$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer File: 2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer (raw, json) Hash identifier: 9LMyoy8woCmQUnmCv5KglvrkEu3OXTdNnl531zPIn5w= Subject key identifier: 21:16:A6:F5:F0:64:2D:2E:60:6A:3A:CF:F7:38:E4:8F:34:4F:B9:67 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 68A25BD263BB9A999D93277AF5E46D2C6F46F73C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:28:38 +0000 Certificate not after: Sun 02 May 2027 02:33:38 +0000 Subordinate resources: IP: 103.228.240.0/22 IP: 119.2.64.0/19 IP: 202.87.248.0/21 IP: 2404:500::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a2:5b:d2:63:bb:9a:99:9d:93:27:7a:f5:e4:6d:2c:6f:46:f7:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:28:38 2026 GMT Not After : May 2 02:33:38 2027 GMT Subject: CN=2116A6F5F0642D2E606A3ACFF738E48F344FB967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:67:0a:d2:38:af:66:13:61:01:ab:55:cf:88: d0:ca:4b:95:53:f6:48:09:99:37:5f:1c:87:c0:bc: 23:20:2b:b1:4a:10:d0:e7:19:3d:f2:6a:61:c5:ba: a0:ac:1b:3f:08:6e:6a:bd:8c:4d:fb:fd:6c:52:a1: f9:85:57:11:a2:7a:57:91:6e:32:70:bf:e5:37:d9: b3:73:0d:81:1f:73:34:f5:8e:37:3e:8c:5a:f6:c4: cc:0a:29:db:8d:ed:de:99:87:df:2d:c2:ff:f3:37: c8:06:c2:43:14:03:33:14:73:10:e4:ce:63:8a:01: 61:06:51:48:7c:ee:af:8d:dc:8b:2e:5c:67:9e:13: c8:4a:af:5b:01:ee:63:dc:69:bf:4b:29:68:ef:12: ed:c2:9e:c2:f3:cd:7d:f8:c0:8b:03:d6:22:3f:c8: 4b:53:d4:4a:80:e0:7d:56:cb:ad:89:0b:7c:87:ad: 7c:ad:2d:67:3d:7f:5c:1b:5c:82:b8:c9:91:7e:3b: 5c:be:89:a4:47:cc:77:c4:9a:2d:04:c5:a3:a3:04: 70:a3:64:29:06:c7:ed:bd:16:e9:ac:bf:c8:10:09: 20:55:be:1e:3e:29:03:6a:6f:c6:a3:88:c9:83:c7: f1:95:b6:4d:e8:58:14:fd:eb:9b:fe:1d:f6:14:2a: 03:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:16:A6:F5:F0:64:2D:2E:60:6A:3A:CF:F7:38:E4:8F:34:4F:B9:67 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.228.240.0/22 119.2.64.0/19 202.87.248.0/21 IPv6: 2404:500::/32 Signature Algorithm: sha256WithRSAEncryption 05:1c:2e:0c:f6:04:e5:41:9e:53:49:47:59:44:53:db:17:d6: 79:61:84:68:24:45:cd:53:3a:c0:5a:f7:43:31:ba:3e:6a:5d: 55:c6:94:be:49:dd:1c:06:e9:1e:c1:81:58:a7:38:d2:bf:5a: 59:ba:a4:b5:99:95:b9:7b:5b:16:a9:1c:08:d2:62:a5:86:b2: 25:76:41:9e:29:52:61:04:79:03:b9:e4:ba:54:8b:e2:58:a3: bd:cd:ed:03:54:ae:49:49:36:28:6c:3b:51:93:18:19:c8:69: aa:f3:4b:fe:d7:0c:87:08:b2:a2:ff:8b:b4:fa:46:26:4d:c2: f7:3a:9c:8f:46:ba:fa:fb:3a:50:0d:01:33:cd:11:46:63:f1: 58:f7:3a:45:05:96:f3:64:bc:08:df:c8:ea:c6:91:c6:9a:8d: 33:fa:f0:1b:04:44:f6:bc:20:71:de:0e:87:a3:7f:99:a1:8a: d3:74:f5:6f:fb:ba:6f:b4:2a:73:27:a0:24:83:fd:03:b7:cc: f3:79:07:41:62:8c:8e:eb:02:61:d4:c9:e9:26:77:b9:b8:ea: 2b:36:58:5c:3a:14:3b:f0:95:68:db:92:3a:7d:5d:6a:09:0c: 79:33:77:12:ce:94:13:14:0f:50:ad:fc:a2:9c:3c:f4:2f:4c: 61:42:43:25 -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIUaKJb0mO7mpmdkyd69eRtLG9G9zwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjgzOFoX DTI3MDUwMjAyMzMzOFowMzExMC8GA1UEAxMoMjExNkE2RjVGMDY0MkQyRTYwNkEz QUNGRjczOEU0OEYzNDRGQjk2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKpnCtI4r2YTYQGrVc+I0MpLlVP2SAmZN18ch8C8IyArsUoQ0OcZPfJqYcW6 oKwbPwhuar2MTfv9bFKh+YVXEaJ6V5FuMnC/5TfZs3MNgR9zNPWONz6MWvbEzAop 243t3pmH3y3C//M3yAbCQxQDMxRzEOTOY4oBYQZRSHzur43ciy5cZ54TyEqvWwHu Y9xpv0spaO8S7cKewvPNffjAiwPWIj/IS1PUSoDgfVbLrYkLfIetfK0tZz1/XBtc grjJkX47XL6JpEfMd8SaLQTFo6MEcKNkKQbH7b0W6ay/yBAJIFW+Hj4pA2pvxqOI yYPH8ZW2TehYFP3rm/4d9hQqAxECAwEAAaOCAtQwggLQMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCEWpvXwZC0uYGo6z/c45I80T7lnMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2YwYTkyOWM2LTFlMjUtNDk0YS1iMGY5LTU1ZmM0ZmM5NGZiYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mMGE5Mjlj Ni0xZTI1LTQ5NGEtYjBmOS01NWZjNGZjOTRmYmMvMC8yMTE2QTZGNUYwNjQyRDJF NjA2QTNBQ0ZGNzM4RTQ4RjM0NEZCOTY3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATAS AwQCZ+TwAwQFdwJAAwQDylf4MA0EAgACMAcDBQAkBAUAMA0GCSqGSIb3DQEBCwUA A4IBAQAFHC4M9gTlQZ5TSUdZRFPbF9Z5YYRoJEXNUzrAWvdDMbo+al1VxpS+Sd0c BukewYFYpzjSv1pZuqS1mZW5e1sWqRwI0mKlhrIldkGeKVJhBHkDueS6VIviWKO9 ze0DVK5JSTYobDtRkxgZyGmq80v+1wyHCLKi/4u0+kYmTcL3OpyPRrr6+zpQDQEz zRFGY/FY9zpFBZbzZLwI38jqxpHGmo0z+vAbBET2vCBx3g6Ho3+ZoYrTdPVv+7pv tCpzJ6Akg/0Dt8zzeQdBYoyO6wJh1MnpJne5uOorNlhcOhQ78JVo25I6fV1qCQx5 M3cSzpQTFA9QrfyinDz0L0xhQkMl -----END CERTIFICATE-----Generated at Tue May 12 22:03:30 2026 by rpki-client