$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer File: 61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer (raw, json) Hash identifier: Xp8zK9BGBd75uWznzX3c1bdGxLIfNenY/03hRAJt9e0= Subject key identifier: 61:FF:D3:DC:39:24:9E:D6:85:0C:5F:94:45:31:F4:4C:7A:A2:98:D0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 276F5E4F1619B44A3FA4AAF9CA0574368DA654C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:24:28 +0000 Certificate not after: Sun 02 May 2027 01:29:28 +0000 Subordinate resources: IP: 103.15.240.0/22 IP: 103.52.64.0/22 IP: 2001:df5:b400::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:6f:5e:4f:16:19:b4:4a:3f:a4:aa:f9:ca:05:74:36:8d:a6:54:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:24:28 2026 GMT Not After : May 2 01:29:28 2027 GMT Subject: CN=61FFD3DC39249ED6850C5F944531F44C7AA298D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d7:f2:31:40:ad:0f:d8:70:99:b2:6e:a0:c1: c5:22:b7:43:08:41:aa:3c:81:e6:3f:9c:33:a5:75: 4a:1d:fa:66:84:0a:78:ea:f7:d9:6e:dd:59:78:77: ac:ba:ea:2f:20:f6:07:6b:ad:72:5a:3e:cd:d2:e1: 4e:c6:8b:2a:d8:17:5c:27:84:93:e7:e4:b8:84:14: 72:74:41:df:73:c3:27:f6:86:ad:09:33:8e:6d:f5: 97:19:ea:a9:92:f4:14:90:d8:40:5a:8d:02:43:a6: 03:a9:f9:2a:f0:87:e7:95:55:8b:38:1f:93:fc:e3: a4:9c:1a:99:e1:20:7b:e9:ae:51:32:2c:75:3f:3b: 60:13:6b:c2:48:1d:96:ee:8e:5e:59:40:d0:90:fd: 68:2d:95:98:b9:7c:9e:3a:29:99:83:56:76:dc:d6: ef:61:11:f1:79:97:f2:98:e5:d1:29:c1:6b:20:b7: 26:6d:c0:1d:b9:35:74:20:53:b6:75:96:ab:49:b7: 21:ab:93:0c:f1:a3:aa:21:d9:47:82:b5:8f:8c:12: 76:54:80:55:98:1e:2f:aa:19:8f:33:cc:2c:a6:17: 70:bc:cb:2d:0c:60:83:0a:f5:72:62:3d:04:6e:cb: 6a:f2:a4:93:5f:3d:0f:9b:3b:3f:3c:06:6a:62:5f: ca:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 61:FF:D3:DC:39:24:9E:D6:85:0C:5F:94:45:31:F4:4C:7A:A2:98:D0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.15.240.0/22 103.52.64.0/22 IPv6: 2001:df5:b400::/48 Signature Algorithm: sha256WithRSAEncryption 64:f0:1a:ee:16:16:ea:3e:48:ca:de:a3:3f:5d:23:0f:7a:3d: cb:6d:24:2f:1b:74:8b:77:ba:4b:50:49:fe:c4:37:67:91:c7: 1f:18:cf:b6:57:22:35:79:1e:3a:e3:a1:7f:96:14:4e:8b:38: 31:f8:74:ac:00:95:03:34:68:4a:f9:48:a9:db:ab:08:b4:59: bc:bf:3e:4a:56:0a:0d:1b:43:fa:51:6b:74:47:72:ae:9a:0f: e1:55:82:2a:1b:d1:b2:39:42:a8:7b:b6:63:a5:45:71:b3:5d: a5:03:75:b5:5f:6f:ea:eb:96:f5:96:b2:a0:66:75:0f:79:4c: 99:bd:2c:fc:a8:77:a4:8d:1f:42:6d:52:a1:d4:a8:2a:4e:80: c5:ec:5b:c3:36:98:75:6d:84:3b:ba:e8:b6:72:d9:e5:34:88: 68:cb:5f:09:e9:f7:ea:5d:70:54:98:7e:e2:6a:9c:79:81:7c: 25:10:1b:ec:4f:0e:6b:d4:41:f6:de:b0:52:a6:b4:96:af:ad: 48:ac:37:2d:03:21:37:10:48:de:a7:6f:90:18:fd:5b:a4:c4: 16:25:91:64:72:e4:59:1c:c5:92:ad:0b:54:e4:da:1f:9f:90: 09:cd:a3:cf:83:73:c9:d1:97:01:02:64:1c:cf:5a:10:e7:d9: a6:9d:e1:2f -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUJ29eTxYZtEo/pKr5ygV0No2mVMYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjQyOFoX DTI3MDUwMjAxMjkyOFowMzExMC8GA1UEAxMoNjFGRkQzREMzOTI0OUVENjg1MEM1 Rjk0NDUzMUY0NEM3QUEyOThEMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMbX8jFArQ/YcJmybqDBxSK3QwhBqjyB5j+cM6V1Sh36ZoQKeOr32W7dWXh3 rLrqLyD2B2utclo+zdLhTsaLKtgXXCeEk+fkuIQUcnRB33PDJ/aGrQkzjm31lxnq qZL0FJDYQFqNAkOmA6n5KvCH55VVizgfk/zjpJwameEge+muUTIsdT87YBNrwkgd lu6OXllA0JD9aC2VmLl8njopmYNWdtzW72ER8XmX8pjl0SnBayC3Jm3AHbk1dCBT tnWWq0m3IauTDPGjqiHZR4K1j4wSdlSAVZgeL6oZjzPMLKYXcLzLLQxggwr1cmI9 BG7LavKkk189D5s7PzwGamJfyjsCAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGH/09w5JJ7WhQxflEUx9Ex6opjQMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzljMmM0OTQ4LTY4N2ItNDAyMC04N2Y0LTI4ZWU0YjYzYWE0Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85YzJjNDk0 OC02ODdiLTQwMjAtODdmNC0yOGVlNGI2M2FhNDcvMC82MUZGRDNEQzM5MjQ5RUQ2 ODUwQzVGOTQ0NTMxRjQ0QzdBQTI5OEQwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQCZw/wAwQCZzRAMA8EAgACMAkDBwAgAQ31tAAwDQYJKoZIhvcNAQELBQADggEB AGTwGu4WFuo+SMreoz9dIw96PcttJC8bdIt3uktQSf7EN2eRxx8Yz7ZXIjV5Hjrj oX+WFE6LODH4dKwAlQM0aEr5SKnbqwi0Wby/PkpWCg0bQ/pRa3RHcq6aD+FVgiob 0bI5Qqh7tmOlRXGzXaUDdbVfb+rrlvWWsqBmdQ95TJm9LPyod6SNH0JtUqHUqCpO gMXsW8M2mHVthDu66LZy2eU0iGjLXwnp9+pdcFSYfuJqnHmBfCUQG+xPDmvUQfbe sFKmtJavrUisNy0DITcQSN6nb5AY/VukxBYlkWRy5FkcxZKtC1Tk2h+fkAnNo8+D c8nRlwECZBzPWhDn2aad4S8= -----END CERTIFICATE-----Generated at Tue May 12 22:03:32 2026 by rpki-client