$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer File: 66770FA373CD2744142D0B56F662714EF6D9C8DB.cer (raw, json) Hash identifier: vblzaOkdSjddUCt5J0MS3OpVsA5G9D7qjEIboWgS+GE= Subject key identifier: 66:77:0F:A3:73:CD:27:44:14:2D:0B:56:F6:62:71:4E:F6:D9:C8:DB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 57C0D392187F9EC0595EB0D5AD2EA4B48C016671 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:33:07 +0000 Certificate not after: Sun 02 May 2027 02:38:07 +0000 Subordinate resources: IP: 103.116.168.0/24 IP: 2001:df5:5b00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c0:d3:92:18:7f:9e:c0:59:5e:b0:d5:ad:2e:a4:b4:8c:01:66:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:33:07 2026 GMT Not After : May 2 02:38:07 2027 GMT Subject: CN=66770FA373CD2744142D0B56F662714EF6D9C8DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b6:40:e3:44:0b:bb:eb:c1:06:e8:0e:51:9a: 94:2f:52:64:70:7d:50:74:b7:98:52:9c:f6:b9:46: f1:d1:5f:b6:a3:7c:4e:34:8e:39:52:15:e0:fd:d0: b5:97:fe:dc:06:52:fe:a4:55:27:7d:af:e4:52:df: 49:2e:d7:88:95:04:ff:46:71:2a:53:25:9f:7b:42: 9b:3e:fe:e7:ae:e8:9e:5b:81:c3:1d:c9:91:fa:12: a9:30:42:8e:c2:62:89:cf:18:d0:6f:07:3e:b2:a0: 7c:0c:71:7e:cb:fd:89:6a:0e:9f:22:58:ae:f0:e7: 94:ae:b1:43:85:46:25:27:b8:de:ba:a7:f6:39:73: 42:a6:d5:87:16:b5:6c:86:fd:c0:3c:ef:4e:72:93: d0:82:db:5f:0c:5d:30:fb:07:34:3a:1f:d2:c0:4e: c6:8b:21:24:48:66:b1:24:04:33:d7:1a:03:8c:66: 33:a1:9d:e1:bd:42:c1:ff:8c:b0:e4:fd:7e:42:98: 43:1e:69:57:74:e9:61:ee:c9:5f:e8:c3:5a:94:fc: 0b:58:db:5b:58:26:21:87:9d:77:d0:91:f3:14:37: d6:bd:c9:70:91:d8:b4:af:7b:0b:d1:c6:51:e5:20: e0:9c:92:41:35:86:fb:b2:fd:9c:f8:03:53:76:0f: 49:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:77:0F:A3:73:CD:27:44:14:2D:0B:56:F6:62:71:4E:F6:D9:C8:DB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.116.168.0/24 IPv6: 2001:df5:5b00::/48 Signature Algorithm: sha256WithRSAEncryption 91:12:e2:20:6e:4c:a7:b5:80:46:d4:5e:e5:01:05:44:53:0b: ae:02:16:7f:2b:a2:5e:ce:ce:d5:92:d2:6d:51:f8:a7:5e:28: 90:89:76:7a:66:f4:89:ca:88:ea:2d:e1:eb:bd:44:16:57:c6: df:fc:b0:be:40:90:61:cc:3b:65:38:d8:75:78:e2:c1:35:db: 06:cc:be:fa:38:79:9f:c4:a7:66:2b:b5:2f:01:77:3a:74:a8: 48:77:81:cf:ed:6d:62:f6:5d:e5:71:dd:27:e5:77:9a:65:ab: 29:2f:4a:01:6a:81:69:b8:eb:a6:5e:ed:c1:d1:67:78:98:6b: 67:32:17:3b:3e:d5:d8:1a:5d:34:cb:b7:67:9c:88:97:68:83: 19:b0:8e:78:a8:06:9c:2d:38:a0:39:6d:5f:2b:21:7a:f5:60: 83:44:7d:a5:dc:eb:10:11:cf:27:fa:8a:20:d0:db:e6:32:81: c7:90:f4:bb:73:8b:47:5f:55:01:e8:0f:d3:f3:30:c9:e5:62: 4b:51:3c:be:39:1f:da:c4:54:68:96:81:b7:fe:55:c5:36:75: 9c:7b:3d:49:e2:a5:dd:13:3f:67:9e:a8:e0:cf:bf:a8:e4:55: b0:ed:45:3b:99:f4:00:bc:14:a9:f0:ab:f0:2c:b7:ce:3a:f4: b4:ec:6b:ef -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUV8DTkhh/nsBZXrDVrS6ktIwBZnEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzMwN1oX DTI3MDUwMjAyMzgwN1owMzExMC8GA1UEAxMoNjY3NzBGQTM3M0NEMjc0NDE0MkQw QjU2RjY2MjcxNEVGNkQ5QzhEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKm2QONEC7vrwQboDlGalC9SZHB9UHS3mFKc9rlG8dFftqN8TjSOOVIV4P3Q tZf+3AZS/qRVJ32v5FLfSS7XiJUE/0ZxKlMln3tCmz7+567onluBwx3JkfoSqTBC jsJiic8Y0G8HPrKgfAxxfsv9iWoOnyJYrvDnlK6xQ4VGJSe43rqn9jlzQqbVhxa1 bIb9wDzvTnKT0ILbXwxdMPsHNDof0sBOxoshJEhmsSQEM9caA4xmM6Gd4b1Cwf+M sOT9fkKYQx5pV3TpYe7JX+jDWpT8C1jbW1gmIYedd9CR8xQ31r3JcJHYtK97C9HG UeUg4JySQTWG+7L9nPgDU3YPSccCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGZ3D6NzzSdEFC0LVvZicU722cjbMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2YzMjZlNGNhLTU0ZTQtNDhiYy05ZTc5LWE2MmVmYWVhZDAzMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mMzI2ZTRj YS01NGU0LTQ4YmMtOWU3OS1hNjJlZmFlYWQwMzIvMC82Njc3MEZBMzczQ0QyNzQ0 MTQyRDBCNTZGNjYyNzE0RUY2RDlDOERCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ3SoMA8EAgACMAkDBwAgAQ31WwAwDQYJKoZIhvcNAQELBQADggEBAJES4iBu TKe1gEbUXuUBBURTC64CFn8rol7OztWS0m1R+KdeKJCJdnpm9InKiOot4eu9RBZX xt/8sL5AkGHMO2U42HV44sE12wbMvvo4eZ/Ep2YrtS8Bdzp0qEh3gc/tbWL2XeVx 3Sfld5plqykvSgFqgWm466Ze7cHRZ3iYa2cyFzs+1dgaXTTLt2eciJdogxmwjnio BpwtOKA5bV8rIXr1YINEfaXc6xARzyf6iiDQ2+YygceQ9Ltzi0dfVQHoD9PzMMnl YktRPL45H9rEVGiWgbf+VcU2dZx7PUnipd0TP2eeqODPv6jkVbDtRTuZ9AC8FKnw q/Ast8469LTsa+8= -----END CERTIFICATE-----Generated at Tue May 12 22:03:24 2026 by rpki-client