$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.cer File: 68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.cer (raw, json) Hash identifier: IhydbBVWdDRBGFVUM0tls5zRayVO88KldIGQEuoGhxw= Subject key identifier: 68:A9:0A:E5:AE:E3:5C:99:D4:20:F1:2A:C0:EE:4F:60:03:B7:D9:05 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0C415F4705158410ADFCC326E749D6FF68B13E2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:08:28 +0000 Certificate not after: Sun 02 May 2027 00:13:28 +0000 Subordinate resources: IP: 103.151.162.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:41:5f:47:05:15:84:10:ad:fc:c3:26:e7:49:d6:ff:68:b1:3e:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:08:28 2026 GMT Not After : May 2 00:13:28 2027 GMT Subject: CN=68A90AE5AEE35C99D420F12AC0EE4F6003B7D905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b6:61:a0:0d:07:98:c2:62:cc:62:73:e2:d3: 07:c7:96:69:36:44:27:d0:37:39:d1:14:03:b9:ec: bb:33:f7:4c:30:d2:72:42:15:c1:45:a2:54:0d:f6: b0:ff:19:27:10:a0:57:4a:d1:ad:3d:5e:63:f0:b7: 12:95:8d:fb:02:3d:76:a6:b7:e0:d2:1f:2d:2e:3d: 1b:8c:5f:b6:62:3e:7f:02:6f:6a:80:5b:76:31:b3: dd:89:e4:70:85:c4:40:63:9d:69:0f:09:c7:e2:33: 30:1c:66:af:98:85:52:b1:10:cb:48:d1:ea:0e:5e: dc:b0:ec:28:81:e2:50:36:12:12:dd:5a:6b:1f:ee: 27:58:bf:d9:9c:ae:c8:92:ae:8d:53:e6:6d:83:10: 89:e4:f2:68:4e:db:21:74:ca:76:ba:61:cf:96:5a: 72:8d:e2:a1:fc:31:f6:91:24:af:f7:48:0d:29:b8: e1:bf:ac:83:61:40:fc:bd:4a:a3:2f:51:68:2d:5b: 55:a7:0f:bf:c8:ad:1c:2d:d5:97:df:4c:1c:80:53: 21:77:9b:04:43:7c:2c:43:c8:8d:75:e5:8a:5e:b4: 87:6e:06:97:eb:9c:00:8f:37:f9:eb:7b:30:7e:69: 9e:ea:56:8a:40:2c:3c:5e:5c:70:f6:c4:75:49:10: 4c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:A9:0A:E5:AE:E3:5C:99:D4:20:F1:2A:C0:EE:4F:60:03:B7:D9:05 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.162.0/23 Signature Algorithm: sha256WithRSAEncryption 01:47:25:79:11:bd:c1:56:55:ae:eb:c9:e7:42:50:73:16:35: 1b:56:75:a5:fa:fa:c7:4b:e0:81:32:d1:fe:65:9b:5d:c5:58: 9b:11:a7:b0:10:96:ae:0a:1f:29:96:b0:17:62:22:e4:28:15: 01:03:88:71:3f:c5:6a:4e:a3:07:39:9a:37:61:04:02:88:bb: 14:80:8f:18:19:f9:5d:34:04:99:dd:11:66:18:38:3a:22:08: 9d:05:f3:b3:1b:2a:68:41:9a:5c:52:2a:bc:d5:0f:48:f5:e8: 4e:bc:47:5b:bf:63:fc:0c:06:41:c5:40:bc:aa:dc:d4:7b:60: c4:ca:b5:2e:93:75:63:03:1f:de:e0:9f:42:8b:1b:47:9d:0f: 30:0a:07:c5:76:a4:25:d2:ab:87:a2:8c:5c:e8:83:0b:a0:10: af:3d:0c:76:77:4c:ce:87:81:5a:b3:e4:3f:25:a6:4a:dd:65: c5:f0:e0:3c:0e:57:4b:5f:3c:0e:2e:a8:bf:2b:2e:0a:09:d6: 55:03:87:14:96:97:bc:b7:c9:74:6f:e5:74:79:26:32:7a:42: 07:cb:90:67:a0:74:c5:06:5f:8a:74:f1:22:84:4d:40:86:c4: 51:89:3c:3a:42:66:05:4a:fb:f3:35:53:5b:3a:45:a4:7f:a8: 56:05:ea:bf -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUDEFfRwUVhBCt/MMm50nW/2ixPiwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDgyOFoX DTI3MDUwMjAwMTMyOFowMzExMC8GA1UEAxMoNjhBOTBBRTVBRUUzNUM5OUQ0MjBG MTJBQzBFRTRGNjAwM0I3RDkwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL62YaANB5jCYsxic+LTB8eWaTZEJ9A3OdEUA7nsuzP3TDDSckIVwUWiVA32 sP8ZJxCgV0rRrT1eY/C3EpWN+wI9dqa34NIfLS49G4xftmI+fwJvaoBbdjGz3Ynk cIXEQGOdaQ8Jx+IzMBxmr5iFUrEQy0jR6g5e3LDsKIHiUDYSEt1aax/uJ1i/2Zyu yJKujVPmbYMQieTyaE7bIXTKdrphz5Zaco3iofwx9pEkr/dIDSm44b+sg2FA/L1K oy9RaC1bVacPv8itHC3Vl99MHIBTIXebBEN8LEPIjXXlil60h24Gl+ucAI83+et7 MH5pnupWikAsPF5ccPbEdUkQTA8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGipCuWu41yZ1CDxKsDuT2ADt9kFMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJjMTk4NzRjLWE2YjItNGIwYi05Y2M2LTU1OWE0ZTdjZDk1YS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yYzE5ODc0 Yy1hNmIyLTRiMGItOWNjNi01NTlhNGU3Y2Q5NWEvMC82OEE5MEFFNUFFRTM1Qzk5 RDQyMEYxMkFDMEVFNEY2MDAzQjdEOTA1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ5eiMA0GCSqGSIb3DQEBCwUAA4IBAQABRyV5Eb3BVlWu68nnQlBzFjUbVnWl +vrHS+CBMtH+ZZtdxVibEaewEJauCh8plrAXYiLkKBUBA4hxP8VqTqMHOZo3YQQC iLsUgI8YGfldNASZ3RFmGDg6IgidBfOzGypoQZpcUiq81Q9I9ehOvEdbv2P8DAZB xUC8qtzUe2DEyrUuk3VjAx/e4J9CixtHnQ8wCgfFdqQl0quHooxc6IMLoBCvPQx2 d0zOh4Fas+Q/JaZK3WXF8OA8DldLXzwOLqi/Ky4KCdZVA4cUlpe8t8l0b+V0eSYy ekIHy5BnoHTFBl+KdPEihE1AhsRRiTw6QmYFSvvzNVNbOkWkf6hWBeq/ -----END CERTIFICATE-----Generated at Tue May 12 22:04:04 2026 by rpki-client