$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer File: 67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer (raw, json) Hash identifier: U2neKJORPr/oOFLI5C+NEmnDlrduHGI0TFalnHPNWAg= Subject key identifier: 67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5B3DC1C923000AB5CE4B44B20E0D02C8906BCFD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:01:19 +0000 Certificate not after: Sun 02 May 2027 02:06:19 +0000 Subordinate resources: IP: 14.102.46.0/23 IP: 103.253.229.0/24 IP: 2001:df3:1840::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:3d:c1:c9:23:00:0a:b5:ce:4b:44:b2:0e:0d:02:c8:90:6b:cf:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:01:19 2026 GMT Not After : May 2 02:06:19 2027 GMT Subject: CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:48:7a:b3:42:b1:ff:30:a3:99:d1:2d:77:72: de:0a:3f:32:b9:5d:23:d3:54:fe:a2:33:0a:f5:fd: c5:ba:db:aa:26:4e:af:d4:78:e1:be:22:6b:a2:34: eb:2a:d0:5b:80:f4:cf:41:f5:b1:37:14:70:5b:15: 8e:da:4c:3a:eb:7d:66:79:3f:66:13:34:8a:a2:b8: 5c:e1:81:17:3d:63:0c:ea:26:23:5a:82:e7:5c:84: 87:f7:a1:a3:8d:97:76:58:12:4e:a8:74:d8:70:9d: 5e:e8:cf:19:aa:5b:5d:5b:2a:98:ce:a0:2b:4f:2b: 15:da:cd:f7:59:b9:80:75:5a:3b:7d:7c:76:a0:f0: 40:63:5e:aa:75:4b:75:ac:72:8b:3f:f8:f8:d1:df: 07:a0:b3:ae:58:fb:99:21:b4:d9:0b:b9:c1:d8:27: 6e:de:43:35:73:dd:a2:00:61:1f:a9:55:8a:ed:25: f9:b3:d1:87:20:59:b4:75:53:39:d1:f3:80:16:3b: 02:fc:8a:c4:64:a4:d5:c6:95:d0:26:ec:2e:e9:45: 42:b6:d5:ae:a5:27:7c:81:6a:11:17:9e:b4:19:7f: b9:aa:9d:5d:a4:4a:47:aa:76:b6:da:1a:32:fc:85: 50:e6:67:bd:50:1b:88:89:e1:c2:70:1e:99:4f:9e: f2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.46.0/23 103.253.229.0/24 IPv6: 2001:df3:1840::/48 Signature Algorithm: sha256WithRSAEncryption 40:76:3e:0f:a2:6c:18:1c:f5:33:f8:ef:8d:34:6a:2e:80:40: 4d:c1:52:b5:ba:af:50:4c:4d:cf:71:95:27:2b:a5:97:80:98: 24:83:11:71:00:2b:0a:f5:9d:e5:04:65:84:1d:5b:4b:18:f7: a1:d4:2c:c7:02:d3:8e:98:1e:fa:78:9e:8a:8e:a0:15:8c:95: d7:c9:12:5d:e7:a8:f4:46:83:6b:5b:10:47:dd:0c:7f:23:a1: 40:31:91:73:19:3f:80:82:a3:e5:8e:2d:5a:06:72:b7:1c:c3: 24:53:7b:c6:88:fa:71:64:cd:cf:9a:77:ed:c0:99:b0:c0:42: 26:36:44:79:0a:a9:57:c3:8a:ef:9b:00:17:c9:07:86:ff:cd: e4:56:5f:44:2c:0c:e9:7c:cf:f4:87:03:ae:3f:68:aa:dc:73: 49:49:0f:dd:0a:52:ae:62:c5:fb:6d:76:37:3d:eb:28:23:74: f8:41:2e:47:55:0e:eb:89:d4:2a:36:42:9e:41:ee:50:70:a1: 27:e9:58:36:e2:92:ef:31:a5:94:c8:ce:18:6b:e4:34:49:be: cb:27:46:dd:48:e3:4a:9b:7e:5a:6e:46:ba:c8:05:04:82:63: fa:f7:4d:d3:28:81:67:1d:f8:8c:f2:ca:e6:d0:01:3c:86:94: d2:5c:17:ef -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUWz3BySMACrXOS0SyDg0CyJBrz9IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDExOVoX DTI3MDUwMjAyMDYxOVowMzExMC8GA1UEAxMoNjdBRDVFQTNBRTlFQ0IxQkI0NEFB MTAwOEQ3MDQwQkUwMjYxM0UwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9IerNCsf8wo5nRLXdy3go/MrldI9NU/qIzCvX9xbrbqiZOr9R44b4ia6I0 6yrQW4D0z0H1sTcUcFsVjtpMOut9Znk/ZhM0iqK4XOGBFz1jDOomI1qC51yEh/eh o42XdlgSTqh02HCdXujPGapbXVsqmM6gK08rFdrN91m5gHVaO318dqDwQGNeqnVL daxyiz/4+NHfB6Czrlj7mSG02Qu5wdgnbt5DNXPdogBhH6lViu0l+bPRhyBZtHVT OdHzgBY7AvyKxGSk1caV0CbsLulFQrbVrqUnfIFqEReetBl/uaqdXaRKR6p2ttoa MvyFUOZnvVAbiInhwnAemU+e8i8CAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGetXqOunssbtEqhAI1wQL4CYT4AMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q3ZDE1ZDUzLWE0YjQtNDQzNS1hMWRhLTUyZDAyMTJlZjMzZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kN2QxNWQ1 My1hNGI0LTQ0MzUtYTFkYS01MmQwMjEyZWYzM2QvMC82N0FENUVBM0FFOUVDQjFC QjQ0QUExMDA4RDcwNDBCRTAyNjEzRTAwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQBDmYuAwQAZ/3lMA8EAgACMAkDBwAgAQ3zGEAwDQYJKoZIhvcNAQELBQADggEB AEB2Pg+ibBgc9TP47400ai6AQE3BUrW6r1BMTc9xlScrpZeAmCSDEXEAKwr1neUE ZYQdW0sY96HULMcC046YHvp4noqOoBWMldfJEl3nqPRGg2tbEEfdDH8joUAxkXMZ P4CCo+WOLVoGcrccwyRTe8aI+nFkzc+ad+3AmbDAQiY2RHkKqVfDiu+bABfJB4b/ zeRWX0QsDOl8z/SHA64/aKrcc0lJD90KUq5ixfttdjc96ygjdPhBLkdVDuuJ1Co2 Qp5B7lBwoSfpWDbiku8xpZTIzhhr5DRJvssnRt1I40qbflpuRrrIBQSCY/r3TdMo gWcd+IzyyubQATyGlNJcF+8= -----END CERTIFICATE-----Generated at Tue May 12 22:32:48 2026 by rpki-client