$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.cer File: 68F007D710232A499BEB68E3E3BF5E7B1325A9DE.cer (raw, json) Hash identifier: cpzt6X5UQ6UF01eGRYFEcbJ/TFyX9gzWfPe1ekT5UlM= Subject key identifier: 68:F0:07:D7:10:23:2A:49:9B:EB:68:E3:E3:BF:5E:7B:13:25:A9:DE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3EBE4AE1C7E4E5F835A2764987EF5AD6DD1C0410 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:59:49 +0000 Certificate not after: Sun 02 May 2027 01:04:49 +0000 Subordinate resources: IP: 103.155.190.0/23 IP: 2406:7540::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:be:4a:e1:c7:e4:e5:f8:35:a2:76:49:87:ef:5a:d6:dd:1c:04:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:59:49 2026 GMT Not After : May 2 01:04:49 2027 GMT Subject: CN=68F007D710232A499BEB68E3E3BF5E7B1325A9DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:05:c0:bd:31:c4:f6:31:1b:ef:fc:58:2f:c7: 48:23:6b:a4:32:6e:ca:11:25:cb:c6:dd:c4:6a:18: 48:2b:9f:c6:5e:a7:05:0c:d2:52:49:6c:d2:ef:2a: a0:f3:67:28:ac:dc:48:a1:24:cd:a5:b0:f2:71:42: 21:2d:b7:3f:27:28:52:96:ad:c6:b9:92:a4:a4:61: 07:36:06:04:b2:a9:1b:a6:ec:38:3d:c6:a6:52:d1: 46:a4:75:a6:df:fa:11:69:4e:99:6a:fb:bc:ed:9d: 05:18:37:9f:61:53:12:2c:36:62:63:bc:89:cc:2e: 03:42:34:0c:7c:8d:50:6b:0e:1a:7c:31:a6:34:d4: 35:dc:b9:22:c7:f6:23:18:49:7f:97:4c:42:ad:eb: 4c:99:17:42:58:81:7d:c0:58:29:c9:f3:54:35:e7: 91:3b:be:22:ac:9f:9e:ec:c5:ad:d1:c3:89:a8:41: e9:45:80:de:61:c1:dc:6f:f3:7f:3b:ad:90:ae:d3: d6:7d:72:b5:5b:f7:18:d9:16:a2:7b:f5:c8:ae:5a: ff:19:5a:a0:37:6a:87:27:fb:1a:96:55:9f:c2:bf: aa:c2:35:52:d3:b0:80:8e:77:6c:14:03:9d:30:90: b9:c5:f5:de:44:08:db:b5:ad:75:ab:00:bd:71:ff: a1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:F0:07:D7:10:23:2A:49:9B:EB:68:E3:E3:BF:5E:7B:13:25:A9:DE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.190.0/23 IPv6: 2406:7540::/32 Signature Algorithm: sha256WithRSAEncryption 1f:69:2e:f8:bc:8b:1b:67:d2:e3:cb:84:9c:a6:af:15:37:fb: ab:4c:80:4a:b4:26:08:c2:1f:86:2c:92:f7:7c:52:4f:38:72: 79:1b:15:10:fa:77:95:59:ef:0e:6a:72:8c:98:2d:37:d7:62: 07:c1:df:39:92:89:d6:59:9a:ad:2e:52:3f:45:61:a3:a9:84: 01:6c:25:95:44:f7:fa:97:f3:c4:45:97:ee:66:63:ea:39:61: 70:66:4f:0e:53:55:1e:26:1b:df:31:a3:d1:98:3a:06:1c:09: e7:b0:eb:1e:f3:0e:40:73:4d:2c:98:51:5f:8a:ee:56:91:98: c4:c3:b4:90:26:2b:10:4f:78:87:09:23:96:c9:49:1e:7a:69: a7:38:49:40:6f:0f:ee:c0:0b:6e:f9:86:44:a7:e9:ea:d1:7e: 98:53:80:6f:fb:48:d2:63:92:f2:80:7d:65:f4:09:65:d5:9a: 0e:cb:70:07:3b:52:f7:3d:6a:1a:fd:87:3c:7f:b0:c4:4a:e6: e0:f2:ec:73:a1:ae:7a:8d:08:b9:15:c8:a2:5e:49:b4:53:35: ed:80:8d:40:9f:fb:13:fc:93:79:a2:a2:8d:03:25:04:f2:22: d4:93:0e:ed:08:fe:3e:0f:4f:87:1d:c9:20:6f:43:88:32:d7: 0c:23:54:22 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUPr5K4cfk5fg1onZJh+9a1t0cBBAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTk0OVoX DTI3MDUwMjAxMDQ0OVowMzExMC8GA1UEAxMoNjhGMDA3RDcxMDIzMkE0OTlCRUI2 OEUzRTNCRjVFN0IxMzI1QTlERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALwFwL0xxPYxG+/8WC/HSCNrpDJuyhEly8bdxGoYSCufxl6nBQzSUkls0u8q oPNnKKzcSKEkzaWw8nFCIS23PycoUpatxrmSpKRhBzYGBLKpG6bsOD3GplLRRqR1 pt/6EWlOmWr7vO2dBRg3n2FTEiw2YmO8icwuA0I0DHyNUGsOGnwxpjTUNdy5Isf2 IxhJf5dMQq3rTJkXQliBfcBYKcnzVDXnkTu+IqyfnuzFrdHDiahB6UWA3mHB3G/z fzutkK7T1n1ytVv3GNkWonv1yK5a/xlaoDdqhyf7GpZVn8K/qsI1UtOwgI53bBQD nTCQucX13kQI27WtdasAvXH/oakCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGjwB9cQIypJm+to4+O/XnsTJaneMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc4MTljZGRmLTZkZDktNGQ5Yy1iNTM4LThiNzZiN2M5Y2U2MS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ODE5Y2Rk Zi02ZGQ5LTRkOWMtYjUzOC04Yjc2YjdjOWNlNjEvMC82OEYwMDdENzEwMjMyQTQ5 OUJFQjY4RTNFM0JGNUU3QjEzMjVBOURFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5u+MA0EAgACMAcDBQAkBnVAMA0GCSqGSIb3DQEBCwUAA4IBAQAfaS74vIsb Z9Ljy4Scpq8VN/urTIBKtCYIwh+GLJL3fFJPOHJ5GxUQ+neVWe8OanKMmC0312IH wd85konWWZqtLlI/RWGjqYQBbCWVRPf6l/PERZfuZmPqOWFwZk8OU1UeJhvfMaPR mDoGHAnnsOse8w5Ac00smFFfiu5WkZjEw7SQJisQT3iHCSOWyUkeemmnOElAbw/u wAtu+YZEp+nq0X6YU4Bv+0jSY5LygH1l9All1ZoOy3AHO1L3PWoa/Yc8f7DESubg 8uxzoa56jQi5FciiXkm0UzXtgI1An/sT/JN5oqKNAyUE8iLUkw7tCP4+D0+HHckg b0OIMtcMI1Qi -----END CERTIFICATE-----Generated at Wed May 13 00:34:15 2026 by rpki-client