$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6793AC144F0FC8CA106AEDD0D4FE2409466E363F.cer File: 6793AC144F0FC8CA106AEDD0D4FE2409466E363F.cer (raw, json) Hash identifier: WPisRgyMFEueRhLnOS6iCQbmQcTXV+1o5U0F2RzQ3+E= Subject key identifier: 67:93:AC:14:4F:0F:C8:CA:10:6A:ED:D0:D4:FE:24:09:46:6E:36:3F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 52D40DFA2C17A3C03B58F2A32EF292D7AB178BAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/6793AC144F0FC8CA106AEDD0D4FE2409466E363F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:10:53 +0000 Certificate not after: Sun 02 May 2027 01:15:53 +0000 Subordinate resources: IP: 202.146.176.0/21 IP: 2404:4200::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d4:0d:fa:2c:17:a3:c0:3b:58:f2:a3:2e:f2:92:d7:ab:17:8b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:10:53 2026 GMT Not After : May 2 01:15:53 2027 GMT Subject: CN=6793AC144F0FC8CA106AEDD0D4FE2409466E363F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:75:31:f7:e5:ad:a0:51:77:e4:85:94:b4:a4: c2:56:c1:8a:fa:52:de:bc:7b:77:db:4d:55:6a:c6: 0a:22:c0:b7:e8:ae:06:a0:4e:48:bd:d5:52:dc:5c: 84:db:34:ef:a0:08:c6:7d:bd:f3:b3:bf:81:78:69: 6b:88:12:b2:53:3e:80:ef:27:5d:58:2d:37:9b:3e: a1:3b:c5:80:91:ba:2f:f3:71:4d:ac:56:7b:fb:83: 74:99:f8:5f:72:ca:5d:67:ac:a0:6c:2a:4e:fe:79: 19:d4:77:55:44:d9:2f:82:4d:8d:a1:46:e8:64:1f: af:27:0d:55:5a:f3:d2:4c:67:1b:b0:30:24:3a:d9: d5:ed:c3:0c:69:a8:06:1f:6c:3f:3d:03:44:7f:47: e8:41:aa:ff:c0:35:f8:e1:85:b6:7c:a6:a7:6d:3b: 5d:a7:b5:38:cb:bb:bf:56:a6:95:07:4f:d1:60:7f: 89:1a:46:77:d1:44:6c:85:ba:9c:a8:b5:9c:67:cd: ff:8c:63:b9:83:94:d5:69:86:01:76:20:a2:e7:55: a0:0b:4d:26:b3:f7:c6:06:53:72:25:83:a2:49:79: d9:d8:bc:f6:4d:ff:c7:9c:00:2d:80:1b:1f:ca:a3: 15:2a:89:ef:48:cb:52:7f:2b:26:14:1e:c2:30:28: a4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 67:93:AC:14:4F:0F:C8:CA:10:6A:ED:D0:D4:FE:24:09:46:6E:36:3F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/6793AC144F0FC8CA106AEDD0D4FE2409466E363F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.146.176.0/21 IPv6: 2404:4200::/32 Signature Algorithm: sha256WithRSAEncryption 9a:91:6d:dd:32:fa:af:b8:5a:5e:3e:f5:bd:e1:b9:48:13:8c: 7f:7d:05:f7:31:71:a8:17:26:43:68:66:4a:41:3a:c1:8d:8f: 62:da:7c:0d:b3:6e:85:cf:6a:70:da:2f:cc:52:3f:e4:1c:bf: ca:3e:a8:f5:c9:a0:cd:3e:57:dd:a8:45:c4:be:b2:b6:e5:41: 77:24:c6:71:26:91:53:ac:00:7a:89:0d:36:2a:6d:4c:e7:52: a7:78:56:81:74:01:ba:b5:f1:5d:22:41:96:82:2b:c8:40:75: 4e:b9:3c:8d:b1:03:16:a8:86:c2:91:92:e9:50:bb:8f:94:31: 9d:eb:90:80:91:0b:16:bf:0d:cc:57:ca:2b:5f:36:ee:a6:c7: 95:98:42:fa:12:e5:26:59:cc:19:ac:7f:72:a4:89:19:49:69: 7f:93:9b:27:8e:0a:0e:e5:f9:3f:32:25:a5:a1:01:b4:93:6a: b6:ec:b4:f9:71:25:ac:24:39:d8:40:b8:c0:47:dc:48:77:fd: 6d:83:89:1b:c2:b3:28:57:f2:84:72:a6:a6:7e:09:fd:e3:0a: 12:31:5c:f0:61:6e:71:52:f4:d6:14:2c:4a:b7:93:37:64:98: 7a:03:80:82:dd:22:80:b0:b7:cc:bb:ea:c5:ae:6d:cf:a7:e7: 19:53:45:bf -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUUtQN+iwXo8A7WPKjLvKS16sXi60wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTA1M1oX DTI3MDUwMjAxMTU1M1owMzExMC8GA1UEAxMoNjc5M0FDMTQ0RjBGQzhDQTEwNkFF REQwRDRGRTI0MDk0NjZFMzYzRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALV1MfflraBRd+SFlLSkwlbBivpS3rx7d9tNVWrGCiLAt+iuBqBOSL3VUtxc hNs076AIxn2987O/gXhpa4gSslM+gO8nXVgtN5s+oTvFgJG6L/NxTaxWe/uDdJn4 X3LKXWesoGwqTv55GdR3VUTZL4JNjaFG6GQfrycNVVrz0kxnG7AwJDrZ1e3DDGmo Bh9sPz0DRH9H6EGq/8A1+OGFtnymp207Xae1OMu7v1amlQdP0WB/iRpGd9FEbIW6 nKi1nGfN/4xjuYOU1WmGAXYgoudVoAtNJrP3xgZTciWDokl52di89k3/x5wALYAb H8qjFSqJ70jLUn8rJhQewjAopBcCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGeTrBRPD8jKEGrt0NT+JAlGbjY/MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg3Nzc1ZGNmLTI4M2YtNDNjNS1hZjYwLTA5ZTBkZWJhMDFhMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84Nzc3NWRj Zi0yODNmLTQzYzUtYWY2MC0wOWUwZGViYTAxYTIvMC82NzkzQUMxNDRGMEZDOENB MTA2QUVERDBENEZFMjQwOTQ2NkUzNjNGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQDypKwMA0EAgACMAcDBQAkBEIAMA0GCSqGSIb3DQEBCwUAA4IBAQCakW3dMvqv uFpePvW94blIE4x/fQX3MXGoFyZDaGZKQTrBjY9i2nwNs26Fz2pw2i/MUj/kHL/K Pqj1yaDNPlfdqEXEvrK25UF3JMZxJpFTrAB6iQ02Km1M51KneFaBdAG6tfFdIkGW givIQHVOuTyNsQMWqIbCkZLpULuPlDGd65CAkQsWvw3MV8orXzbupseVmEL6EuUm WcwZrH9ypIkZSWl/k5snjgoO5fk/MiWloQG0k2q27LT5cSWsJDnYQLjAR9xId/1t g4kbwrMoV/KEcqamfgn94woSMVzwYW5xUvTWFCxKt5M3ZJh6A4CC3SKAsLfMu+rF rm3Pp+cZU0W/ -----END CERTIFICATE-----Generated at Tue May 12 22:38:47 2026 by rpki-client