$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer File: 60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer (raw, json) Hash identifier: ziXRAzPQIdLpHKC8bUUkH6p+Z41u18De+pxadnunN5U= Subject key identifier: 60:C9:1C:48:CE:BF:DE:F0:81:CC:EE:44:1D:84:EC:C2:63:29:BA:07 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3BBCA6529F7DE0385B5F03931E8A324E3538D86C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft caRepository: rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:09:14 +0000 Certificate not after: Sun 02 May 2027 01:14:14 +0000 Subordinate resources: IP: 103.69.60.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:bc:a6:52:9f:7d:e0:38:5b:5f:03:93:1e:8a:32:4e:35:38:d8:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:09:14 2026 GMT Not After : May 2 01:14:14 2027 GMT Subject: CN=60C91C48CEBFDEF081CCEE441D84ECC26329BA07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:52:52:81:a0:21:9f:8c:52:5b:7c:69:61:c5: e7:d5:e9:7e:a7:5a:0b:95:27:db:1b:05:a4:a8:5c: a3:99:e4:ae:bd:bc:17:b3:6b:a7:5e:d6:62:12:13: 70:c4:7e:54:e4:b9:5a:10:af:20:9f:41:be:a7:d2: d2:4c:21:ba:93:e4:02:e1:80:9b:e7:2d:ae:9b:5a: dc:89:b0:aa:12:1b:71:03:7b:a1:53:21:5f:7b:ff: 00:37:a8:70:77:90:64:f1:db:58:a1:f9:fa:dc:8d: e4:60:1d:bd:ef:ba:eb:c9:9a:6f:5b:0a:94:04:c0: ad:31:40:fb:ab:a8:39:fd:27:97:88:df:25:cd:c7: 15:ef:17:ac:37:5a:88:3b:76:b6:7f:53:05:3d:bb: 06:e4:fa:d6:30:a6:49:1a:34:65:d8:e2:b5:1b:0d: 76:2a:1a:d6:65:43:c1:cd:65:b6:5f:b0:54:f3:17: 3f:80:91:df:ec:5d:f4:2c:48:fb:64:d1:a4:c1:bf: 42:21:46:a6:e0:4a:fb:da:92:20:6d:3c:1e:79:87: 99:58:ca:8b:34:73:da:ea:99:d9:76:bd:00:bb:76: 44:20:b9:48:7d:59:7c:20:bd:59:16:06:e2:ce:cf: 12:74:3e:38:ed:6d:41:10:0a:d7:c4:08:c5:b5:82: 63:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 60:C9:1C:48:CE:BF:DE:F0:81:CC:EE:44:1D:84:EC:C2:63:29:BA:07 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.69.60.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:bc:a0:4b:19:fc:ee:58:5b:7c:a3:9b:d4:29:a0:5e:d6:70: 7a:c8:df:82:01:bf:07:4b:46:b8:50:81:58:8f:dc:06:f3:ff: 45:03:d7:e6:cb:2c:18:74:8f:69:8a:e2:63:d5:73:40:eb:95: 5a:63:8c:bf:55:b2:65:e9:cf:52:5f:96:a2:c7:1e:2a:db:8a: 3f:52:ae:08:ef:1a:10:f1:36:f9:49:19:68:c7:f6:44:a2:fd: 41:5b:45:83:7f:93:e1:25:bc:18:05:4e:cf:8d:8d:84:03:e9: 80:12:d5:c3:10:32:f8:88:dc:36:e2:ec:60:49:61:a8:5e:49: 73:45:1d:0a:06:87:90:c7:11:b0:ec:fd:f1:49:d2:89:f9:46: ca:5e:81:ad:50:fa:10:57:8e:95:ae:25:94:5e:c3:10:2d:05: 4c:8c:91:82:9a:58:8a:3a:06:b7:0f:d6:d7:03:2a:d8:86:1d: 79:cc:c3:0c:dd:d8:08:67:b8:ea:15:be:8c:5f:5b:d4:88:5d: 5e:ca:62:02:62:30:c8:84:dc:28:dc:49:2f:95:e2:0a:ee:49: 18:fc:e2:8e:3f:83:a6:be:93:4e:f6:41:37:b5:96:38:48:0a: bf:bc:6f:50:69:b0:d7:50:24:95:0b:0b:7a:0c:71:9e:eb:38: d1:86:41:b2 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUO7ymUp994DhbXwOTHooyTjU42GwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDkxNFoX DTI3MDUwMjAxMTQxNFowMzExMC8GA1UEAxMoNjBDOTFDNDhDRUJGREVGMDgxQ0NF RTQ0MUQ4NEVDQzI2MzI5QkEwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBSUoGgIZ+MUlt8aWHF59XpfqdaC5Un2xsFpKhco5nkrr28F7Nrp17WYhIT cMR+VOS5WhCvIJ9BvqfS0kwhupPkAuGAm+ctrpta3ImwqhIbcQN7oVMhX3v/ADeo cHeQZPHbWKH5+tyN5GAdve+668mab1sKlATArTFA+6uoOf0nl4jfJc3HFe8XrDda iDt2tn9TBT27BuT61jCmSRo0ZdjitRsNdioa1mVDwc1ltl+wVPMXP4CR3+xd9CxI +2TRpMG/QiFGpuBK+9qSIG08HnmHmVjKizRz2uqZ2Xa9ALt2RCC5SH1ZfCC9WRYG 4s7PEnQ+OO1tQRAK18QIxbWCYyUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGDJHEjOv97wgczuRB2E7MJjKboHMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg1OTcxYWU5LTVjZGQtNGQ0MS1iNjJhLTVjMjg0YWE4MDk4ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84NTk3MWFl OS01Y2RkLTRkNDEtYjYyYS01YzI4NGFhODA5OGUvMC82MEM5MUM0OENFQkZERUYw ODFDQ0VFNDQxRDg0RUNDMjYzMjlCQTA3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ0U8MA0GCSqGSIb3DQEBCwUAA4IBAQAPvKBLGfzuWFt8o5vUKaBe1nB6yN+C Ab8HS0a4UIFYj9wG8/9FA9fmyywYdI9piuJj1XNA65VaY4y/VbJl6c9SX5aixx4q 24o/Uq4I7xoQ8Tb5SRlox/ZEov1BW0WDf5PhJbwYBU7PjY2EA+mAEtXDEDL4iNw2 4uxgSWGoXklzRR0KBoeQxxGw7P3xSdKJ+UbKXoGtUPoQV46VriWUXsMQLQVMjJGC mliKOga3D9bXAyrYhh15zMMM3dgIZ7jqFb6MX1vUiF1eymICYjDIhNwo3EkvleIK 7kkY/OKOP4OmvpNO9kE3tZY4SAq/vG9QabDXUCSVCwt6DHGe6zjRhkGy -----END CERTIFICATE-----Generated at Tue May 12 22:10:37 2026 by rpki-client