$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer File: 68A727878748F40EF62D744B06303F71A6B3F75C.cer (raw, json) Hash identifier: mCrkpIP3Bz/Es0fDDfKwtCKzJ1yai8uut9LG60S449A= Subject key identifier: 68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3562219B9D946DFC1B7BA587A275A382E6FA69CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:39:29 +0000 Certificate not after: Sun 02 May 2027 00:44:29 +0000 Subordinate resources: IP: 103.49.220.0/22 IP: 203.190.240.0/21 IP: 2402:a000::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:62:21:9b:9d:94:6d:fc:1b:7b:a5:87:a2:75:a3:82:e6:fa:69:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:39:29 2026 GMT Not After : May 2 00:44:29 2027 GMT Subject: CN=68A727878748F40EF62D744B06303F71A6B3F75C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7e:97:f4:58:fd:7c:c0:e9:3d:2d:ea:73:e6: 16:76:90:45:48:b2:73:94:2d:8c:34:f4:1d:59:19: de:47:8c:80:9b:7d:e2:a4:f4:f9:d6:0a:85:53:83: 38:e3:92:26:b5:56:88:2e:0e:a5:15:8c:8c:71:cc: 92:a8:6b:c0:b7:b7:b9:06:00:18:87:70:e4:c2:0f: bf:5b:f4:22:85:ed:2b:30:76:2c:ab:7c:db:d6:f6: b8:eb:70:db:92:46:9c:1e:2e:40:83:32:a9:89:70: 0b:6b:20:84:ff:e3:57:2d:38:e2:d7:c8:6b:d8:65: 19:6d:9b:33:fe:ee:c6:f0:f0:73:9d:15:4e:fd:6e: b5:99:15:8f:a3:a2:6e:c4:24:d7:4d:18:63:40:b6: 66:63:ac:a0:e6:8f:97:76:72:a8:f9:bf:65:00:0d: e2:30:5f:51:2a:82:a6:a6:22:43:45:19:3b:cf:3b: 4c:46:f8:fa:3c:62:3e:f7:ad:b5:da:0d:a7:5c:ce: b1:20:00:31:e4:83:73:9c:0d:be:64:b6:1c:75:c6: ad:69:53:b6:f9:e0:5b:b4:dd:f8:8c:88:9b:43:81: a4:00:b8:68:af:5a:b8:ec:2d:57:c7:da:4d:f7:78: 8e:22:e9:a4:b9:e5:98:20:d5:b5:24:e4:82:61:18: ce:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.49.220.0/22 203.190.240.0/21 IPv6: 2402:a000::/32 Signature Algorithm: sha256WithRSAEncryption 4c:f9:ff:3a:10:cd:78:c4:7f:0b:f2:b0:33:81:09:f3:1c:31: d7:e3:04:80:be:b1:40:ce:fc:5a:7f:2f:e8:e9:23:25:c0:16: 72:11:6e:25:f0:a7:d0:cc:11:36:c7:e6:d8:74:ba:49:dc:28: 15:b9:9d:73:86:1c:7b:4f:ec:f7:a2:17:0a:e7:e9:f5:96:06: fc:5b:61:48:57:46:a1:57:8b:ad:40:28:6b:d8:53:67:6a:ea: d3:97:40:da:d7:24:7c:9a:c9:e8:ae:e2:8d:5e:9c:c6:72:ad: 7f:f0:5e:c7:df:05:bc:07:2e:95:51:2d:d0:8b:bd:3d:ea:65: 42:b6:ff:42:55:de:89:3b:07:3e:39:28:f4:75:fa:dd:d7:8d: 31:98:37:a9:70:01:09:5c:99:91:e6:99:84:2d:88:6d:2c:d3: a1:a4:1d:86:d0:0e:ef:a5:00:7e:91:bd:6b:57:ca:8b:30:b7: 24:9f:05:ed:b4:0e:ef:a5:07:59:3c:9b:97:41:12:5d:d2:cc: 3f:50:1e:8b:b3:f3:d2:f6:90:65:f8:aa:f6:3e:0c:a1:5a:eb: ca:6b:02:b2:a5:0f:5b:ae:d4:5a:32:05:1c:65:25:bd:95:6b: 8b:82:9c:87:7f:14:84:4a:ee:4f:76:00:f4:b2:db:ea:72:52: 06:17:18:b4 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUNWIhm52Ubfwbe6WHonWjgub6ac4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzkyOVoX DTI3MDUwMjAwNDQyOVowMzExMC8GA1UEAxMoNjhBNzI3ODc4NzQ4RjQwRUY2MkQ3 NDRCMDYzMDNGNzFBNkIzRjc1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANh+l/RY/XzA6T0t6nPmFnaQRUiyc5QtjDT0HVkZ3keMgJt94qT0+dYKhVOD OOOSJrVWiC4OpRWMjHHMkqhrwLe3uQYAGIdw5MIPv1v0IoXtKzB2LKt829b2uOtw 25JGnB4uQIMyqYlwC2sghP/jVy044tfIa9hlGW2bM/7uxvDwc50VTv1utZkVj6Oi bsQk100YY0C2ZmOsoOaPl3ZyqPm/ZQAN4jBfUSqCpqYiQ0UZO887TEb4+jxiPvet tdoNp1zOsSAAMeSDc5wNvmS2HHXGrWlTtvngW7Td+IyIm0OBpAC4aK9auOwtV8fa Tfd4jiLppLnlmCDVtSTkgmEYzgUCAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGinJ4eHSPQO9i10SwYwP3Gms/dcMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzU5ZjAxM2Y5LWI0ZjctNDU4Yy1hYWM1LTA4MDQxYjNmNjVlNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81OWYwMTNm OS1iNGY3LTQ1OGMtYWFjNS0wODA0MWIzZjY1ZTYvMC82OEE3Mjc4Nzg3NDhGNDBF RjYyRDc0NEIwNjMwM0Y3MUE2QjNGNzVDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQCZzHcAwQDy77wMA0EAgACMAcDBQAkAqAAMA0GCSqGSIb3DQEBCwUAA4IBAQBM +f86EM14xH8L8rAzgQnzHDHX4wSAvrFAzvxafy/o6SMlwBZyEW4l8KfQzBE2x+bY dLpJ3CgVuZ1zhhx7T+z3ohcK5+n1lgb8W2FIV0ahV4utQChr2FNnaurTl0Da1yR8 msnoruKNXpzGcq1/8F7H3wW8By6VUS3Qi7096mVCtv9CVd6JOwc+OSj0dfrd140x mDepcAEJXJmR5pmELYhtLNOhpB2G0A7vpQB+kb1rV8qLMLcknwXttA7vpQdZPJuX QRJd0sw/UB6Ls/PS9pBl+Kr2PgyhWuvKawKypQ9brtRaMgUcZSW9lWuLgpyHfxSE Su5PdgD0stvqclIGFxi0 -----END CERTIFICATE-----Generated at Tue May 12 22:02:37 2026 by rpki-client