$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.cer File: 56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.cer (raw, json) Hash identifier: LWyyNv9IDyQkDnxyH+kx+exjDzbhiIvcuQz6jzx7sR0= Subject key identifier: 56:B7:69:F2:B3:69:FF:1E:22:C3:AD:CD:3D:50:EC:1D:C0:15:24:6C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 336096B1C5090DB6177218EC3C4114E77B51A016 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:08:56 +0000 Certificate not after: Sun 02 May 2027 02:13:56 +0000 Subordinate resources: IP: 103.216.106.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:60:96:b1:c5:09:0d:b6:17:72:18:ec:3c:41:14:e7:7b:51:a0:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:08:56 2026 GMT Not After : May 2 02:13:56 2027 GMT Subject: CN=56B769F2B369FF1E22C3ADCD3D50EC1DC015246C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:80:45:b9:26:fe:82:af:50:09:bf:45:66:48: 22:c8:d2:d7:8f:c5:f2:bd:2a:dd:f5:37:a5:cc:01: 6b:16:cf:25:f7:34:85:fd:63:3f:08:8d:4f:06:20: db:19:3a:54:b2:77:2e:f9:a0:a1:75:1a:b2:5d:8f: 1e:17:86:49:7f:4b:ad:42:2e:36:26:2a:c0:db:ff: a7:41:3e:1c:d3:13:65:fd:18:8e:30:76:b4:ac:49: 27:bf:81:f6:58:c4:f9:fd:89:e8:a1:85:c9:ed:c2: 2e:83:ae:9b:37:4b:eb:ea:81:be:17:59:09:07:13: 24:06:ed:92:c9:24:f7:76:03:00:9b:d0:69:cc:b6: 29:73:b2:2b:78:96:87:d4:7a:3c:bc:0e:65:08:d9: e2:c0:60:ec:81:76:bd:62:0d:ac:3e:01:18:fc:f4: 33:ed:39:54:2c:b5:eb:44:b5:3d:c7:24:ee:d6:cb: 53:bf:37:d6:c0:90:71:7c:dc:19:9c:6d:19:ed:20: c9:83:4e:42:65:fd:dc:07:d5:3d:33:52:c4:cb:49: aa:21:2b:79:60:e3:cf:b8:99:1d:92:fd:30:5f:ce: b7:a2:65:f7:77:e7:5e:08:49:47:1e:aa:57:07:64: f1:89:c1:c9:90:b3:29:1a:7a:34:7f:01:90:33:b1: 92:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 56:B7:69:F2:B3:69:FF:1E:22:C3:AD:CD:3D:50:EC:1D:C0:15:24:6C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.216.106.0/23 Signature Algorithm: sha256WithRSAEncryption 35:29:d6:f6:e9:70:37:b3:dc:61:29:e5:f2:80:17:df:7d:01: 33:64:0e:0e:12:27:d4:15:5d:80:c2:10:82:f4:28:85:b9:48: de:e0:5e:ef:be:38:a9:08:85:ed:22:5c:f3:c7:3b:d4:45:1a: 38:4d:f6:14:d3:89:08:21:de:f8:fb:bc:19:db:c3:08:7f:08: 18:9d:47:2c:41:fe:b1:cc:19:5b:0f:26:2f:9b:05:e7:32:ba: 36:d8:86:cf:e0:99:99:f8:77:a8:2c:66:b5:62:5f:e1:99:ae: 20:6f:88:9c:31:9a:a4:dc:c9:82:c5:1f:07:ef:23:5c:25:2d: 5d:e7:8f:5a:1e:08:cb:e1:26:6f:9c:77:02:ca:53:d7:13:6b: 74:a7:9c:9d:15:d8:87:fc:c5:41:91:d6:49:57:23:74:26:4d: d2:41:0d:a9:8c:1d:de:c1:1f:84:de:d7:4f:bf:06:19:c2:1b: 52:82:fd:13:d8:13:88:6d:a6:8b:ce:6b:40:18:04:ce:08:33: 0f:64:c2:85:e8:66:27:40:42:bb:94:cb:83:1d:45:2c:1e:88: 9c:05:d1:e8:bc:15:61:47:6b:4a:f9:47:66:73:2e:b7:6d:68: 69:be:af:6e:b4:54:b9:de:75:f0:41:47:a8:fc:25:03:fe:9c: 30:88:7d:72 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUM2CWscUJDbYXchjsPEEU53tRoBYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDg1NloX DTI3MDUwMjAyMTM1NlowMzExMC8GA1UEAxMoNTZCNzY5RjJCMzY5RkYxRTIyQzNB RENEM0Q1MEVDMURDMDE1MjQ2QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALuARbkm/oKvUAm/RWZIIsjS14/F8r0q3fU3pcwBaxbPJfc0hf1jPwiNTwYg 2xk6VLJ3LvmgoXUasl2PHheGSX9LrUIuNiYqwNv/p0E+HNMTZf0YjjB2tKxJJ7+B 9ljE+f2J6KGFye3CLoOumzdL6+qBvhdZCQcTJAbtkskk93YDAJvQacy2KXOyK3iW h9R6PLwOZQjZ4sBg7IF2vWINrD4BGPz0M+05VCy160S1Pcck7tbLU7831sCQcXzc GZxtGe0gyYNOQmX93AfVPTNSxMtJqiEreWDjz7iZHZL9MF/Ot6Jl93fnXghJRx6q Vwdk8YnByZCzKRp6NH8BkDOxkiUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFa3afKzaf8eIsOtzT1Q7B3AFSRsMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RmZWYzODkwLTQ0NWQtNGIyMy04ZmIzLWIzMDE4YTc5OWVjZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kZmVmMzg5 MC00NDVkLTRiMjMtOGZiMy1iMzAxOGE3OTllY2UvMC81NkI3NjlGMkIzNjlGRjFF MjJDM0FEQ0QzRDUwRUMxREMwMTUyNDZDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ9hqMA0GCSqGSIb3DQEBCwUAA4IBAQA1Kdb26XA3s9xhKeXygBfffQEzZA4O EifUFV2AwhCC9CiFuUje4F7vvjipCIXtIlzzxzvURRo4TfYU04kIId74+7wZ28MI fwgYnUcsQf6xzBlbDyYvmwXnMro22IbP4JmZ+HeoLGa1Yl/hma4gb4icMZqk3MmC xR8H7yNcJS1d549aHgjL4SZvnHcCylPXE2t0p5ydFdiH/MVBkdZJVyN0Jk3SQQ2p jB3ewR+E3tdPvwYZwhtSgv0T2BOIbaaLzmtAGATOCDMPZMKF6GYnQEK7lMuDHUUs HoicBdHovBVhR2tK+Udmcy63bWhpvq9utFS53nXwQUeo/CUD/pwwiH1y -----END CERTIFICATE-----Generated at Tue May 12 22:10:31 2026 by rpki-client