$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C.cer File: 5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C.cer (raw, json) Hash identifier: Bit5ZQ1rRez8fMLT1bYPvJL+5MglpZ51GoleErGrJBI= Subject key identifier: 5C:6E:2E:BE:6C:D0:4B:80:5F:20:4A:7D:6B:B2:60:F8:35:AF:0B:6C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 07CBCBB5D798851CE60B6B218224A487731A0C96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:24:08 +0000 Certificate not after: Sun 02 May 2027 02:29:08 +0000 Subordinate resources: IP: 103.108.240.0/22 IP: 2001:df4:2300::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:cb:cb:b5:d7:98:85:1c:e6:0b:6b:21:82:24:a4:87:73:1a:0c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:24:08 2026 GMT Not After : May 2 02:29:08 2027 GMT Subject: CN=5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:34:0f:ce:27:1d:48:5a:b3:f9:fd:5b:2f:3d: 11:76:a5:9a:71:90:44:31:09:da:6c:71:72:be:39: d6:f5:a4:ba:45:dd:09:23:85:25:6f:ea:9b:a6:f6: 36:d1:f1:75:88:a2:57:59:03:04:7a:c1:ba:89:80: 3f:b8:f5:fc:48:ad:8f:18:17:71:33:89:d2:95:1a: ec:bb:6d:c3:92:dc:f5:ad:b0:a2:fa:6e:a6:9a:f6: 96:38:5b:c2:01:3a:f9:37:22:71:e0:7d:1e:8d:59: 28:3f:9e:74:76:19:a0:21:54:65:a4:b8:6a:87:ba: 1a:ea:df:40:f5:7c:d3:ca:17:4d:89:79:fb:a3:0e: db:e2:ad:57:df:d8:b0:43:a6:dd:13:5e:15:61:fc: f8:fa:f7:36:50:d8:a1:7e:c5:d7:63:3e:fc:49:3a: fc:18:71:45:0a:3c:77:9b:77:51:aa:c7:14:6d:49: 99:ee:78:45:4e:a8:97:64:a2:c7:83:ac:dc:71:5a: 60:79:f1:d1:cc:09:00:08:c9:e5:20:16:8c:96:23: 1b:05:b1:84:07:ad:4e:4a:16:19:53:93:cb:5a:05: 5e:0b:eb:66:46:18:f1:61:5c:b6:20:d4:18:b5:61: 7c:18:d4:d1:39:46:cb:7e:60:a2:7b:ff:cb:b2:bd: 42:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5C:6E:2E:BE:6C:D0:4B:80:5F:20:4A:7D:6B:B2:60:F8:35:AF:0B:6C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.108.240.0/22 IPv6: 2001:df4:2300::/48 Signature Algorithm: sha256WithRSAEncryption 30:94:05:b5:1f:f1:81:4a:99:22:f2:cf:6e:01:b5:d9:a2:2c: 7f:fb:b8:8c:ac:8b:c4:1f:20:bd:24:9a:55:5d:cc:6a:2c:e8: 2c:4f:c4:20:e9:74:3f:5d:ba:57:31:54:0a:0d:4a:92:48:c4: 4c:74:32:71:86:e6:72:fa:d8:7d:81:91:97:2e:d6:0b:27:e6: 59:9f:e7:8c:48:b3:60:4e:00:a8:34:02:42:c8:45:2e:c7:5d: 0b:88:bc:87:6f:31:90:b8:ee:10:5e:39:db:88:7f:fa:89:07: b1:d8:f9:76:b3:25:d6:53:96:47:c0:37:51:cc:da:e1:f3:6f: 12:31:eb:78:1b:c5:61:84:b1:e8:e2:a6:ce:50:6d:df:a8:2c: c1:ee:7c:16:ee:98:dd:77:82:22:62:32:03:24:34:cd:5f:0d: 97:6f:d1:64:fb:94:9a:81:1d:15:e6:0d:76:fc:ed:1f:22:bf: 24:17:39:47:ed:07:6d:8b:a7:4a:69:29:43:b6:27:c0:6d:07: e4:4f:26:5e:f0:6b:03:5e:9d:7f:9c:be:03:e2:23:4f:aa:fb: ae:2d:de:ac:a2:53:a7:ad:55:c7:2d:33:8c:6f:d6:e5:59:ac: 17:13:de:43:c9:7b:7a:8b:a5:fe:9a:c2:3b:72:32:d4:69:d3: 7f:cb:7b:eb -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUB8vLtdeYhRzmC2shgiSkh3MaDJYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjQwOFoX DTI3MDUwMjAyMjkwOFowMzExMC8GA1UEAxMoNUM2RTJFQkU2Q0QwNEI4MDVGMjA0 QTdENkJCMjYwRjgzNUFGMEI2QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKM0D84nHUhas/n9Wy89EXalmnGQRDEJ2mxxcr451vWkukXdCSOFJW/qm6b2 NtHxdYiiV1kDBHrBuomAP7j1/EitjxgXcTOJ0pUa7Lttw5Lc9a2wovpuppr2ljhb wgE6+TciceB9Ho1ZKD+edHYZoCFUZaS4aoe6GurfQPV808oXTYl5+6MO2+KtV9/Y sEOm3RNeFWH8+Pr3NlDYoX7F12M+/Ek6/BhxRQo8d5t3UarHFG1Jme54RU6ol2Si x4Os3HFaYHnx0cwJAAjJ5SAWjJYjGwWxhAetTkoWGVOTy1oFXgvrZkYY8WFctiDU GLVhfBjU0TlGy35gonv/y7K9QkcCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFxuLr5s0EuAXyBKfWuyYPg1rwtsMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ViODFiY2VhLWI3MGYtNDM3NC05MjRiLWI2Yzc3ODEwOTgzNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lYjgxYmNl YS1iNzBmLTQzNzQtOTI0Yi1iNmM3NzgxMDk4MzcvMC81QzZFMkVCRTZDRDA0Qjgw NUYyMDRBN0Q2QkIyNjBGODM1QUYwQjZDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ2zwMA8EAgACMAkDBwAgAQ30IwAwDQYJKoZIhvcNAQELBQADggEBADCUBbUf 8YFKmSLyz24BtdmiLH/7uIysi8QfIL0kmlVdzGos6CxPxCDpdD9dulcxVAoNSpJI xEx0MnGG5nL62H2BkZcu1gsn5lmf54xIs2BOAKg0AkLIRS7HXQuIvIdvMZC47hBe OduIf/qJB7HY+XazJdZTlkfAN1HM2uHzbxIx63gbxWGEsejips5Qbd+oLMHufBbu mN13giJiMgMkNM1fDZdv0WT7lJqBHRXmDXb87R8ivyQXOUftB22Lp0ppKUO2J8Bt B+RPJl7wawNenX+cvgPiI0+q+64t3qyiU6etVcctM4xv1uVZrBcT3kPJe3qLpf6a wjtyMtRp03/Le+s= -----END CERTIFICATE-----Generated at Tue May 12 22:04:06 2026 by rpki-client