$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/607EB065616BF1A985E6E549EC540E1C94E94819.cer File: 607EB065616BF1A985E6E549EC540E1C94E94819.cer (raw, json) Hash identifier: zBXOJSOmlKKQ//YBjfStT0XXvWe+nA3KkURrfHyY/+I= Subject key identifier: 60:7E:B0:65:61:6B:F1:A9:85:E6:E5:49:EC:54:0E:1C:94:E9:48:19 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 663FC1B08B7451C9C5F765E30D3DAAB4D23252EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:26:53 +0000 Certificate not after: Sun 02 May 2027 02:31:53 +0000 Subordinate resources: IP: 103.121.180.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:3f:c1:b0:8b:74:51:c9:c5:f7:65:e3:0d:3d:aa:b4:d2:32:52:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:26:53 2026 GMT Not After : May 2 02:31:53 2027 GMT Subject: CN=607EB065616BF1A985E6E549EC540E1C94E94819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:77:1d:c0:8b:86:33:f4:73:6b:ef:eb:10:bd: 52:c0:63:d6:86:c3:ab:03:57:b8:ea:05:4e:9f:ee: 25:ff:4f:a0:6c:25:c2:3c:0e:45:99:09:6c:49:e8: c5:f1:80:70:5c:a6:ce:5e:6a:5c:95:92:34:66:a5: 6e:67:e7:29:b8:7d:e6:17:58:93:41:d2:3f:a0:38: 77:2d:a8:ef:23:e0:97:31:d3:04:58:c9:93:b6:8f: 2f:ce:0a:de:ce:52:2f:b7:f0:d0:27:1a:0c:7e:c9: 66:09:29:ac:35:7e:16:46:f7:cc:39:14:f0:38:b1: 11:1b:40:da:8c:97:55:91:0c:10:f0:f6:97:69:ae: 8d:5a:d6:51:e6:50:94:46:01:37:fd:a6:8a:4e:9b: 3f:00:cf:ba:cb:27:b3:02:33:e4:b1:20:f2:fe:1d: a5:e7:7d:4e:e2:87:f6:41:9a:df:49:8f:3d:3d:b7: ca:53:29:0c:f6:f5:cf:d3:f2:6d:99:0a:75:bd:f0: d1:54:a4:d3:41:c4:15:83:4c:8b:b0:cd:79:2c:71: 7f:d5:03:bb:fd:61:0c:d4:8d:5b:e5:9d:ee:aa:01: cc:0c:6b:7a:29:9d:94:9b:12:1e:b1:64:27:32:0b: f0:69:7b:c0:5c:62:c8:d5:88:7a:cc:2a:4d:58:83: 9e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 60:7E:B0:65:61:6B:F1:A9:85:E6:E5:49:EC:54:0E:1C:94:E9:48:19 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.180.0/22 Signature Algorithm: sha256WithRSAEncryption 12:20:6a:74:0e:bb:90:90:3b:f6:4b:95:87:7f:77:59:47:71: 03:1e:b0:89:51:17:b3:87:4a:8a:95:ee:45:70:61:3d:22:4b: b8:03:ed:52:f3:d0:f5:f0:e3:75:8c:1c:57:a6:0c:a6:c8:d6: 7e:e3:03:c9:78:71:37:45:5f:e8:47:c9:fb:cd:33:72:ac:cc: f4:a3:da:3c:e5:07:f4:f0:da:81:14:2b:36:de:c1:3e:15:e4: 10:8a:f4:00:a9:f0:30:01:65:ee:a1:47:ad:1e:0d:28:a4:de: 7f:2d:85:79:63:85:85:c5:5d:1b:26:b2:ed:1b:ea:08:6a:f6: 70:c1:0b:8d:13:31:4e:52:dd:79:90:cb:93:7a:f3:0d:b6:59: ae:79:85:9b:be:86:94:5e:55:a0:aa:0f:ec:aa:9e:a6:48:c2: 4d:f6:1f:8a:1f:78:5d:9a:14:75:c4:58:dd:1b:39:68:a4:bd: d6:bc:74:e5:ee:8b:dc:ef:7e:dc:64:fe:ab:f0:e8:81:7a:f1: a8:21:59:7d:0c:32:82:8f:47:75:a7:4f:27:c2:42:1b:40:82: b2:d3:3c:8d:ad:05:94:10:8a:02:31:cc:2d:e6:63:7f:72:34: f3:2f:ea:7a:2e:98:51:f1:b2:47:6f:6d:cc:4e:4d:ab:c2:5b: 87:33:bc:bc -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUZj/BsIt0UcnF92XjDT2qtNIyUu8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjY1M1oX DTI3MDUwMjAyMzE1M1owMzExMC8GA1UEAxMoNjA3RUIwNjU2MTZCRjFBOTg1RTZF NTQ5RUM1NDBFMUM5NEU5NDgxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANN3HcCLhjP0c2vv6xC9UsBj1obDqwNXuOoFTp/uJf9PoGwlwjwORZkJbEno xfGAcFymzl5qXJWSNGalbmfnKbh95hdYk0HSP6A4dy2o7yPglzHTBFjJk7aPL84K 3s5SL7fw0CcaDH7JZgkprDV+Fkb3zDkU8DixERtA2oyXVZEMEPD2l2mujVrWUeZQ lEYBN/2mik6bPwDPussnswIz5LEg8v4dped9TuKH9kGa30mPPT23ylMpDPb1z9Py bZkKdb3w0VSk00HEFYNMi7DNeSxxf9UDu/1hDNSNW+Wd7qoBzAxreimdlJsSHrFk JzIL8Gl7wFxiyNWIeswqTViDnrUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGB+sGVha/GpheblSexUDhyU6UgZMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2VlODk1Y2ViLTI3NzctNGFkOS05MmRiLTQ4NzNlNDg1YzFmNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lZTg5NWNl Yi0yNzc3LTRhZDktOTJkYi00ODczZTQ4NWMxZjYvMC82MDdFQjA2NTYxNkJGMUE5 ODVFNkU1NDlFQzU0MEUxQzk0RTk0ODE5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3m0MA0GCSqGSIb3DQEBCwUAA4IBAQASIGp0DruQkDv2S5WHf3dZR3EDHrCJ URezh0qKle5FcGE9Iku4A+1S89D18ON1jBxXpgymyNZ+4wPJeHE3RV/oR8n7zTNy rMz0o9o85Qf08NqBFCs23sE+FeQQivQAqfAwAWXuoUetHg0opN5/LYV5Y4WFxV0b JrLtG+oIavZwwQuNEzFOUt15kMuTevMNtlmueYWbvoaUXlWgqg/sqp6mSMJN9h+K H3hdmhR1xFjdGzlopL3WvHTl7ovc737cZP6r8OiBevGoIVl9DDKCj0d1p08nwkIb QIKy0zyNrQWUEIoCMcwt5mN/cjTzL+p6LphR8bJHb23MTk2rwluHM7y8 -----END CERTIFICATE-----Generated at Tue May 12 22:15:57 2026 by rpki-client