$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer File: 620E60F2FB189CAF127FF296661B8B00B4E20819.cer (raw, json) Hash identifier: Un3prMOfvtTxdSulVK/IEUMP82NG0wHfosYQg+Rywzo= Subject key identifier: 62:0E:60:F2:FB:18:9C:AF:12:7F:F2:96:66:1B:8B:00:B4:E2:08:19 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5AA91EF244311773AA9418E07657A089913EB795 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft caRepository: rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:02:50 +0000 Certificate not after: Sun 02 May 2027 00:07:50 +0000 Subordinate resources: IP: 103.172.186.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:a9:1e:f2:44:31:17:73:aa:94:18:e0:76:57:a0:89:91:3e:b7:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:02:50 2026 GMT Not After : May 2 00:07:50 2027 GMT Subject: CN=620E60F2FB189CAF127FF296661B8B00B4E20819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:49:3b:75:46:f3:8e:ca:4e:91:e0:e5:1b:a4: 88:b5:61:90:e1:fc:3a:66:94:36:65:38:38:90:18: e9:b6:e8:39:bd:e6:d4:e6:1f:d0:19:42:33:89:1b: 81:a0:d2:75:98:0e:fa:c3:bf:cd:1d:e0:9f:50:22: 1b:82:9c:61:4a:95:86:ea:64:ea:15:68:8f:3f:5e: 56:ff:90:86:c8:7e:00:41:60:f5:37:28:11:2e:1d: 82:b5:7a:28:0a:ce:c9:4d:98:2b:27:48:c6:06:8d: 5d:5a:81:fe:de:34:ea:82:d2:08:17:82:44:f1:b9: 94:44:89:1d:f9:e9:40:52:a8:2a:d5:0c:fd:a8:7a: 83:6b:a5:2c:63:5e:e5:eb:2e:1f:76:45:77:8c:2e: ed:24:9b:1c:ad:b3:6d:3f:3a:a7:b3:5f:e7:fc:6a: d5:6d:b1:89:b4:36:85:eb:e7:72:6e:9f:60:9b:64: 8e:5d:9e:35:f3:90:97:09:66:da:6a:09:64:fa:91: 32:8b:ca:e2:3e:04:ef:ab:3b:67:14:eb:41:ec:2e: 77:e8:28:fd:4c:f7:b5:30:34:72:8a:f0:dc:d6:d2: 1b:c9:26:af:76:0b:09:f6:2f:ba:e7:cf:4e:e7:6f: a8:81:ab:8e:50:b0:96:7b:0e:35:c6:94:b3:d8:0a: cb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 62:0E:60:F2:FB:18:9C:AF:12:7F:F2:96:66:1B:8B:00:B4:E2:08:19 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.186.0/23 Signature Algorithm: sha256WithRSAEncryption 76:f7:f2:51:14:54:ee:3e:30:da:c7:ac:21:59:3b:2e:3c:5f: 41:23:85:ca:ef:3c:5e:0d:1b:f4:84:e0:c3:4f:a3:28:bb:74: 11:8d:ff:ac:37:92:e9:1c:b1:de:7c:c0:2f:06:df:fe:d3:62: 06:62:c4:ff:f1:37:8f:18:36:88:79:fd:dd:34:1f:c4:03:d4: e4:ec:77:c8:7e:c3:a1:0a:c7:62:1e:c1:22:49:54:be:aa:5e: 06:51:17:b6:c4:ea:48:48:1f:fc:8e:eb:13:f5:57:14:8d:97: a0:ba:63:1d:e7:aa:bd:b0:4c:7d:4d:5f:40:f3:5f:83:87:ce: c2:b7:13:57:92:0e:2b:6c:49:55:35:f8:1a:05:8d:13:c4:df: 79:38:0a:d8:9f:7c:1a:df:b2:a8:66:8d:48:ea:97:b6:b0:09: 21:5b:1e:7c:22:2a:f0:6f:24:31:9c:1a:9f:3c:58:cf:3c:5e: 7d:ae:60:08:7c:78:02:73:b9:c5:d9:81:d4:8e:a4:7d:f0:97: fc:09:4c:99:58:b2:bb:20:2d:f2:54:d8:3d:87:12:cb:c2:dc: ef:ef:37:80:27:2c:8b:89:4d:54:cc:1c:09:54:1b:e5:8b:d4: eb:5f:9f:af:13:97:4a:c6:4c:a4:05:d9:6a:4f:8c:96:79:ca: 07:b4:ee:d7 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUWqke8kQxF3OqlBjgdlegiZE+t5UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDI1MFoX DTI3MDUwMjAwMDc1MFowMzExMC8GA1UEAxMoNjIwRTYwRjJGQjE4OUNBRjEyN0ZG Mjk2NjYxQjhCMDBCNEUyMDgxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJRJO3VG847KTpHg5RukiLVhkOH8OmaUNmU4OJAY6bboOb3m1OYf0BlCM4kb gaDSdZgO+sO/zR3gn1AiG4KcYUqVhupk6hVojz9eVv+Qhsh+AEFg9TcoES4dgrV6 KArOyU2YKydIxgaNXVqB/t406oLSCBeCRPG5lESJHfnpQFKoKtUM/ah6g2ulLGNe 5esuH3ZFd4wu7SSbHK2zbT86p7Nf5/xq1W2xibQ2hevncm6fYJtkjl2eNfOQlwlm 2moJZPqRMovK4j4E76s7ZxTrQewud+go/Uz3tTA0corw3NbSG8kmr3YLCfYvuufP TudvqIGrjlCwlnsONcaUs9gKy8cCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGIOYPL7GJyvEn/ylmYbiwC04ggZMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzIyZjVmMDdjLWYwN2ItNGFhYS1hMGMyLWRmMTdjOTEwYzU4Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yMmY1ZjA3 Yy1mMDdiLTRhYWEtYTBjMi1kZjE3YzkxMGM1ODYvMC82MjBFNjBGMkZCMTg5Q0FG MTI3RkYyOTY2NjFCOEIwMEI0RTIwODE5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6y6MA0GCSqGSIb3DQEBCwUAA4IBAQB29/JRFFTuPjDax6whWTsuPF9BI4XK 7zxeDRv0hODDT6Mou3QRjf+sN5LpHLHefMAvBt/+02IGYsT/8TePGDaIef3dNB/E A9Tk7HfIfsOhCsdiHsEiSVS+ql4GURe2xOpISB/8jusT9VcUjZegumMd56q9sEx9 TV9A81+Dh87CtxNXkg4rbElVNfgaBY0TxN95OArYn3wa37KoZo1I6pe2sAkhWx58 IirwbyQxnBqfPFjPPF59rmAIfHgCc7nF2YHUjqR98Jf8CUyZWLK7IC3yVNg9hxLL wtzv7zeAJyyLiU1UzBwJVBvli9TrX5+vE5dKxkykBdlqT4yWecoHtO7X -----END CERTIFICATE-----Generated at Tue May 12 22:15:50 2026 by rpki-client