$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2F6B6C4E0F7E26EF46248421F120296E45A53281.cer File: 2F6B6C4E0F7E26EF46248421F120296E45A53281.cer (raw, json) Hash identifier: uBKxSJzk0xR2Lor+XdNgRJTjA+sQ91EgMdNOnq3B1rg= Subject key identifier: 2F:6B:6C:4E:0F:7E:26:EF:46:24:84:21:F1:20:29:6E:45:A5:32:81 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 53EC7EA589E43D9AC7B35DE84C5F546A006F4FE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/2F6B6C4E0F7E26EF46248421F120296E45A53281.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:31:53 +0000 Certificate not after: Sun 02 May 2027 02:36:53 +0000 Subordinate resources: IP: 103.148.48.0/23 IP: 2405:cb40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ec:7e:a5:89:e4:3d:9a:c7:b3:5d:e8:4c:5f:54:6a:00:6f:4f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:31:53 2026 GMT Not After : May 2 02:36:53 2027 GMT Subject: CN=2F6B6C4E0F7E26EF46248421F120296E45A53281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a8:53:e4:1d:2c:5a:07:fd:16:0f:a0:2b:b6: ba:75:a7:a0:ac:1f:e2:bc:0b:3f:18:6a:5e:d4:86: 8d:e0:e1:14:33:1e:55:1b:53:71:31:ec:e6:ca:3b: 39:a9:02:81:8b:9f:19:74:fd:3c:96:7d:2c:00:84: 04:32:9f:2f:41:65:62:96:bf:21:a8:7b:91:6f:3d: f0:67:b5:89:06:bb:b3:0a:7a:a6:c8:2c:2e:5f:32: 3f:f3:ad:7d:d5:7e:20:da:d3:fd:b0:82:ae:5a:2d: 56:eb:d7:3c:1a:a8:d2:98:86:ab:ab:36:8a:78:2c: 19:29:db:5d:c9:17:09:1f:32:17:c0:e5:6d:a6:ff: 1d:85:4d:1b:89:5b:ac:cf:d0:48:56:07:49:ff:e6: c5:ff:6d:0b:9b:7e:60:db:13:db:7b:d9:08:7f:aa: d9:a8:c2:07:02:9f:83:35:46:8d:28:51:96:c0:11: 1f:c2:2d:97:dc:56:61:1c:51:04:ed:8e:12:38:b1: 69:84:23:fb:15:dd:69:a8:e6:a9:b4:27:b5:fb:f5: f8:55:3b:d0:38:1f:d9:b0:9e:e5:98:6a:94:dc:4b: 14:35:cf:73:5c:8e:c2:ae:4b:51:85:ea:af:a3:97: d7:94:fe:77:88:3d:68:39:3a:c5:cb:c0:c8:51:0a: c3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:6B:6C:4E:0F:7E:26:EF:46:24:84:21:F1:20:29:6E:45:A5:32:81 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/2F6B6C4E0F7E26EF46248421F120296E45A53281.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.48.0/23 IPv6: 2405:cb40::/32 Signature Algorithm: sha256WithRSAEncryption 1f:d4:f3:ec:34:fb:fa:48:c7:5c:3f:5f:83:45:0d:44:19:8a: d7:0d:48:34:4a:74:48:b8:f5:66:7b:fc:1f:82:2b:b2:45:14: 5f:8e:9e:ce:8f:68:fd:26:1d:73:82:87:ef:56:70:fc:82:d9: be:25:7f:4d:fb:f5:ba:a9:25:1a:b1:c1:36:3d:5c:b3:3c:7e: 95:ce:fb:dd:6a:52:f1:8d:98:84:78:f5:a3:94:3d:8a:84:bf: f6:bd:7a:50:b2:22:29:18:d0:12:7a:31:95:5b:4f:6f:5c:ad: d2:cc:bf:97:d2:82:1a:06:72:18:95:7b:30:c2:5b:c8:44:fd: 6d:8e:6b:8b:55:1f:61:6a:fc:8a:69:c2:9e:8b:65:22:5a:04: 6d:bd:09:d9:7d:39:0a:c8:ce:94:b7:2c:1a:57:9a:dc:f4:55: 8d:b5:2c:7e:5e:cb:0d:e9:59:e7:e9:32:01:da:76:c5:b1:2c: 11:75:f7:07:98:29:25:95:eb:eb:63:5c:56:fe:37:e5:0c:a9: 47:5d:f4:ab:9f:f0:27:50:04:01:7e:0c:52:c7:f9:e4:c6:f3: 08:d3:90:fa:fd:b3:a2:d4:85:01:8a:a3:ec:62:49:90:9b:e3: 92:75:77:5f:36:9c:75:09:ca:19:e1:49:cb:8a:37:dd:93:c4: 4f:9c:bc:2d -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUU+x+pYnkPZrHs13oTF9UagBvT+YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzE1M1oX DTI3MDUwMjAyMzY1M1owMzExMC8GA1UEAxMoMkY2QjZDNEUwRjdFMjZFRjQ2MjQ4 NDIxRjEyMDI5NkU0NUE1MzI4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMaoU+QdLFoH/RYPoCu2unWnoKwf4rwLPxhqXtSGjeDhFDMeVRtTcTHs5so7 OakCgYufGXT9PJZ9LACEBDKfL0FlYpa/Iah7kW898Ge1iQa7swp6psgsLl8yP/Ot fdV+INrT/bCCrlotVuvXPBqo0piGq6s2ingsGSnbXckXCR8yF8Dlbab/HYVNG4lb rM/QSFYHSf/mxf9tC5t+YNsT23vZCH+q2ajCBwKfgzVGjShRlsARH8Itl9xWYRxR BO2OEjixaYQj+xXdaajmqbQntfv1+FU70Dgf2bCe5ZhqlNxLFDXPc1yOwq5LUYXq r6OX15T+d4g9aDk6xcvAyFEKw/ECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC9rbE4PfibvRiSEIfEgKW5FpTKBMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2YyMzZmMDYwLWU4NjItNGYxYy1iODFhLTAxZmNiYTNmZjc3Yy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mMjM2ZjA2 MC1lODYyLTRmMWMtYjgxYS0wMWZjYmEzZmY3N2MvMC8yRjZCNkM0RTBGN0UyNkVG NDYyNDg0MjFGMTIwMjk2RTQ1QTUzMjgxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5QwMA0EAgACMAcDBQAkBctAMA0GCSqGSIb3DQEBCwUAA4IBAQAf1PPsNPv6 SMdcP1+DRQ1EGYrXDUg0SnRIuPVme/wfgiuyRRRfjp7Oj2j9Jh1zgofvVnD8gtm+ JX9N+/W6qSUascE2PVyzPH6VzvvdalLxjZiEePWjlD2KhL/2vXpQsiIpGNASejGV W09vXK3SzL+X0oIaBnIYlXswwlvIRP1tjmuLVR9havyKacKei2UiWgRtvQnZfTkK yM6UtywaV5rc9FWNtSx+XssN6Vnn6TIB2nbFsSwRdfcHmCkllevrY1xW/jflDKlH XfSrn/AnUAQBfgxSx/nkxvMI05D6/bOi1IUBiqPsYkmQm+OSdXdfNpx1CcoZ4UnL ijfdk8RPnLwt -----END CERTIFICATE-----Generated at Wed May 13 01:45:16 2026 by rpki-client