$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.cer File: 661B2CF429FB4B8EB4C4CE130BA373F95F584E13.cer (raw, json) Hash identifier: 5e8cmKCHLi27xztvlu3+Gd7UCD/fOv8FYwvh3Pk9wlY= Subject key identifier: 66:1B:2C:F4:29:FB:4B:8E:B4:C4:CE:13:0B:A3:73:F9:5F:58:4E:13 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2031A47225CA29006AA9C8D45C9B62ABA39D4636 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.mft caRepository: rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:06:12 +0000 Certificate not after: Sun 02 May 2027 01:11:12 +0000 Subordinate resources: IP: 163.61.82.0/23 IP: 2001:df5:10c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:31:a4:72:25:ca:29:00:6a:a9:c8:d4:5c:9b:62:ab:a3:9d:46:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:06:12 2026 GMT Not After : May 2 01:11:12 2027 GMT Subject: CN=661B2CF429FB4B8EB4C4CE130BA373F95F584E13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:77:8a:15:8a:7b:ca:f7:64:ae:9d:ae:9f:e5: d5:fe:7c:13:d5:ae:91:b2:78:f8:7e:17:5e:18:d7: b1:65:56:f9:47:10:73:95:cf:8b:8f:08:40:b9:79: 9b:44:5f:6b:61:d3:7c:39:2c:c4:22:f7:0d:01:2a: 42:ce:9d:02:a2:18:ab:58:86:13:25:cf:6d:aa:43: b4:18:5c:4e:5c:2f:08:7e:9f:22:cf:3f:24:4e:92: 2f:7b:e5:af:a4:90:c2:90:d6:dc:71:8e:6f:c9:02: bf:6b:bc:78:74:7b:f2:11:ee:38:2d:3f:ad:53:98: 56:78:2d:68:53:3a:a9:ad:e0:51:09:4e:f4:b4:f6: bb:b4:2e:0e:7e:45:1f:f2:c1:bb:31:03:33:2e:b9: 89:22:a6:e4:9e:dc:17:96:8d:f0:f5:a1:ad:cc:9f: 76:de:96:01:b1:a6:18:76:16:8a:38:b3:56:a9:3f: 4f:30:f9:a0:70:98:b0:c7:ff:88:2c:18:6b:4d:97: 93:dc:70:14:38:9c:50:0f:51:68:bb:7a:23:92:d8: ec:0a:69:ff:1d:7a:8f:83:b8:fe:f0:29:46:8d:8c: ff:99:d1:31:ee:80:26:99:f7:57:3e:22:37:37:f4: 62:6e:4b:37:db:39:cb:25:ad:d6:52:a6:ed:0b:88: ae:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:1B:2C:F4:29:FB:4B:8E:B4:C4:CE:13:0B:A3:73:F9:5F:58:4E:13 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.82.0/23 IPv6: 2001:df5:10c0::/48 Signature Algorithm: sha256WithRSAEncryption 4d:3b:6c:1c:2a:67:78:41:c6:ab:a9:bc:d8:4f:34:3d:1e:2b: 6f:92:26:c3:2e:24:fa:3a:3d:96:37:a4:8b:11:ac:cc:d5:c8: 5a:65:8e:84:c6:be:7f:df:c3:c2:68:ef:54:45:5b:8e:15:ca: fd:90:a5:b0:46:f3:5c:de:ee:48:b0:5c:1d:fd:cb:d3:e8:c5: e0:e1:84:db:59:78:e7:6d:29:c7:5a:ee:4c:6f:9f:49:fc:39: b3:58:77:b7:cf:5f:60:67:ba:bb:4e:4f:ad:1c:37:e7:d8:de: ca:60:74:6a:49:1a:21:e4:85:f6:24:95:31:c6:d5:85:68:d6: e4:5e:16:44:99:1b:4f:96:48:35:ce:db:ea:a9:1f:7f:89:06: c3:ae:35:3f:55:73:0f:01:f0:c1:65:8d:e0:75:6b:a3:07:75: a1:5e:67:09:c9:e1:0d:75:a9:1f:72:90:83:42:1a:0c:ca:c5: c1:05:0d:03:28:2c:0a:38:ff:8c:14:57:96:41:61:ee:c2:9c: ec:4b:21:1a:1f:97:e3:bf:15:3d:03:b1:0b:62:36:c5:84:2d: 6d:1d:16:90:4d:16:fa:46:60:4f:54:d1:b7:51:77:a2:1c:99: e6:73:14:ba:87:e3:cc:89:2c:77:6a:8f:b5:8c:38:cd:69:1a: 72:d1:3d:ec -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUIDGkciXKKQBqqcjUXJtiq6OdRjYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDYxMloX DTI3MDUwMjAxMTExMlowMzExMC8GA1UEAxMoNjYxQjJDRjQyOUZCNEI4RUI0QzRD RTEzMEJBMzczRjk1RjU4NEUxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI93ihWKe8r3ZK6drp/l1f58E9WukbJ4+H4XXhjXsWVW+UcQc5XPi48IQLl5 m0Rfa2HTfDksxCL3DQEqQs6dAqIYq1iGEyXPbapDtBhcTlwvCH6fIs8/JE6SL3vl r6SQwpDW3HGOb8kCv2u8eHR78hHuOC0/rVOYVngtaFM6qa3gUQlO9LT2u7QuDn5F H/LBuzEDMy65iSKm5J7cF5aN8PWhrcyfdt6WAbGmGHYWijizVqk/TzD5oHCYsMf/ iCwYa02Xk9xwFDicUA9RaLt6I5LY7App/x16j4O4/vApRo2M/5nRMe6AJpn3Vz4i Nzf0Ym5LN9s5yyWt1lKm7QuIrj8CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGYbLPQp+0uOtMTOEwujc/lfWE4TMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzgwYWQ0MDIzLWNjMmItNDEyMy05OTM5LWE1NTg1MWZjYTYxOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84MGFkNDAy My1jYzJiLTQxMjMtOTkzOS1hNTU4NTFmY2E2MTkvMC82NjFCMkNGNDI5RkI0QjhF QjRDNENFMTMwQkEzNzNGOTVGNTg0RTEzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBoz1SMA8EAgACMAkDBwAgAQ31EMAwDQYJKoZIhvcNAQELBQADggEBAE07bBwq Z3hBxqupvNhPND0eK2+SJsMuJPo6PZY3pIsRrMzVyFpljoTGvn/fw8Jo71RFW44V yv2QpbBG81ze7kiwXB39y9PoxeDhhNtZeOdtKcda7kxvn0n8ObNYd7fPX2BnurtO T60cN+fY3spgdGpJGiHkhfYklTHG1YVo1uReFkSZG0+WSDXO2+qpH3+JBsOuNT9V cw8B8MFljeB1a6MHdaFeZwnJ4Q11qR9ykINCGgzKxcEFDQMoLAo4/4wUV5ZBYe7C nOxLIRofl+O/FT0DsQtiNsWELW0dFpBNFvpGYE9U0bdRd6IcmeZzFLqH48yJLHdq j7WMOM1pGnLRPew= -----END CERTIFICATE-----Generated at Tue May 12 22:38:45 2026 by rpki-client