$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer File: 67239F5E47D123019D26807163E6542441401507.cer (raw, json) Hash identifier: buIt6i3FhwwJeNG22VUSGn8fYY6yg+KP8bKkYLIGZ+Q= Subject key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 687C7A0819E31B3696BB968316EB1E1048109563 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:48:11 +0000 Certificate not after: Sun 02 May 2027 01:53:11 +0000 Subordinate resources: IP: 103.4.0.0/22 IP: 116.90.160.0/20 IP: 122.128.24.0/21 IP: 150.107.108.0/22 IP: 202.43.160.0/20 IP: 202.78.192.0/20 IP: 203.134.232.0/21 IP: 203.173.92.0/22 IP: 2404:1b0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:7c:7a:08:19:e3:1b:36:96:bb:96:83:16:eb:1e:10:48:10:95:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:48:11 2026 GMT Not After : May 2 01:53:11 2027 GMT Subject: CN=67239F5E47D123019D26807163E6542441401507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:38:98:50:92:85:8a:83:a1:cc:55:ac:cc:d3: e1:00:2e:cb:91:f8:43:9e:6a:7d:92:99:5c:93:1b: e0:fc:e4:95:fa:7b:03:8f:8e:f6:4e:64:df:04:6c: 4c:17:db:5e:c8:44:64:40:c4:d9:02:16:42:e7:15: 57:b3:5e:7a:3b:4b:d5:1f:41:8f:e3:56:00:69:e0: 7b:96:ab:27:1c:31:fc:41:68:70:ae:78:cc:eb:27: 61:57:88:de:90:91:7b:9e:49:2e:f2:f2:e7:ef:d6: 00:81:7c:13:8c:16:c2:0e:27:49:8d:b4:b2:d2:74: 54:de:27:6e:07:d8:dd:24:39:9e:e2:f4:c2:6e:c0: 4a:e4:c7:6c:58:b3:c9:0c:eb:17:d7:16:1a:44:4e: 06:1c:d3:83:0b:66:d6:d9:01:05:e7:34:b7:77:53: f2:7d:c6:fa:87:b3:08:3e:b1:b4:fd:a6:2a:2f:96: f6:dd:7e:bd:7b:6b:55:96:91:a7:be:49:23:4b:1b: 9d:3a:ca:c9:bd:4f:4f:2a:03:2f:0a:f9:25:cb:18: ab:1b:40:23:8f:cc:e4:33:48:32:fd:3f:38:0f:ed: 2c:57:4b:a6:d2:01:20:93:68:81:e9:fc:36:21:1f: ca:d6:f3:f4:fa:ff:b9:97:8a:9e:f4:e9:ef:a5:88: 2d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.0.0/22 116.90.160.0/20 122.128.24.0/21 150.107.108.0/22 202.43.160.0/20 202.78.192.0/20 203.134.232.0/21 203.173.92.0/22 IPv6: 2404:1b0::/32 Signature Algorithm: sha256WithRSAEncryption 09:0d:3a:59:19:e1:d9:0b:30:a8:2f:89:97:61:35:9b:7e:14: 23:92:77:3a:73:dc:d7:f1:c4:72:48:b6:1f:d6:0a:dd:94:f1: 0a:b2:8c:71:d1:c3:53:bd:4d:19:09:3a:07:49:db:5d:bd:21: 9e:1e:f8:89:9f:25:46:55:f8:85:8c:1c:a0:bf:66:65:ff:de: 92:20:49:c8:7e:8e:e2:b0:49:f2:ed:e1:33:62:bf:89:bb:cd: 74:96:95:aa:43:de:24:78:d1:71:9d:94:c2:24:57:cd:8f:ad: 79:4b:84:de:e2:5f:0a:3a:82:e6:af:9d:d6:b4:08:e7:b4:86: 00:d6:0c:a0:e3:fd:bc:5b:f2:ec:27:d1:8d:01:8a:23:b2:63: be:b0:f1:73:97:19:25:b7:28:9b:8c:40:fe:4c:1f:05:e7:35: 81:92:7a:1c:61:2d:f7:07:5b:64:dc:79:6a:01:a0:66:69:1d: c1:0b:81:ba:ef:e3:7d:f5:5f:4d:93:50:00:96:63:db:a6:e4: 19:4a:3b:6f:fe:2b:e1:9e:d4:ae:e7:e5:9c:42:37:90:b9:9e: 39:eb:22:2f:ee:28:c6:b3:b5:da:8c:c4:f1:a9:32:38:b3:bf: 9e:3a:da:36:91:4a:d6:5e:35:44:33:3d:fe:f9:c5:ab:57:e4: 5a:20:ed:c2 -----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgIUaHx6CBnjGzaWu5aDFuseEEgQlWMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDgxMVoX DTI3MDUwMjAxNTMxMVowMzExMC8GA1UEAxMoNjcyMzlGNUU0N0QxMjMwMTlEMjY4 MDcxNjNFNjU0MjQ0MTQwMTUwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALg4mFCShYqDocxVrMzT4QAuy5H4Q55qfZKZXJMb4Pzklfp7A4+O9k5k3wRs TBfbXshEZEDE2QIWQucVV7NeejtL1R9Bj+NWAGnge5arJxwx/EFocK54zOsnYVeI 3pCRe55JLvLy5+/WAIF8E4wWwg4nSY20stJ0VN4nbgfY3SQ5nuL0wm7ASuTHbFiz yQzrF9cWGkROBhzTgwtm1tkBBec0t3dT8n3G+oezCD6xtP2mKi+W9t1+vXtrVZaR p75JI0sbnTrKyb1PTyoDLwr5JcsYqxtAI4/M5DNIMv0/OA/tLFdLptIBIJNogen8 NiEfytbz9Pr/uZeKnvTp76WILbkCAwEAAaOCAvIwggLuMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGcjn15H0SMBnSaAcWPmVCRBQBUHMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2MyODM2NzYzLTEyYjYtNGQ4Zi1hZDBiLTRjZDViNjE5NTllZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jMjgzNjc2 My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC82NzIzOUY1RTQ3RDEyMzAx OUQyNjgwNzE2M0U2NTQyNDQxNDAxNTA3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAw AwQCZwQAAwQEdFqgAwQDeoAYAwQClmtsAwQEyiugAwQEyk7AAwQDy4boAwQCy61c MA0EAgACMAcDBQAkBAGwMA0GCSqGSIb3DQEBCwUAA4IBAQAJDTpZGeHZCzCoL4mX YTWbfhQjknc6c9zX8cRySLYf1grdlPEKsoxx0cNTvU0ZCToHSdtdvSGeHviJnyVG VfiFjBygv2Zl/96SIEnIfo7isEny7eEzYr+Ju810lpWqQ94keNFxnZTCJFfNj615 S4Te4l8KOoLmr53WtAjntIYA1gyg4/28W/LsJ9GNAYojsmO+sPFzlxkltyibjED+ TB8F5zWBknocYS33B1tk3HlqAaBmaR3BC4G67+N99V9Nk1AAlmPbpuQZSjtv/ivh ntSu5+WcQjeQuZ456yIv7ijGs7XajMTxqTI4s7+eOto2kUrWXjVEMz3++cWrV+Ra IO3C -----END CERTIFICATE-----Generated at Wed May 13 02:59:54 2026 by rpki-client