$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer File: 06083035B4010CEC337EE26F5EA15A04DD209219.cer (raw, json) Hash identifier: r+Zl1u7qpPv84hpfQtRx6eP2U2aHPoA9SxZbFadNK4U= Subject key identifier: 06:08:30:35:B4:01:0C:EC:33:7E:E2:6F:5E:A1:5A:04:DD:20:92:19 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2FBA844C30EC03F036FA7E3847F7B5947BBAC931 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft caRepository: rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:47:07 +0000 Certificate not after: Sun 02 May 2027 00:52:07 +0000 Subordinate resources: IP: 45.64.252.0/22 IP: 103.19.208.0/22 IP: 113.212.112.0/20 IP: 2404:6d00::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ba:84:4c:30:ec:03:f0:36:fa:7e:38:47:f7:b5:94:7b:ba:c9:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:47:07 2026 GMT Not After : May 2 00:52:07 2027 GMT Subject: CN=06083035B4010CEC337EE26F5EA15A04DD209219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d3:00:b7:95:58:86:4c:96:bb:36:e3:fd:34: 57:1b:fe:01:a1:4d:19:15:33:eb:21:18:ff:f0:96: 37:52:e5:f5:55:3d:8c:6f:ff:a1:26:00:54:e4:bb: eb:50:cb:3e:d6:e0:20:84:d5:a8:2a:d3:48:68:46: ae:cf:2e:5b:7e:ff:61:a6:af:08:4a:65:9f:ab:1f: 11:6b:b0:a8:9e:29:60:28:b1:0d:d5:d4:5d:09:21: 99:32:48:5d:f1:1e:11:50:d7:48:9c:55:92:2d:0f: 21:35:52:5a:76:45:86:b1:fb:9e:62:d0:81:05:61: 86:c3:31:b6:ec:f1:61:8e:5a:8a:d0:13:73:1c:44: 5e:6d:e0:29:99:9c:0c:11:50:0c:3a:e1:2d:db:e4: 89:12:3a:9f:c1:7c:78:02:e5:1f:ff:27:63:86:6e: c7:04:5f:c0:63:6f:c9:eb:b1:5c:95:6a:82:c3:93: fc:19:d8:14:1b:49:47:b5:3e:94:1f:67:15:11:aa: 2d:7a:24:18:ee:fc:05:d3:7e:a1:d8:30:9b:8d:38: bd:da:cb:63:68:2c:11:99:73:32:b5:0b:2a:56:15: 88:20:88:04:dc:06:ec:e3:9a:9b:59:1f:63:74:5e: 40:a7:fa:63:27:52:4c:bc:c7:99:31:d2:a7:61:bb: 99:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 06:08:30:35:B4:01:0C:EC:33:7E:E2:6F:5E:A1:5A:04:DD:20:92:19 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.64.252.0/22 103.19.208.0/22 113.212.112.0/20 IPv6: 2404:6d00::/32 Signature Algorithm: sha256WithRSAEncryption 7a:c4:c5:fb:2a:bd:87:d4:ce:19:ca:f1:e2:67:c4:51:60:21: be:47:ec:81:03:e6:9a:98:af:f9:77:27:ae:e1:0f:fa:f0:21: 38:56:b0:23:44:db:39:16:e4:5d:8b:72:cc:67:02:28:40:b2: dc:c5:bc:56:b4:f5:fd:db:93:88:90:f5:9a:7c:c4:67:4c:7b: c1:a7:fe:b6:6f:06:69:bb:95:77:f5:98:7b:31:eb:d0:3f:42: 07:5e:cf:b5:0e:95:ba:a2:8e:d3:11:2a:9e:14:0c:02:32:f1: f3:d9:e6:9b:41:27:ae:a2:f8:bb:ee:4f:f2:f0:5d:42:12:a3: d6:53:c0:ed:af:c1:5b:e6:ba:4c:25:a1:92:b9:ce:87:43:6d: aa:aa:df:b2:a6:fa:9c:84:bc:8f:b7:77:90:3a:4d:f5:78:de: 04:61:68:3c:83:3f:2d:c2:4e:cb:5a:83:30:3f:5e:1a:47:46: 3b:ce:16:b1:86:fe:f0:90:be:eb:69:79:40:42:d1:b6:90:7e: 18:09:5b:79:4c:84:01:2b:72:3a:3a:87:2b:98:c5:8a:9e:0b: 0a:5a:42:83:6e:34:00:c5:90:eb:b0:ff:59:9d:28:8c:70:f9: 3f:87:09:05:c1:1b:98:7a:37:e7:a8:cd:ff:b8:b3:d1:70:79: 6e:11:b4:ae -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIUL7qETDDsA/A2+n44R/e1lHu6yTEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDcwN1oX DTI3MDUwMjAwNTIwN1owMzExMC8GA1UEAxMoMDYwODMwMzVCNDAxMENFQzMzN0VF MjZGNUVBMTVBMDRERDIwOTIxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANLTALeVWIZMlrs24/00Vxv+AaFNGRUz6yEY//CWN1Ll9VU9jG//oSYAVOS7 61DLPtbgIITVqCrTSGhGrs8uW37/YaavCEpln6sfEWuwqJ4pYCixDdXUXQkhmTJI XfEeEVDXSJxVki0PITVSWnZFhrH7nmLQgQVhhsMxtuzxYY5aitATcxxEXm3gKZmc DBFQDDrhLdvkiRI6n8F8eALlH/8nY4ZuxwRfwGNvyeuxXJVqgsOT/BnYFBtJR7U+ lB9nFRGqLXokGO78BdN+odgwm404vdrLY2gsEZlzMrULKlYViCCIBNwG7OOam1kf Y3ReQKf6YydSTLzHmTHSp2G7mT8CAwEAAaOCAtQwggLQMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAYIMDW0AQzsM37ib16hWgTdIJIZMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY0ODMzMDc0LTMzMGUtNGFhYS04YzAwLTA0MDg5MGE3MWExMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82NDgzMzA3 NC0zMzBlLTRhYWEtOGMwMC0wNDA4OTBhNzFhMTEvMC8wNjA4MzAzNUI0MDEwQ0VD MzM3RUUyNkY1RUExNUEwNEREMjA5MjE5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATAS AwQCLUD8AwQCZxPQAwQEcdRwMA0EAgACMAcDBQAkBG0AMA0GCSqGSIb3DQEBCwUA A4IBAQB6xMX7Kr2H1M4ZyvHiZ8RRYCG+R+yBA+aamK/5dyeu4Q/68CE4VrAjRNs5 FuRdi3LMZwIoQLLcxbxWtPX925OIkPWafMRnTHvBp/62bwZpu5V39Zh7MevQP0IH Xs+1DpW6oo7TESqeFAwCMvHz2eabQSeuovi77k/y8F1CEqPWU8Dtr8Fb5rpMJaGS uc6HQ22qqt+ypvqchLyPt3eQOk31eN4EYWg8gz8twk7LWoMwP14aR0Y7zhaxhv7w kL7raXlAQtG2kH4YCVt5TIQBK3I6OocrmMWKngsKWkKDbjQAxZDrsP9ZnSiMcPk/ hwkFwRuYejfnqM3/uLPRcHluEbSu -----END CERTIFICATE-----Generated at Tue May 12 22:03:16 2026 by rpki-client