$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer File: 0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer (raw, json) Hash identifier: FFhzZ27aV4zxSEORvAL3f+uUwFTdr3Ziq1U/eijgFWY= Subject key identifier: 0A:06:69:79:28:83:BF:7D:DD:EB:82:AD:62:14:E0:FA:90:73:13:E2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 25E7D30F5194A93AD1D299662D0B47F97864ACEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:08:42 +0000 Certificate not after: Sun 02 May 2027 00:13:42 +0000 Subordinate resources: IP: 103.24.72.0/22 IP: 202.52.140.0/23 IP: 2400:ea40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:e7:d3:0f:51:94:a9:3a:d1:d2:99:66:2d:0b:47:f9:78:64:ac:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:08:42 2026 GMT Not After : May 2 00:13:42 2027 GMT Subject: CN=0A0669792883BF7DDDEB82AD6214E0FA907313E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:da:bc:2c:c2:d7:9c:1c:29:40:1f:00:4d:ad: 93:3c:4b:1f:ad:c8:50:15:8d:04:de:aa:c3:40:d9: c0:f9:37:b6:4d:0e:e0:a6:3e:54:43:a8:81:7e:35: 35:2c:2d:13:4a:01:0b:93:68:63:8a:1e:da:a2:af: 4b:6d:4c:d5:ef:e5:d6:8c:9d:7d:09:ff:83:d9:b5: d6:eb:e3:d4:b1:41:d9:70:c1:31:02:19:83:70:81: c6:73:9b:eb:12:87:6c:cd:b2:df:d4:34:a1:7e:df: de:e9:eb:af:ea:27:fa:2c:59:6e:55:e5:61:60:91: 54:e6:c2:4c:09:fe:06:c3:d7:18:e5:c1:7b:e5:58: b4:ce:84:b6:ab:49:cd:16:c4:f9:79:5d:26:da:1b: 61:8b:d3:16:44:02:95:2a:80:c2:e2:96:cd:df:50: 38:e3:14:7f:6e:dc:25:f9:8d:63:79:aa:66:9a:cc: 58:3c:3b:61:80:b9:73:bb:3d:8e:57:2f:30:1a:ac: 55:37:7d:38:3d:ff:19:73:a0:58:50:7f:e2:90:38: 10:3d:55:90:75:2e:bc:f6:55:04:c5:86:53:86:89: 14:ec:98:2b:79:a2:51:41:30:b7:2f:e7:62:3a:61: 6f:90:c7:2a:9b:61:2d:1b:fd:3f:16:fa:00:e7:08: 40:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0A:06:69:79:28:83:BF:7D:DD:EB:82:AD:62:14:E0:FA:90:73:13:E2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.24.72.0/22 202.52.140.0/23 IPv6: 2400:ea40::/32 Signature Algorithm: sha256WithRSAEncryption 5d:22:f9:c7:cc:11:02:53:7f:e0:98:75:e5:2c:d5:9a:38:84: af:d5:80:d7:8a:b7:f2:23:20:fb:03:6a:66:62:76:de:88:21: 75:7e:60:99:2f:c7:08:6a:99:75:7e:7e:af:69:db:52:4c:11: c0:ed:25:1a:98:d2:e9:9d:73:29:f2:c6:ce:1a:57:fa:04:96: 5f:ae:9e:f2:0c:6b:ee:ad:f8:7e:18:6e:68:55:dd:37:fc:55: 54:bc:1a:93:fb:64:9d:1b:5f:62:3b:53:ce:2c:78:7a:4f:c4: 77:1c:77:f3:38:80:b3:28:c2:f0:8d:f5:8d:ad:25:bb:cc:b4: 0a:bb:16:b8:55:5a:d1:7c:f0:d2:58:9f:a6:0b:88:e0:b9:cd: e3:6d:c1:91:ac:29:a7:8c:c6:7e:31:06:a4:38:8d:73:d4:f6: 75:cd:50:81:13:ac:55:fc:bb:04:b6:d3:8f:07:35:fd:da:bf: 03:d3:45:8b:48:5f:3f:42:61:58:3b:22:24:a9:e2:38:c3:27: de:93:df:1e:57:c0:f2:c8:6c:fa:fb:30:11:c1:f2:d1:74:0a: b8:9a:2b:5e:04:c8:ed:81:0b:98:28:68:c6:a1:ec:47:e3:7d: 7c:b7:f3:b9:46:d6:d7:ce:fa:0f:5c:d4:e5:dc:a6:c3:e4:41: 02:8d:21:a5 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUJefTD1GUqTrR0plmLQtH+XhkrOswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDg0MloX DTI3MDUwMjAwMTM0MlowMzExMC8GA1UEAxMoMEEwNjY5NzkyODgzQkY3RERERUI4 MkFENjIxNEUwRkE5MDczMTNFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPavCzC15wcKUAfAE2tkzxLH63IUBWNBN6qw0DZwPk3tk0O4KY+VEOogX41 NSwtE0oBC5NoY4oe2qKvS21M1e/l1oydfQn/g9m11uvj1LFB2XDBMQIZg3CBxnOb 6xKHbM2y39Q0oX7f3unrr+on+ixZblXlYWCRVObCTAn+BsPXGOXBe+VYtM6EtqtJ zRbE+XldJtobYYvTFkQClSqAwuKWzd9QOOMUf27cJfmNY3mqZprMWDw7YYC5c7s9 jlcvMBqsVTd9OD3/GXOgWFB/4pA4ED1VkHUuvPZVBMWGU4aJFOyYK3miUUEwty/n Yjphb5DHKpthLRv9Pxb6AOcIQO8CAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAoGaXkog7993euCrWIU4PqQcxPiMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJjMzI2ZjRlLTY2MDUtNDk2YS1iOWY4LWQ2ZTc3YjI5YmNjNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yYzMyNmY0 ZS02NjA1LTQ5NmEtYjlmOC1kNmU3N2IyOWJjYzYvMC8wQTA2Njk3OTI4ODNCRjdE RERFQjgyQUQ2MjE0RTBGQTkwNzMxM0UyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQCZxhIAwQByjSMMA0EAgACMAcDBQAkAOpAMA0GCSqGSIb3DQEBCwUAA4IBAQBd IvnHzBECU3/gmHXlLNWaOISv1YDXirfyIyD7A2pmYnbeiCF1fmCZL8cIapl1fn6v adtSTBHA7SUamNLpnXMp8sbOGlf6BJZfrp7yDGvurfh+GG5oVd03/FVUvBqT+2Sd G19iO1POLHh6T8R3HHfzOICzKMLwjfWNrSW7zLQKuxa4VVrRfPDSWJ+mC4jguc3j bcGRrCmnjMZ+MQakOI1z1PZ1zVCBE6xV/LsEttOPBzX92r8D00WLSF8/QmFYOyIk qeI4wyfek98eV8DyyGz6+zARwfLRdAq4miteBMjtgQuYKGjGoexH4318t/O5RtbX zvoPXNTl3KbD5EECjSGl -----END CERTIFICATE-----Generated at Tue May 12 22:32:12 2026 by rpki-client