$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.cer File: 63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.cer (raw, json) Hash identifier: 7i66G8NJXOsIgFtzt+wqSx6VRMeFuu+XH5O4vS47RsY= Subject key identifier: 63:DB:2C:D7:7B:3D:F9:5A:C0:F9:FC:5B:BB:85:C6:33:4A:CD:5A:42 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 03AF6B04AE563A7C5B9A337597EB568BBF73A561 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:39:16 +0000 Certificate not after: Sun 02 May 2027 01:44:16 +0000 Subordinate resources: IP: 210.79.190.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:af:6b:04:ae:56:3a:7c:5b:9a:33:75:97:eb:56:8b:bf:73:a5:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:39:16 2026 GMT Not After : May 2 01:44:16 2027 GMT Subject: CN=63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:52:34:85:48:89:4b:9e:0a:45:53:47:2e:58: a3:55:45:19:98:7f:b5:d3:53:f9:b3:85:21:f9:b5: 3c:08:5d:9b:7d:4a:37:d2:a8:22:dd:b4:12:5e:cd: 88:cf:9f:b7:2d:f7:31:2c:11:4a:94:44:38:e4:c7: d3:ac:f7:d9:ac:5b:66:66:86:1b:0f:2c:ee:f1:85: ff:e3:79:2e:47:a8:3a:ed:5b:8a:70:fe:ca:3f:36: fd:fc:c6:79:3b:1b:fe:74:bd:cc:62:83:a3:e0:f4: 49:24:a8:77:1c:c8:40:a8:b1:f5:ad:68:ad:72:47: 49:54:e5:4a:5a:1d:41:97:39:02:5e:05:2b:ee:5f: 03:16:57:57:a3:7e:12:cb:0e:7b:2b:b1:d6:34:a2: 31:7b:d4:4f:ae:78:7e:a1:8f:82:d3:c5:9a:15:c6: 7b:4e:ef:f3:02:5b:7c:ba:f3:22:8b:e7:79:76:42: 77:5b:ec:12:be:60:4c:b1:64:b9:09:90:a9:88:e3: cd:af:09:22:ae:f3:ac:55:b7:02:e6:09:67:e8:83: a7:22:c0:d0:b7:7f:2b:e5:e8:80:a7:d0:e1:8b:80: 95:8e:2c:d6:fe:2b:9b:ac:d2:3c:2a:f8:69:ac:81: 9a:29:ce:07:9f:e6:88:cb:ad:59:1d:d7:79:b9:46: e9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 63:DB:2C:D7:7B:3D:F9:5A:C0:F9:FC:5B:BB:85:C6:33:4A:CD:5A:42 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.79.190.0/23 Signature Algorithm: sha256WithRSAEncryption 37:20:c6:07:bf:5d:7f:45:89:bd:5f:5e:24:be:66:f8:4d:f9: 5a:83:0b:c6:60:0c:05:04:82:3f:a0:19:2f:d0:57:66:73:7c: ec:b4:ad:84:c7:44:cb:03:b6:71:be:4d:81:96:59:96:b9:18: 27:50:3e:a0:76:d8:90:1d:0c:fc:3f:69:db:83:03:28:f5:6e: be:c7:9e:c1:74:d4:0b:cc:e7:f4:db:41:05:88:15:6e:c1:40: 06:4c:d4:b0:76:7e:09:a9:9c:19:e5:fc:69:9e:75:4d:72:86: 27:d2:fa:b4:1d:80:63:1c:2e:95:99:25:d7:ac:b9:e3:ef:06: b9:c6:28:75:f5:a5:a7:91:9a:c6:2a:65:0e:bb:8e:cb:f1:01: 97:0b:2e:c9:02:2d:8c:54:11:96:19:39:2c:eb:50:39:9c:0c: ff:00:6b:c9:c9:a1:a1:1a:88:22:5d:35:0d:60:00:8c:a8:e5: 9a:6b:0a:b3:66:48:15:4a:d5:d7:16:ee:1e:9b:e6:88:7e:c2: 87:c8:16:69:60:ef:50:35:33:f3:dd:83:b6:15:48:43:1a:60: e1:73:60:a8:76:19:ad:c7:35:51:97:26:14:e8:50:2b:47:b6: 02:12:de:df:ee:61:da:25:00:81:64:d6:89:59:39:ed:c3:06: a9:58:14:b2 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUA69rBK5WOnxbmjN1l+tWi79zpWEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzkxNloX DTI3MDUwMjAxNDQxNlowMzExMC8GA1UEAxMoNjNEQjJDRDc3QjNERjk1QUMwRjlG QzVCQkI4NUM2MzM0QUNENUE0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMtSNIVIiUueCkVTRy5Yo1VFGZh/tdNT+bOFIfm1PAhdm31KN9KoIt20El7N iM+fty33MSwRSpREOOTH06z32axbZmaGGw8s7vGF/+N5LkeoOu1binD+yj82/fzG eTsb/nS9zGKDo+D0SSSodxzIQKix9a1orXJHSVTlSlodQZc5Al4FK+5fAxZXV6N+ EssOeyux1jSiMXvUT654fqGPgtPFmhXGe07v8wJbfLrzIovneXZCd1vsEr5gTLFk uQmQqYjjza8JIq7zrFW3AuYJZ+iDpyLA0Ld/K+XogKfQ4YuAlY4s1v4rm6zSPCr4 aayBminOB5/miMutWR3XeblG6VsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGPbLNd7PflawPn8W7uFxjNKzVpCMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2IyNjBmMDNjLTg5NjgtNDcwZi1iNjE4LWQzZWIyYzkyOGE0ZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iMjYwZjAz Yy04OTY4LTQ3MGYtYjYxOC1kM2ViMmM5MjhhNGQvMC82M0RCMkNENzdCM0RGOTVB QzBGOUZDNUJCQjg1QzYzMzRBQ0Q1QTQyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQB0k++MA0GCSqGSIb3DQEBCwUAA4IBAQA3IMYHv11/RYm9X14kvmb4TflagwvG YAwFBII/oBkv0Fdmc3zstK2Ex0TLA7Zxvk2BllmWuRgnUD6gdtiQHQz8P2nbgwMo 9W6+x57BdNQLzOf020EFiBVuwUAGTNSwdn4JqZwZ5fxpnnVNcoYn0vq0HYBjHC6V mSXXrLnj7wa5xih19aWnkZrGKmUOu47L8QGXCy7JAi2MVBGWGTks61A5nAz/AGvJ yaGhGogiXTUNYACMqOWaawqzZkgVStXXFu4em+aIfsKHyBZpYO9QNTPz3YO2FUhD GmDhc2CodhmtxzVRlyYU6FArR7YCEt7f7mHaJQCBZNaJWTntwwapWBSy -----END CERTIFICATE-----Generated at Tue May 12 22:10:28 2026 by rpki-client