a: 08:01:5a:33:8c:aa:17:26:7a:3a:24:ca:e6:e8:08: 81:b6:24:12:93:9c:16:ae:89:8e:05:cc:c3:0c:90: d8:60:cb:50:d2:c7:de:99:8f:c8:1d:44:09:f7:26: 9c:72:30:52:3c:67:47:6f:c3:31:90:29:ef:be:38: 92:01:97:ff:2e:5c:64:92:8b:29:47:ef:9e:da:65: 0c:51:bf:d9:39:6b:17:f2:ef:e3:e3:10:1b:99:e8: 28:80:7f:5c:35:e1:56:45:e6:f1:46:ee:2c:20:24: 88:b5:ac:eb:df:3c:ea:c5:bf:45:ef:fd:bb:92:fa: 10:83:03:06:e1:a6:36:9c:2c:81:53:0f:52:9e:ae: 18:98:03:1b:f8:3b:cd:af:56:48:08:d3:2f:8c:3c: 1c:85:5d:f0:90:98:bf:1f:79:da:cb:b2:e3:f0:f1: 80:88:1e:0f:88:fa:58:6d:34:e9:c4:66:a2:b2:ef: d3:da:1f:21:eb:ab:4a:09:99:0e:03:c0:5c:b6:8f: b6:22:b6:8c:25:51:8c:b9:fd:4b:01:bb:ff:4d:a6: 6c:eb:66:57:21:e1:41:ec:64:22:b0:3b:ce:04:9f: 4e:ca:1a:12:7a:92:12:69:ea:c2:b8:00:a3:2b:94: 84:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F6:B8:6F:E2:0E:73:A2:2D:9A:35:3C:C9:2E:D8:DB:F9:D2:21:F9:6F X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.222.0/23 Signature Algorithm: sha256WithRSAEncryption ac:c3:6f:f8:d4:e1:ee:33:f1:71:4e:af:01:f0:60:e4:33:87: 3b:ab:2a:d8:8f:b5:ff:9b:f5:9e:90:5c:d0:d5:70:d8:9a:29: b0:f3:fa:3d:bd:3d:1f:36:da:d8:04:31:02:1f:e9:94:49:4a: 36:8e:de:f0:e5:3a:d1:0a:82:f5:a1:9e:fc:79:20:1e:1f:76: ca:7c:0d:5b:6d:8b:fb:09:c8:18:e0:b7:69:3b:89:36:b5:b5: a8:96:e5:56:2c:5f:60:08:f2:aa:bb:3a:2e:b2:d9:ea:6d:83: 29:13:ba:c1:96:ee:60:79:7e:07:b9:28:f6:b1:2a:f9:47:bd: c6:7a:a5:fb:a5:9d:bf:47:2f:f3:85:ab:22:55:a4:fa:08:a8: c7:6d:07:d2:98:b5:ba:bc:37:9a:55:24:82:fb:14:b6:95:fd: c7:a9:48:de:93:a9:7b:d2:c1:89:fd:f7:a1:28:9f:8a:53:1d: c7:e0:42:6a:05:6e:8f:6e:2c:6f:7f:79:ff:bf:84:ba:d5:83: 84:0f:cf:56:60:14:93:52:f0:30:ac:9b:56:20:59:46:6a:5d: 63:40:52:58:27:88:ec:8b:1b:a5:5a:03:e6:69:df:ce:1b:6a: 72:f6:2c:12:ba:cc:d0:75:cb:65:d5:94:38:c0:2c:91:4a:ae: 3b:9f:c2:54 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUJyy50Y+9SwBYreKKxxAagAy9AC0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNTMzNloX DTI3MDUwMjAxNTgzNlowMzExMC8GA1UEAxMoRjZCODZGRTIwRTczQTIyRDlBMzUz Q0M5MkVEOERCRjlEMjIxRjk2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALz0jJ6XaTYXzAg2II6KCAFaM4yqFyZ6OiTK5ugIgbYkEpOcFq6JjgXMwwyQ 2GDLUNLH3pmPyB1ECfcmnHIwUjxnR2/DMZAp7744kgGX/y5cZJKLKUfvntplDFG/ 2TlrF/Lv4+MQG5noKIB/XDXhVkXm8UbuLCAkiLWs69886sW/Re/9u5L6EIMDBuGm NpwsgVMPUp6uGJgDG/g7za9WSAjTL4w8HIVd8JCYvx952suy4/DxgIgeD4j6WG00 6cRmorLv09ofIeurSgmZDgPAXLaPtiK2jCVRjLn9SwG7/02mbOtmVyHhQexkIrA7 zgSfTsoaEnqSEmnqwrgAoyuUhD0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPa4b+IOc6ItmjU8yS7Y2/nSIflvMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NhMzc2YTZlLTNlY2EtNGY3My04ZDE1LWQxZGRlZTkxZmY5OC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jYTM3NmE2 ZS0zZWNhLTRmNzMtOGQxNS1kMWRkZWU5MWZmOTgvMC9GNkI4NkZFMjBFNzNBMjJE OUEzNTNDQzkyRUQ4REJGOUQyMjFGOTZGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnQreMA0GCSqGSIb3DQEBCwUAA4IBAQCsw2/41OHuM/FxTq8B8GDkM4c7qyrY j7X/m/WekFzQ1XDYmimw8/o9vT0fNtrYBDECH+mUSUo2jt7w5TrRCoL1oZ78eSAe H3bKfA1bbYv7CcgY4LdpO4k2tbWoluVWLF9gCPKquzoustnqbYMpE7rBlu5geX4H uSj2sSr5R73GeqX7pZ2/Ry/zhasiVaT6CKjHbQfSmLW6vDeaVSSC+xS2lf3HqUje k6l70sGJ/fehKJ+KUx3H4EJqBW6Pbixvf3n/v4S61YOED89WYBSTUvAwrJtWIFlG al1jQFJYJ4jsixulWgPmad/OG2py9iwSuszQdctl1ZQ4wCyRSq47n8JU -----END CERTIFICATE-----Generated at Tue May 12 22:52:56 2026 by rpki-client