$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.cer File: 6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.cer (raw, json) Hash identifier: k9HmcNGpxNhKuDxeR+JJBjHIZDt6UAOOYM4YGKg0238= Subject key identifier: 61:77:E9:D3:DB:AB:63:EF:6C:BB:43:6C:90:6D:5C:5F:75:35:56:FE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3ACF51631C6B96947C1D8B11CAAEF0789802E639 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.mft caRepository: rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:44:21 +0000 Certificate not after: Sun 02 May 2027 01:49:21 +0000 Subordinate resources: IP: 103.222.255.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:cf:51:63:1c:6b:96:94:7c:1d:8b:11:ca:ae:f0:78:98:02:e6:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:44:21 2026 GMT Not After : May 2 01:49:21 2027 GMT Subject: CN=6177E9D3DBAB63EF6CBB436C906D5C5F753556FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e5:b3:f9:5a:b4:80:ef:0b:0e:e5:2d:21:64: d2:d5:a3:47:d8:cd:bf:f5:28:03:00:d9:ab:be:e5: 95:cb:d6:fe:8a:16:71:5c:f4:c4:74:33:8c:18:c5: d3:04:04:50:16:01:f8:d2:c0:6d:2e:ca:68:a9:77: 17:db:4f:e2:dc:21:db:75:e5:e8:c7:14:7a:21:94: e3:a9:93:6c:2d:bd:9d:76:05:4a:cc:cb:04:6c:16: 27:b3:6c:35:3f:07:c7:6b:f0:9c:a9:58:32:6f:5e: c8:50:db:07:f8:45:c1:7b:c1:42:43:37:68:bd:db: 21:48:4d:17:70:60:8d:0d:98:c0:c8:80:52:d6:7c: b9:c9:9b:e4:91:dc:f5:57:bd:f0:f4:00:61:02:3a: 7d:bb:39:05:bc:ae:5c:73:38:9b:db:f2:0f:f0:8e: 53:e8:77:91:58:7e:52:0c:f7:01:81:45:5e:8d:ff: d6:81:69:71:00:6d:16:8f:93:f7:42:2c:d1:40:ae: 52:fd:d8:d2:3f:2d:41:87:c0:a1:73:88:06:84:bc: ef:0d:06:cb:8a:af:b0:a8:00:0c:0b:67:f2:ec:5b: 78:9b:82:c7:49:fd:ce:20:68:7e:d1:7f:41:f7:15: e6:6e:06:63:d7:b1:e4:61:c8:02:57:9e:b0:56:74: b6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 61:77:E9:D3:DB:AB:63:EF:6C:BB:43:6C:90:6D:5C:5F:75:35:56:FE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.222.255.0/24 Signature Algorithm: sha256WithRSAEncryption 45:9b:0c:9d:e3:a2:9f:67:0d:48:85:b9:e1:d4:35:48:01:bd: 5a:30:cd:0f:99:8e:a8:a6:97:57:05:f3:e8:64:c6:da:22:53: 55:f2:b8:53:db:04:8f:c8:9f:74:d5:d1:e2:db:41:eb:49:fe: 01:40:7a:5b:70:a5:0b:7f:a8:1c:9c:e3:93:52:e5:3c:f9:46: 72:65:07:75:75:87:ba:b8:b8:87:3e:f2:dc:e3:a0:2c:95:6b: 47:d6:b4:94:3a:7e:d2:65:ce:67:a2:a8:79:bc:76:17:97:70: f5:a8:5f:12:3c:97:da:6c:1a:b9:9f:93:2f:a5:f1:61:ab:a2: 07:03:1b:df:07:f1:11:df:95:27:2a:ff:e3:bf:9c:f9:ce:69: 2b:28:6f:4e:dd:7b:c1:58:97:6f:23:b3:98:df:2c:57:a0:ba: 73:11:20:7e:68:d7:f0:13:a9:86:70:03:42:e1:24:da:31:f8: 25:e1:2f:13:5f:dc:c7:a7:8d:8b:07:00:78:c4:cb:6f:f3:83: 51:d6:51:e3:79:b8:7d:9c:c5:32:dd:37:77:a3:f6:e0:cc:77: 11:b6:22:f5:01:92:5e:3c:29:80:75:35:b3:e3:1d:17:f1:6d: ff:bd:ab:76:f7:72:8e:a9:83:a8:0e:19:ea:2b:e7:41:ca:ce: 6e:84:06:fd -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUOs9RYxxrlpR8HYsRyq7weJgC5jkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDQyMVoX DTI3MDUwMjAxNDkyMVowMzExMC8GA1UEAxMoNjE3N0U5RDNEQkFCNjNFRjZDQkI0 MzZDOTA2RDVDNUY3NTM1NTZGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANDls/latIDvCw7lLSFk0tWjR9jNv/UoAwDZq77llcvW/ooWcVz0xHQzjBjF 0wQEUBYB+NLAbS7KaKl3F9tP4twh23Xl6McUeiGU46mTbC29nXYFSszLBGwWJ7Ns NT8Hx2vwnKlYMm9eyFDbB/hFwXvBQkM3aL3bIUhNF3BgjQ2YwMiAUtZ8ucmb5JHc 9Ve98PQAYQI6fbs5BbyuXHM4m9vyD/COU+h3kVh+Ugz3AYFFXo3/1oFpcQBtFo+T 90Is0UCuUv3Y0j8tQYfAoXOIBoS87w0Gy4qvsKgADAtn8uxbeJuCx0n9ziBoftF/ QfcV5m4GY9ex5GHIAleesFZ0tvcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGF36dPbq2PvbLtDbJBtXF91NVb+MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2JiOTg1MWIxLTVhNmQtNGU3NS05ZmZmLWMwM2E5YzQ5Y2Y2OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iYjk4NTFi MS01YTZkLTRlNzUtOWZmZi1jMDNhOWM0OWNmNjkvMC82MTc3RTlEM0RCQUI2M0VG NkNCQjQzNkM5MDZENUM1Rjc1MzU1NkZFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ97/MA0GCSqGSIb3DQEBCwUAA4IBAQBFmwyd46KfZw1Ihbnh1DVIAb1aMM0P mY6oppdXBfPoZMbaIlNV8rhT2wSPyJ901dHi20HrSf4BQHpbcKULf6gcnOOTUuU8 +UZyZQd1dYe6uLiHPvLc46AslWtH1rSUOn7SZc5noqh5vHYXl3D1qF8SPJfabBq5 n5MvpfFhq6IHAxvfB/ER35UnKv/jv5z5zmkrKG9O3XvBWJdvI7OY3yxXoLpzESB+ aNfwE6mGcANC4STaMfgl4S8TX9zHp42LBwB4xMtv84NR1lHjebh9nMUy3Td3o/bg zHcRtiL1AZJePCmAdTWz4x0X8W3/vat293KOqYOoDhnqK+dBys5uhAb9 -----END CERTIFICATE-----Generated at Tue May 12 22:16:19 2026 by rpki-client