$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer File: 691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer (raw, json) Hash identifier: jiLY1q8EgPmb99cPfWTREALEoZPWvI2LzFezL1nWBO4= Subject key identifier: 69:1B:A9:D2:8B:A9:B2:06:7D:A7:60:6F:F4:B5:AD:03:1F:0B:58:EC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 63102EF79219E5089C907EDEF0F89A381CFAAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:20:14 +0000 Certificate not after: Sun 02 May 2027 01:25:14 +0000 Subordinate resources: IP: 103.147.220.0/23 IP: 2405:c1c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:10:2e:f7:92:19:e5:08:9c:90:7e:de:f0:f8:9a:38:1c:fa:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:20:14 2026 GMT Not After : May 2 01:25:14 2027 GMT Subject: CN=691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b0:03:c4:2b:29:6e:dd:f9:3a:db:a4:1c:8e: 5e:39:5a:84:c1:1e:19:1a:ef:86:4e:ac:89:5b:8f: 25:b1:21:8b:7d:3b:00:5a:92:df:c9:4c:95:2a:1a: 60:e6:00:d8:7b:0b:2e:be:71:d9:40:8e:3b:2e:93: 6a:61:b3:1e:ab:cf:c1:e5:9c:83:35:d3:32:54:55: 75:cb:37:48:fb:58:cc:be:54:2c:c3:b0:09:ca:c4: 66:26:8a:0c:18:91:f8:63:7c:45:e5:b9:3f:06:3a: d2:8c:5c:a7:28:ef:d0:1a:da:89:3e:36:70:d0:39: 5d:d8:b2:de:bd:a6:8f:bf:e8:7e:35:49:46:24:3b: 3c:58:01:a6:24:8c:66:2a:c5:2a:f0:be:e7:39:9c: e5:fa:2c:15:a7:58:88:19:40:97:39:83:30:17:d6: cf:77:2e:ed:b8:08:d8:11:a9:ed:c7:40:2a:ad:10: d9:bf:37:fd:85:dd:a8:fa:7c:93:04:61:a3:14:c0: 72:f6:ea:1f:db:04:d5:bc:82:b2:c9:e8:24:68:4b: 62:93:c0:41:f7:0c:f6:d2:0a:bb:ef:39:7a:4c:3f: 2f:dd:63:08:ba:03:aa:6f:cb:a7:93:c5:b1:cc:67: 2d:c5:a7:e1:0b:76:a0:3b:1b:43:1c:4b:b2:7c:b7: e9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:1B:A9:D2:8B:A9:B2:06:7D:A7:60:6F:F4:B5:AD:03:1F:0B:58:EC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.220.0/23 IPv6: 2405:c1c0::/32 Signature Algorithm: sha256WithRSAEncryption 54:54:e4:56:44:51:bb:fc:c6:6e:73:9e:3e:6f:0b:f5:ba:bf: 29:b9:1e:5a:2e:32:dc:75:a9:8a:3b:0c:a5:3b:4a:f4:71:3b: 01:5b:67:33:ac:aa:4e:c5:5b:8f:91:bc:aa:04:38:4a:f4:4c: b4:c7:60:4a:f9:62:aa:c1:66:0b:74:7d:27:b5:63:46:2c:86: f4:cd:17:55:f6:f0:80:f1:0a:7d:8c:c5:4c:46:18:db:69:40: eb:89:ea:ff:8e:52:fe:e6:ca:a5:be:11:68:0c:b9:fa:cd:31: c1:14:11:74:68:d1:87:a0:26:6d:fe:7d:9c:a9:0d:b6:71:10: 3a:96:58:8a:07:75:8b:67:76:fb:15:4f:a1:d5:e7:f1:fc:ce: da:c2:43:0c:d7:fa:73:f1:73:43:57:73:98:89:12:99:9e:28: