$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer File: 206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer (raw, json) Hash identifier: ZR4gUWPHrHse6ftFhSwYVsXi0wKk4A0FAKi3ZJwQGxw= Subject key identifier: 20:6E:BD:04:AE:33:2A:98:3F:D5:EB:49:B8:B9:C0:02:2E:57:7D:E2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 049E355822B30E737ED3118AE7AFFECF647A279D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:59:15 +0000 Certificate not after: Sun 02 May 2027 00:04:15 +0000 Subordinate resources: IP: 103.189.248.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:9e:35:58:22:b3:0e:73:7e:d3:11:8a:e7:af:fe:cf:64:7a:27:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:59:15 2026 GMT Not After : May 2 00:04:15 2027 GMT Subject: CN=206EBD04AE332A983FD5EB49B8B9C0022E577DE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:11:21:b4:89:56:e2:bd:86:40:0d:f2:3d:d9: 0b:29:05:d4:8e:85:1c:c4:9c:c0:73:71:f1:20:33: 61:c6:67:29:58:32:25:66:21:7c:73:03:9e:32:03: df:f2:e7:50:f6:4d:9c:49:c3:76:56:3d:8e:0d:dc: 56:a7:b6:2b:ce:28:c0:eb:65:40:c0:96:55:20:65: 46:31:90:2d:fb:e5:3b:1a:a3:7e:39:cb:59:8a:bb: 73:21:08:1b:1e:fa:cc:de:fd:20:5f:cd:bf:6d:f9: 7b:12:85:8e:51:58:a1:e6:b9:27:85:a5:97:88:22: e6:29:93:6b:f6:5f:78:9e:2b:af:ac:ed:77:60:6c: 90:83:bb:3a:03:47:25:52:76:a4:b0:54:95:5f:50: 9f:a9:cc:b1:e9:95:b2:57:07:9e:dc:66:29:79:aa: 51:37:fb:a7:e7:19:30:98:9d:ef:5b:bc:49:1d:16: 18:aa:a1:70:0c:f8:95:90:fc:6d:c7:4c:9f:02:cd: d8:ad:c8:84:8e:fd:2f:eb:7f:c5:d5:51:74:db:04: fd:21:7f:15:b4:f3:0c:40:09:af:da:dd:31:19:d6: f0:ef:9b:d2:fc:16:2b:36:94:c3:1b:26:22:d2:44: d1:3a:e2:d5:45:1c:06:79:83:27:b3:4b:ce:59:3f: b5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:6E:BD:04:AE:33:2A:98:3F:D5:EB:49:B8:B9:C0:02:2E:57:7D:E2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.248.0/23 Signature Algorithm: sha256WithRSAEncryption 66:23:3f:6c:3e:28:2c:cb:1b:c3:16:d2:ed:58:fb:b1:f0:91: af:63:12:cf:ee:a9:88:d5:1f:c5:cb:8b:ff:b5:c8:60:3f:35: 8f:d2:5c:d9:4a:0d:4a:ef:24:3c:1f:3b:2f:f7:2a:db:47:49: a9:f2:ed:1e:f5:fc:9d:33:b3:14:87:d5:41:f5:e1:b7:06:1c: 0e:ee:df:92:8f:ec:41:27:75:63:17:44:34:70:fd:b6:33:89: cd:07:b1:38:de:78:9f:63:32:7b:40:86:ca:a9:af:b3:12:9a: 83:b4:37:1e:f0:c0:6a:29:2d:25:6b:6b:e9:0c:50:be:d3:e9: 0b:5d:f0:63:89:7a:5b:10:bf:22:24:4f:25:e6:85:b9:fb:c1: e0:56:f2:ae:48:76:07:fe:95:6b:4c:ff:52:95:58:e5:c2:4e: be:c7:83:63:52:e8:a3:4e:ea:d4:81:cb:29:f0:79:2b:aa:05: fa:68:30:7e:c9:22:cf:99:11:da:c9:a1:75:ec:6b:7f:32:4f: 94:a9:a5:a3:05:fc:f7:2e:37:9a:b2:c0:a7:10:52:3b:ea:29: 47:c4:33:2b:e7:3e:15:09:b5:24:08:87:84:56:d4:93:6d:71: 30:1a:c9:86:42:47:d6:d8:c7:1b:ad:cd:e7:e7:56:f1:97:5a: ba:b3:8a:0e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUBJ41WCKzDnN+0xGK56/+z2R6J50wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTkxNVoX DTI3MDUwMjAwMDQxNVowMzExMC8GA1UEAxMoMjA2RUJEMDRBRTMzMkE5ODNGRDVF QjQ5QjhCOUMwMDIyRTU3N0RFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOMRIbSJVuK9hkAN8j3ZCykF1I6FHMScwHNx8SAzYcZnKVgyJWYhfHMDnjID 3/LnUPZNnEnDdlY9jg3cVqe2K84owOtlQMCWVSBlRjGQLfvlOxqjfjnLWYq7cyEI Gx76zN79IF/Nv235exKFjlFYoea5J4Wll4gi5imTa/ZfeJ4rr6ztd2BskIO7OgNH JVJ2pLBUlV9Qn6nMsemVslcHntxmKXmqUTf7p+cZMJid71u8SR0WGKqhcAz4lZD8 bcdMnwLN2K3IhI79L+t/xdVRdNsE/SF/FbTzDEAJr9rdMRnW8O+b0vwWKzaUwxsm ItJE0Tri1UUcBnmDJ7NLzlk/tfMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCBuvQSuMyqYP9XrSbi5wAIuV33iMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFkZjQxNjRlLTc0ZTUtNDBkNi05YTMwLWIzNzJhNGQyYTQ1NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xZGY0MTY0 ZS03NGU1LTQwZDYtOWEzMC1iMzcyYTRkMmE0NTQvMC8yMDZFQkQwNEFFMzMyQTk4 M0ZENUVCNDlCOEI5QzAwMjJFNTc3REUyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ734MA0GCSqGSIb3DQEBCwUAA4IBAQBmIz9sPigsyxvDFtLtWPux8JGvYxLP 7qmI1R/Fy4v/tchgPzWP0lzZSg1K7yQ8Hzsv9yrbR0mp8u0e9fydM7MUh9VB9eG3 BhwO7t+Sj+xBJ3VjF0Q0cP22M4nNB7E43nifYzJ7QIbKqa+zEpqDtDce8MBqKS0l a2vpDFC+0+kLXfBjiXpbEL8iJE8l5oW5+8HgVvKuSHYH/pVrTP9SlVjlwk6+x4Nj UuijTurUgcsp8HkrqgX6aDB+ySLPmRHayaF17Gt/Mk+UqaWjBfz3LjeassCnEFI7 6ilHxDMr5z4VCbUkCIeEVtSTbXEwGsmGQkfW2Mcbrc3n51bxl1q6s4oO -----END CERTIFICATE-----Generated at Tue May 12 22:03:41 2026 by rpki-client