$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer File: 6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer (raw, json) Hash identifier: WtQ3Eqkhq52zOWEDLefDMoHh/k3RLsKjgaajkeO//aQ= Subject key identifier: 66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5FDFD3F8098871CAFD296009D8B20F13202C02CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:59:31 +0000 Certificate not after: Sun 02 May 2027 00:04:31 +0000 Subordinate resources: IP: 103.101.136.0/22 IP: 117.20.48.0/20 IP: 202.65.112.0/20 IP: 202.152.128.0/19 IP: 203.89.148.0/23 IP: 2401:ee00::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:df:d3:f8:09:88:71:ca:fd:29:60:09:d8:b2:0f:13:20:2c:02:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:59:31 2026 GMT Not After : May 2 00:04:31 2027 GMT Subject: CN=6682CFF7F80E4587133A4FFEFC163B1417741DC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:48:f6:c0:6f:b0:03:8c:7f:07:8d:4f:8e:d2: 0d:9b:e1:77:bf:f2:a5:35:83:c2:c0:b7:2e:56:44: 8f:a6:96:7a:46:46:97:4d:64:49:d1:75:87:74:ec: cf:ac:40:89:57:74:37:39:30:ec:5b:9d:ab:65:0e: b7:00:2f:8e:15:f8:07:5d:ca:73:e6:9c:b7:d4:28: 5e:e7:21:3d:67:40:86:65:08:c4:c2:43:23:f2:bb: a6:05:05:5c:0a:c3:4a:85:17:c2:16:9e:31:a0:e6: 76:58:63:91:75:e8:4a:fc:6e:51:54:7b:94:6f:84: a7:99:3d:0d:02:5f:cb:2d:00:44:6a:fa:9a:25:02: b6:d5:8c:58:4f:22:5b:13:ae:b7:59:37:1a:cd:0f: 98:3c:0e:16:f7:ef:4e:a8:14:f9:19:50:01:33:f1: f9:ae:80:aa:f2:fc:00:3d:cf:7a:8b:d2:4a:d6:0a: 75:a2:ca:04:6b:ae:99:23:a1:98:ac:e0:fb:ab:73: 2a:49:4c:7d:89:b4:f0:d0:27:18:5f:9b:f0:ac:89: af:08:7f:ed:a3:b7:9b:42:77:b9:5c:47:ff:8d:d4: fd:3f:e7:65:cf:43:e3:32:38:4c:be:9c:e5:73:61: e7:b5:8f:1b:fd:65:1f:a3:c9:32:e0:39:49:aa:b4: 40:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.101.136.0/22 117.20.48.0/20 202.65.112.0/20 202.152.128.0/19 203.89.148.0/23 IPv6: 2401:ee00::/32 Signature Algorithm: sha256WithRSAEncryption 05:33:15:3b:5d:ff:e2:db:7e:a1:03:e2:a2:30:e2:84:34:03: d8:18:31:c8:02:2b:90:24:63:93:5f:1e:c0:23:e1:34:93:a8: 9b:92:2c:83:6f:82:76:35:f9:38:85:dc:26:f6:53:56:6a:3c: 95:b2:3a:c5:08:1f:6a:58:db:7b:b6:f8:55:37:14:7d:0c:7e: bf:82:1b:2b:1b:f2:d4:f2:f1:30:e6:46:72:f6:b2:91:a5:53: 0a:83:bf:98:85:ec:f2:74:7d:4b:64:22:11:b1:29:9e:59:dd: f3:ad:a0:9d:d7:71:f5:3d:fd:6b:41:46:91:84:e8:69:35:6c: f0:3b:7c:6e:e8:e2:52:d2:b4:c7:33:23:38:f3:bf:f6:27:bf: 7f:be:9a:32:24:ee:ca:b7:8c:f0:8c:67:8d:9b:da:c6:59:81: f6:2a:3d:18:80:ad:ca:29:99:98:99:fb:c2:0a:e2:de:ce:0b: f0:f7:2f:ff:e1:b1:6f:dc:13:84:8f:03:3f:0f:af:5e:6a:e7: ee:1c:b1:31:c0:ea:97:2c:d7:8d:71:64:e4:1e:da:8f:d1:c2: a0:b8:1d:1b:c9:1c:72:5c:cf:5b:46:5f:f3:1d:10:8a:26:8b: b7:b7:6d:4f:68:7f:e8:62:b3:50:ca:04:6e:9f:5d:cf:76:c8: cd:8e:a1:20 -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgIUX9/T+AmIccr9KWAJ2LIPEyAsAsswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTkzMVoX DTI3MDUwMjAwMDQzMVowMzExMC8GA1UEAxMoNjY4MkNGRjdGODBFNDU4NzEzM0E0 RkZFRkMxNjNCMTQxNzc0MURDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALpI9sBvsAOMfweNT47SDZvhd7/ypTWDwsC3LlZEj6aWekZGl01kSdF1h3Ts z6xAiVd0Nzkw7Fudq2UOtwAvjhX4B13Kc+act9QoXuchPWdAhmUIxMJDI/K7pgUF XArDSoUXwhaeMaDmdlhjkXXoSvxuUVR7lG+Ep5k9DQJfyy0ARGr6miUCttWMWE8i WxOut1k3Gs0PmDwOFvfvTqgU+RlQATPx+a6AqvL8AD3PeovSStYKdaLKBGuumSOh mKzg+6tzKklMfYm08NAnGF+b8KyJrwh/7aO3m0J3uVxH/43U/T/nZc9D4zI4TL6c 5XNh57WPG/1lH6PJMuA5Saq0QJECAwEAAaOCAuAwggLcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGaCz/f4DkWHEzpP/vwWOxQXdB3GMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFlNmE3ZTQ2LWI2YWQtNGE3ZC1iOTMwLTFhYjBiZjAyZGQ1ZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xZTZhN2U0 Ni1iNmFkLTRhN2QtYjkzMC0xYWIwYmYwMmRkNWQvMC82NjgyQ0ZGN0Y4MEU0NTg3 MTMzQTRGRkVGQzE2M0IxNDE3NzQxREM2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAe AwQCZ2WIAwQEdRQwAwQEykFwAwQFypiAAwQBy1mUMA0EAgACMAcDBQAkAe4AMA0G CSqGSIb3DQEBCwUAA4IBAQAFMxU7Xf/i236hA+KiMOKENAPYGDHIAiuQJGOTXx7A I+E0k6ibkiyDb4J2Nfk4hdwm9lNWajyVsjrFCB9qWNt7tvhVNxR9DH6/ghsrG/LU 8vEw5kZy9rKRpVMKg7+YhezydH1LZCIRsSmeWd3zraCd13H1Pf1rQUaRhOhpNWzw O3xu6OJS0rTHMyM487/2J79/vpoyJO7Kt4zwjGeNm9rGWYH2Kj0YgK3KKZmYmfvC CuLezgvw9y//4bFv3BOEjwM/D69eaufuHLExwOqXLNeNcWTkHtqP0cKguB0byRxy XM9bRl/zHRCKJou3t21PaH/oYrNQygRun13PdsjNjqEg -----END CERTIFICATE-----Generated at Tue May 12 22:02:45 2026 by rpki-client