$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer File: 67869B177D646DD081563D36E6E9775C31473EE2.cer (raw, json) Hash identifier: G9rCYrAL56WsaO/E44kzJ+0M3OuNdD2ctCuOhdhvyuc= Subject key identifier: 67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 470A97C50D1A78E90EB8109BCDE6DE5BF7CE2875 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:51:17 +0000 Certificate not after: Sun 02 May 2027 00:56:17 +0000 Subordinate resources: IP: 103.107.248.0/22 IP: 117.74.120.0/21 IP: 2402:600::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:0a:97:c5:0d:1a:78:e9:0e:b8:10:9b:cd:e6:de:5b:f7:ce:28:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:51:17 2026 GMT Not After : May 2 00:56:17 2027 GMT Subject: CN=67869B177D646DD081563D36E6E9775C31473EE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b1:3d:be:92:9a:5f:df:81:58:1b:92:56:4f: 4b:d6:a9:6b:b1:69:99:27:26:75:87:f4:29:a4:cc: 94:7c:e1:80:1f:24:52:dd:d3:b8:93:63:dc:8e:ee: c6:23:50:e4:f6:15:50:f0:65:4a:c7:07:65:ef:86: 0b:f8:1a:dd:85:51:0b:94:5b:9e:f0:96:ee:b0:ff: 73:73:87:d0:f9:c5:79:19:44:6f:02:b2:d0:30:73: 3c:44:ed:87:5b:e9:4f:13:ff:d7:c2:18:82:10:69: 31:c4:10:f0:8a:ad:b1:64:89:00:3a:39:63:b6:72: 24:d6:12:86:3e:92:b7:a4:9a:ad:9f:24:d9:7e:b9: ac:96:fe:ff:87:ad:fc:11:f6:d2:5f:53:61:8b:ba: 4e:77:33:e6:ae:1f:51:cc:23:f5:e4:f9:fe:25:f4: bf:4a:a4:e1:4a:bb:35:87:36:ef:82:8d:aa:7c:6e: 0d:e8:94:ca:de:a3:70:34:62:64:57:53:9d:9a:c2: eb:77:92:69:27:95:65:6e:06:a7:bb:ae:32:18:d5: 60:99:40:d3:55:b0:5c:79:13:18:94:4a:63:32:17: 1c:55:6b:5e:68:a5:73:2f:24:f4:6e:e3:92:15:67: a4:d1:12:a2:88:bc:16:f8:f0:93:e3:24:93:7e:54: ff:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.248.0/22 117.74.120.0/21 IPv6: 2402:600::/32 Signature Algorithm: sha256WithRSAEncryption 8b:53:c1:07:e6:ab:1f:cf:da:75:e4:fc:df:02:49:27:4e:4b: 34:03:af:d6:a0:ab:d3:d8:6c:49:0b:81:33:4d:a9:a1:67:f6: a6:6d:88:5a:f9:24:29:56:bc:1e:96:67:13:19:82:ed:5b:21: e5:42:c1:e7:9a:d7:08:31:99:11:8e:f3:d1:56:84:e2:67:62: f5:b4:bc:1c:84:45:11:32:1b:a5:0f:8d:1e:61:06:6a:70:81: 0f:cf:97:f3:8c:b0:1a:e4:b9:d1:e9:56:07:22:1d:d1:df:22: 80:68:d6:44:15:4f:c1:c4:d8:c5:89:2f:b2:2b:f9:77:57:be: 59:cb:11:8e:56:16:15:12:2c:d3:a7:53:8c:24:8a:13:f6:ee: 2f:2e:81:a6:3c:d2:22:27:d0:39:12:d8:51:f9:87:7f:f8:a1: 11:36:59:09:0a:a1:77:0f:0c:34:ba:d2:13:ca:c4:20:74:0e: 7c:ca:43:3a:a8:c2:85:a8:ab:b9:9c:95:01:86:42:e9:08:04: f1:9d:57:4e:5e:cd:15:b5:d2:6c:b2:bd:c8:84:6a:d0:23:ab: 85:8c:68:90:c8:75:e6:6f:7c:57:93:f7:87:d5:6e:9b:0d:bd: 28:88:b6:69:bc:98:46:8f:a0:06:82:85:e2:63:66:8c:11:9f: 23:a1:06:71 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIURwqXxQ0aeOkOuBCbzebeW/fOKHUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTExN1oX DTI3MDUwMjAwNTYxN1owMzExMC8GA1UEAxMoNjc4NjlCMTc3RDY0NkREMDgxNTYz RDM2RTZFOTc3NUMzMTQ3M0VFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJmxPb6Sml/fgVgbklZPS9apa7FpmScmdYf0KaTMlHzhgB8kUt3TuJNj3I7u xiNQ5PYVUPBlSscHZe+GC/ga3YVRC5RbnvCW7rD/c3OH0PnFeRlEbwKy0DBzPETt h1vpTxP/18IYghBpMcQQ8IqtsWSJADo5Y7ZyJNYShj6St6SarZ8k2X65rJb+/4et /BH20l9TYYu6Tncz5q4fUcwj9eT5/iX0v0qk4Uq7NYc274KNqnxuDeiUyt6jcDRi ZFdTnZrC63eSaSeVZW4Gp7uuMhjVYJlA01WwXHkTGJRKYzIXHFVrXmilcy8k9G7j khVnpNESooi8Fvjwk+Mkk35U//cCAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGeGmxd9ZG3QgVY9Nubpd1wxRz7iMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZjNGM2NGE5LTM1MzctNGJjNy04NjEzLThlOTgxNjI5ZTRjYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82YzRjNjRh OS0zNTM3LTRiYzctODYxMy04ZTk4MTYyOWU0Y2EvMC82Nzg2OUIxNzdENjQ2REQw ODE1NjNEMzZFNkU5Nzc1QzMxNDczRUUyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQCZ2v4AwQDdUp4MA0EAgACMAcDBQAkAgYAMA0GCSqGSIb3DQEBCwUAA4IBAQCL U8EH5qsfz9p15PzfAkknTks0A6/WoKvT2GxJC4EzTamhZ/ambYha+SQpVrwelmcT GYLtWyHlQsHnmtcIMZkRjvPRVoTiZ2L1tLwchEURMhulD40eYQZqcIEPz5fzjLAa 5LnR6VYHIh3R3yKAaNZEFU/BxNjFiS+yK/l3V75ZyxGOVhYVEizTp1OMJIoT9u4v LoGmPNIiJ9A5EthR+Yd/+KERNlkJCqF3Dww0utITysQgdA58ykM6qMKFqKu5nJUB hkLpCATxnVdOXs0VtdJssr3IhGrQI6uFjGiQyHXmb3xXk/eH1W6bDb0oiLZpvJhG j6AGgoXiY2aMEZ8joQZx -----END CERTIFICATE-----Generated at Tue May 12 22:02:44 2026 by rpki-client