$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer File: 60E799376F38EB181976A659060E6D998B4DB2D3.cer (raw, json) Hash identifier: mfX3xdFfwysdhDgOd8ElJeysKZakTfurDrUeMafCm1c= Subject key identifier: 60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6B397BBF771AAE272CE1B2A942124BEAFD6A3650 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:20:42 +0000 Certificate not after: Sun 02 May 2027 02:25:42 +0000 Subordinate resources: IP: 103.144.128.0/23 IP: 2405:6d40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:39:7b:bf:77:1a:ae:27:2c:e1:b2:a9:42:12:4b:ea:fd:6a:36:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:20:42 2026 GMT Not After : May 2 02:25:42 2027 GMT Subject: CN=60E799376F38EB181976A659060E6D998B4DB2D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:25:96:70:d0:80:7b:c6:2e:6d:bd:fc:27:d6: d1:ea:4e:79:ae:ec:e6:66:76:a7:cf:ab:df:5f:1a: 11:a2:4f:65:96:63:fe:e1:00:ec:7a:19:8b:63:5d: 69:b4:ea:31:c9:f5:44:c8:ba:8b:b2:eb:0f:70:a8: 48:5e:9c:9d:61:43:15:5e:9f:2b:14:03:35:56:d5: 98:6f:f9:70:68:7f:9b:91:3e:a7:cd:8a:74:b6:1d: 48:59:2c:0f:a3:12:bb:b2:47:e9:bf:28:9f:39:57: 6c:c8:04:0f:fa:86:a6:15:f0:cb:33:75:0c:61:78: 3f:ad:39:0a:05:4e:07:19:8f:55:63:fb:36:f6:24: 8d:63:49:c0:e4:5e:74:fd:fa:92:0d:13:45:f7:17: 01:eb:be:29:de:d7:34:8b:b6:06:84:b5:41:ef:4f: 3c:7d:48:ea:5d:e8:25:8b:6f:8d:73:8f:31:f2:d6: ab:a9:12:ba:04:b6:d7:c0:76:68:f7:0f:f8:ef:1c: 32:e8:04:ea:20:ee:07:6b:2d:8e:7c:4b:b3:1a:79: ba:3e:ea:35:22:44:c0:19:76:fd:cc:37:3c:fa:d0: 32:60:3f:34:68:7a:da:0f:e0:0a:90:d7:d2:2d:3c: dd:74:c8:3f:9b:8e:16:7f:2c:e0:68:25:a8:aa:94: 04:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.128.0/23 IPv6: 2405:6d40::/32 Signature Algorithm: sha256WithRSAEncryption 3c:0c:1a:0c:79:50:83:e5:69:2d:14:19:ba:71:90:4d:a9:97: dc:3f:f8:41:3a:63:0e:18:f0:ab:2c:72:28:8b:65:c3:f7:d4: 6f:22:33:d6:f1:6f:66:42:89:5a:90:f6:1f:16:4d:3d:b3:50: 06:a7:cc:51:7c:73:5b:3c:37:b2:4e:0e:0e:36:1d:8e:00:b6: 08:a5:31:d0:ae:1a:e9:1a:c6:07:b8:af:e8:cf:31:ec:f4:f0: 91:86:7a:64:b0:60:cd:79:8a:41:f2:44:aa:cc:92:0d:a1:58: d7:57:71:36:d2:6b:73:fb:eb:dc:2d:a1:9c:f3:d6:41:27:07: d1:2f:e1:5f:d4:40:27:43:61:85:68:db:28:48:30:2e:48:dd: 18:a4:96:ad:c4:cf:49:b5:d6:aa:66:6a:d2:f6:14:ea:c3:97: 91:c7:cd:cd:4b:e4:c2:b5:9c:ed:b2:8f:a1:77:c2:4e:be:be: 5c:66:24:55:4b:18:25:f2:05:e5:c5:52:59:62:8a:09:22:c4: 90:f4:51:8e:a8:1a:fc:76:fb:e8:09:17:9a:17:b3:b5:8c:dd: 00:4c:f6:78:ef:35:4c:62:23:80:9e:0b:70:50:40:96:94:0b: ef:34:b7:3d:6b:8e:b0:2e:81:96:af:69:3e:db:72:30:6c:33: c1:88:3a:3c -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUazl7v3carics4bKpQhJL6v1qNlAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjA0MloX DTI3MDUwMjAyMjU0MlowMzExMC8GA1UEAxMoNjBFNzk5Mzc2RjM4RUIxODE5NzZB NjU5MDYwRTZEOTk4QjREQjJEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQllnDQgHvGLm29/CfW0epOea7s5mZ2p8+r318aEaJPZZZj/uEA7HoZi2Nd abTqMcn1RMi6i7LrD3CoSF6cnWFDFV6fKxQDNVbVmG/5cGh/m5E+p82KdLYdSFks D6MSu7JH6b8onzlXbMgED/qGphXwyzN1DGF4P605CgVOBxmPVWP7NvYkjWNJwORe dP36kg0TRfcXAeu+Kd7XNIu2BoS1Qe9PPH1I6l3oJYtvjXOPMfLWq6kSugS218B2 aPcP+O8cMugE6iDuB2stjnxLsxp5uj7qNSJEwBl2/cw3PPrQMmA/NGh62g/gCpDX 0i083XTIP5uOFn8s4GglqKqUBEsCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGDnmTdvOOsYGXamWQYObZmLTbLTMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2U5ZjU3NWRiLWM3MzgtNGI4ZS1iMzZhLTZiMDIwYzY2ODQ5ZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lOWY1NzVk Yi1jNzM4LTRiOGUtYjM2YS02YjAyMGM2Njg0OWQvMC82MEU3OTkzNzZGMzhFQjE4 MTk3NkE2NTkwNjBFNkQ5OThCNERCMkQzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5CAMA0EAgACMAcDBQAkBW1AMA0GCSqGSIb3DQEBCwUAA4IBAQA8DBoMeVCD 5WktFBm6cZBNqZfcP/hBOmMOGPCrLHIoi2XD99RvIjPW8W9mQolakPYfFk09s1AG p8xRfHNbPDeyTg4ONh2OALYIpTHQrhrpGsYHuK/ozzHs9PCRhnpksGDNeYpB8kSq zJINoVjXV3E20mtz++vcLaGc89ZBJwfRL+Ff1EAnQ2GFaNsoSDAuSN0YpJatxM9J tdaqZmrS9hTqw5eRx83NS+TCtZztso+hd8JOvr5cZiRVSxgl8gXlxVJZYooJIsSQ 9FGOqBr8dvvoCReaF7O1jN0ATPZ47zVMYiOAngtwUECWlAvvNLc9a46wLoGWr2k+ 23IwbDPBiDo8 -----END CERTIFICATE-----Generated at Tue May 12 22:38:43 2026 by rpki-client