$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer File: 62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer (raw, json) Hash identifier: iFOv4jFoPop57U5LevddbG2KQXSBZK0c1oVYe3RK2h0= Subject key identifier: 62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6726AA1E53E4014A4C4A6FFB46900A230B57B1CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:47:00 +0000 Certificate not after: Sun 02 May 2027 00:52:00 +0000 Subordinate resources: IP: 43.230.152.0/22 IP: 103.245.136.0/22 IP: 180.211.88.0/21 IP: 202.150.160.0/20 IP: 2402:780::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:26:aa:1e:53:e4:01:4a:4c:4a:6f:fb:46:90:0a:23:0b:57:b1:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:47:00 2026 GMT Not After : May 2 00:52:00 2027 GMT Subject: CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d3:40:2d:23:e0:2f:07:65:53:a3:d6:57:8f: 33:d1:88:b8:12:c2:08:81:20:e1:5f:f1:5f:30:41: 91:7a:82:b5:5a:fb:38:b4:6c:4d:7a:9e:63:84:c4: 0d:7b:25:45:8b:db:70:cf:85:36:89:3e:81:11:54: cb:1d:20:f8:0a:43:71:25:8a:fb:9a:72:85:99:44: e3:e7:a0:98:8a:0c:7b:bc:6a:e8:74:01:1e:0e:5e: 5e:6a:4e:ef:77:d4:24:de:ab:3f:63:07:65:90:6c: b9:12:e2:dd:a6:cf:e4:57:9a:ad:66:40:45:b4:84: 4d:0d:c0:2f:75:ee:5a:ab:37:ae:4f:e6:93:4f:8a: ad:f3:67:6a:5b:cc:81:10:fd:21:68:6d:a0:64:13: 5f:f2:b6:e5:ff:c0:34:a6:a3:73:bf:9f:31:94:be: 76:e1:45:c1:b1:c9:18:5e:c7:76:73:8c:7c:b1:fc: 5c:3e:31:4a:28:43:20:bf:97:68:e1:12:59:1b:3e: 9f:5d:39:23:5f:0a:bb:11:4f:4a:e6:7a:9d:4a:ea: af:ca:e0:73:e8:e2:ef:2e:72:c0:11:da:ce:5d:f3: 41:c3:1f:0c:46:56:92:21:a3:d0:7e:72:6d:1e:19: 77:b9:31:f2:2e:00:9e:68:36:db:d8:ac:2a:e9:77: f4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.152.0/22 103.245.136.0/22 180.211.88.0/21 202.150.160.0/20 IPv6: 2402:780::/32 Signature Algorithm: sha256WithRSAEncryption 49:0f:f9:41:09:fc:8d:58:75:48:c5:fe:d3:8c:c9:88:21:26: 7a:7c:d3:65:f2:ad:80:c0:3b:e6:22:b8:96:1b:69:bf:e2:d0: b8:8b:a9:5c:e0:4b:5f:97:10:86:9e:e0:5f:a5:64:fd:b6:31: ec:d1:ce:f0:34:82:29:5c:ad:0c:46:3f:e7:ab:01:6d:c7:e5: 96:b4:aa:61:94:05:ff:ea:b9:40:da:18:99:86:ca:7b:7f:5d: 8a:85:3a:b8:12:9c:04:e3:2e:5b:93:6f:04:73:5d:e1:cd:d8: ca:33:5d:70:09:9f:a1:fd:83:e8:eb:73:fb:d2:33:71:0d:7f: 4c:57:07:50:df:e2:e5:2a:b7:f6:90:94:68:ad:03:b8:36:38: 7b:c4:ea:00:90:82:44:34:2b:e2:f2:ee:e3:a3:e5:7a:3f:40: ce:8d:db:4f:77:e4:1b:77:fd:c2:6c:2a:73:0e:cd:94:91:2c: 9e:e2:1c:bc:b4:83:5e:fe:c1:e6:82:bb:ce:9e:c2:3e:13:a2: 5c:1d:1a:0f:1d:75:b4:dd:00:b4:19:d2:cf:f0:65:77:70:b9: 56:62:95:bb:5e:64:c4:bf:2a:a6:ea:42:7a:42:be:5b:2a:34: 9e:98:5a:f3:7f:65:48:c8:e4:cd:bd:e3:3c:32:77:7f:38:d3: d5:92:de:10 -----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgIUZyaqHlPkAUpMSm/7RpAKIwtXscwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDcwMFoX DTI3MDUwMjAwNTIwMFowMzExMC8GA1UEAxMoNjIyNThDNDZDN0VFRjk0MjczMzFF MjRBMkQxRUI5QjY5OUM2OEE5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALzTQC0j4C8HZVOj1lePM9GIuBLCCIEg4V/xXzBBkXqCtVr7OLRsTXqeY4TE DXslRYvbcM+FNok+gRFUyx0g+ApDcSWK+5pyhZlE4+egmIoMe7xq6HQBHg5eXmpO 73fUJN6rP2MHZZBsuRLi3abP5FearWZARbSETQ3AL3XuWqs3rk/mk0+KrfNnalvM gRD9IWhtoGQTX/K25f/ANKajc7+fMZS+duFFwbHJGF7HdnOMfLH8XD4xSihDIL+X aOESWRs+n105I18KuxFPSuZ6nUrqr8rgc+ji7y5ywBHazl3zQcMfDEZWkiGj0H5y bR4Zd7kx8i4Anmg229isKul39A8CAwEAAaOCAtowggLWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGIljEbH7vlCczHiSi0eubaZxoqeMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY0NDIxNmQ4LTcwY2UtNDkwOC1hNzJiLWVjMjczZjQzYmJjMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82NDQyMTZk OC03MGNlLTQ5MDgtYTcyYi1lYzI3M2Y0M2JiYzIvMC82MjI1OEM0NkM3RUVGOTQy NzMzMUUyNEEyRDFFQjlCNjk5QzY4QTlFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAY AwQCK+aYAwQCZ/WIAwQDtNNYAwQEypagMA0EAgACMAcDBQAkAgeAMA0GCSqGSIb3 DQEBCwUAA4IBAQBJD/lBCfyNWHVIxf7TjMmIISZ6fNNl8q2AwDvmIriWG2m/4tC4 i6lc4EtflxCGnuBfpWT9tjHs0c7wNIIpXK0MRj/nqwFtx+WWtKphlAX/6rlA2hiZ hsp7f12KhTq4EpwE4y5bk28Ec13hzdjKM11wCZ+h/YPo63P70jNxDX9MVwdQ3+Ll Krf2kJRorQO4Njh7xOoAkIJENCvi8u7jo+V6P0DOjdtPd+Qbd/3CbCpzDs2UkSye 4hy8tINe/sHmgrvOnsI+E6JcHRoPHXW03QC0GdLP8GV3cLlWYpW7XmTEvyqm6kJ6 Qr5bKjSemFrzf2VIyOTNveM8Mnd/ONPVkt4Q -----END CERTIFICATE-----Generated at Wed May 13 01:07:07 2026 by rpki-client