e3:85:e8:2f:0e:f9:1c:6c:d4:bb:d6:e0:35:e8:36:62:c9:45: c3:da:a1:64:88:fa:eb:8b:c1:94:e3:2a:68:bb:0d:df:6b:10: ac:e1:ac:d8:42:37:eb:e7:97:22:cb:2a:77:a5:b1:cf:78:5a: 5b:05:49:fc:54:c0:6d:f2:b4:aa:c7:e8:e7:f7:d1:5c:47:3f: 81:12:fc:14:b0:f4:83:99:65:da:86:4f:97:83:e3:79:43:e6: 03:9a:e9:6b -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgITYxAu95IZ5QickH7e8PiaOBz6rzANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKDQxOUE4NUNERjhB NDMwNTE2OTQ2ODY5RDFDNDkyMDM3RDZCQzZFOUUwHhcNMjYwNTAzMDEyMDE0WhcN MjcwNTAyMDEyNTE0WjAzMTEwLwYDVQQDEyg2OTFCQTlEMjhCQTlCMjA2N0RBNzYw NkZGNEI1QUQwMzFGMEI1OEVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrADxCspbt35OtukHI5eOVqEwR4ZGu+GTqyJW48lsSGLfTsAWpLfyUyVKhpg 5gDYewsuvnHZQI47LpNqYbMeq8/B5ZyDNdMyVFV1yzdI+1jMvlQsw7AJysRmJooM GJH4Y3xF5bk/BjrSjFynKO/QGtqJPjZw0Dld2LLevaaPv+h+NUlGJDs8WAGmJIxm KsUq8L7nOZzl+iwVp1iIGUCXOYMwF9bPdy7tuAjYEantx0AqrRDZvzf9hd2o+nyT BGGjFMBy9uof2wTVvIKyyegkaEtik8BB9wz20gq77zl6TD8v3WMIugOqb8unk8Wx zGctxafhC3agOxtDHEuyfLfpCwIDAQABo4ICyDCCAsQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUaRup0oupsgZ9p2Bv9LWtAx8LWOwwHwYDVR0jBBgwFoAUQZqF zfikMFFpRoadHEkgN9a8bp4wDgYDVR0PAQH/BAQDAgEGMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xLzQx OUE4NUNERjhBNDMwNTE2OTQ2ODY5RDFDNDkyMDM3RDZCQzZFOUUuY3JsMH4GCCsG AQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9y ZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FacUZ6 ZmlrTUZGcFJvYWRIRWtnTjlhOGJwNC5jZXIwggEsBggrBgEFBQcBCwSCAR4wggEa MFUGCCsGAQUFBzAFhklyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTVjMzIxZWItMTVmOC00NjQ2LWIwNTMtZjE5OWQ2ZmE3ZjUzLzAvMIGBBggrBgEF BQcwCoZ1cnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk1YzMyMWVi LTE1ZjgtNDY0Ni1iMDUzLWYxOTlkNmZhN2Y1My8wLzY5MUJBOUQyOEJBOUIyMDY3 REE3NjA2RkY0QjVBRDAzMUYwQjU4RUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3Jwa2ktcnJkcC5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnk9wwDQQCAAIwBwMFACQFwcAwDQYJKoZIhvcNAQELBQADggEBAFRU5FZEUbv8 xm5znj5vC/W6vym5HlouMtx1qYo7DKU7SvRxOwFbZzOsqk7FW4+RvKoEOEr0TLTH YEr5YqrBZgt0fSe1Y0YshvTNF1X28IDxCn2MxUxGGNtpQOuJ6v+OUv7myqW+EWgM ufrNMcEUEXRo0YegJm3+fZypDbZxEDqWWIoHdYtndvsVT6HV5/H8ztrCQwzX+nPx c0NXc5iJEpmeKOOF6C8O+Rxs1LvW4DXoNmLJRcPaoWSI+uuLwZTjKmi7Dd9rEKzh rNhCN+vnlyLLKnelsc94WlsFSfxUwG3ytKrH6Of30VxHP4ES/BSw9IOZZdqGT5eD 43lD5gOa6Ws= -----END CERTIFICATE-----Generated at Tue May 12 22:10:12 2026 by rpki-client