$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer File: 697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer (raw, json) Hash identifier: vp88FPE4qjZsSxP6yGYAFDhrNbnF39pPYmFiVw1L5co= Subject key identifier: 69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 646A6F49F9690C69C8BBAF829F35CE27E8720931 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:09:31 +0000 Certificate not after: Sun 02 May 2027 02:14:31 +0000 Subordinate resources: IP: 103.20.184.0/22 IP: 2405:4100::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:6a:6f:49:f9:69:0c:69:c8:bb:af:82:9f:35:ce:27:e8:72:09:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:09:31 2026 GMT Not After : May 2 02:14:31 2027 GMT Subject: CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d8:24:0b:48:61:24:94:a9:f3:6a:4d:d9:5f: 22:a7:7c:0e:f0:85:88:70:e9:14:89:9c:db:e3:07: 2d:00:bf:62:98:d5:9e:35:c0:7c:2f:0d:4a:aa:42: 40:56:3e:e9:23:86:0f:9e:6b:a6:58:1c:64:be:1d: 2a:1e:2b:50:a3:78:15:d8:a2:40:f0:6a:15:65:30: 0e:00:30:eb:04:27:73:83:36:b4:43:dc:ff:22:fc: ac:d7:62:82:fe:09:7f:bd:96:01:7e:46:28:a6:36: 53:ae:4b:ad:fd:7e:c5:02:66:ce:5e:07:2c:d1:50: 1f:65:66:b9:9e:ad:20:b6:10:be:ca:d5:8e:2e:4a: f9:ec:3b:8b:55:fa:c8:02:80:45:3c:94:7d:8a:6b: 64:0f:a5:6e:42:31:63:07:c6:2a:89:6b:44:66:42: de:59:b5:80:73:1e:9e:ef:90:25:20:d0:87:f1:2a: 98:3f:b4:10:48:13:49:99:93:af:6d:8f:b7:be:1c: 6a:61:4f:88:07:93:25:da:0e:c2:4a:66:c8:d6:f8: 33:dd:0d:df:50:de:d8:c1:c4:b2:a4:b3:a7:f8:16: 8b:54:3d:04:91:74:58:3a:ee:51:17:af:9a:a0:1c: 8a:b3:2e:03:3e:64:92:28:e8:3a:50:11:7a:34:7b: e4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.184.0/22 IPv6: 2405:4100::/32 Signature Algorithm: sha256WithRSAEncryption 32:6b:a3:71:7b:b4:6e:ed:b1:d6:71:a3:50:fd:a8:16:be:6b: 6f:55:f6:b9:e0:a1:d4:45:7d:f8:8b:26:c0:36:9c:08:c8:3f: c5:47:80:ac:da:e4:cf:6d:b5:8e:12:5b:8f:35:de:d6:2f:56: 69:0e:20:dd:96:38:a3:d6:89:f2:d0:6b:b3:09:0e:99:1f:64: fc:a1:c6:8f:97:38:c7:dd:c7:22:a5:6c:46:b0:8f:e9:33:1f: 85:cf:46:b3:59:9e:34:37:64:13:2c:cc:d3:f1:67:09:a7:07: eb:20:7d:41:a9:c7:db:2c:e4:fe:0c:e9:6e:9b:bf:f6:23:18: 9c:ea:7a:da:2c:5e:97:51:df:8c:c8:66:fc:df:81:95:48:04: 77:be:a9:29:a0:77:66:0e:73:04:25:23:0f:ce:37:5d:35:b2: 19:66:0c:ff:0a:37:28:13:b1:da:af:06:ef:ca:6a:d6:50:43: 0c:0b:d2:6c:46:4a:2d:ce:72:43:0c:31:b8:51:37:b7:28:a9: b6:25:73:63:d1:1b:5c:84:6c:84:47:35:86:99:e0:8e:99:e8: 38:69:80:10:79:21:14:e6:a1:91:f7:df:6a:c0:bc:04:02:31: 68:60:91:9e:b0:8d:c2:1d:6d:b6:97:ce:f4:8c:83:d1:b4:64: 5b:f5:3b:46 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUZGpvSflpDGnIu6+CnzXOJ+hyCTEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDkzMVoX DTI3MDUwMjAyMTQzMVowMzExMC8GA1UEAxMoNjk3QjBDOUUzNjdFOTNGNDJBNjY5 NUQ5OEZCNkEwRjVGMTg2MzYzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANjYJAtIYSSUqfNqTdlfIqd8DvCFiHDpFImc2+MHLQC/YpjVnjXAfC8NSqpC QFY+6SOGD55rplgcZL4dKh4rUKN4FdiiQPBqFWUwDgAw6wQnc4M2tEPc/yL8rNdi gv4Jf72WAX5GKKY2U65Lrf1+xQJmzl4HLNFQH2VmuZ6tILYQvsrVji5K+ew7i1X6 yAKARTyUfYprZA+lbkIxYwfGKolrRGZC3lm1gHMenu+QJSDQh/EqmD+0EEgTSZmT r22Pt74camFPiAeTJdoOwkpmyNb4M90N31De2MHEsqSzp/gWi1Q9BJF0WDruURev mqAcirMuAz5kkijoOlARejR75CsCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGl7DJ42fpP0KmaV2Y+2oPXxhjY6MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2UwOTczYmViLTY2YmEtNDhiYy05Mzc0LTcyZDdmYjg5YzVhMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lMDk3M2Jl Yi02NmJhLTQ4YmMtOTM3NC03MmQ3ZmI4OWM1YTMvMC82OTdCMEM5RTM2N0U5M0Y0 MkE2Njk1RDk4RkI2QTBGNUYxODYzNjNBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZxS4MA0EAgACMAcDBQAkBUEAMA0GCSqGSIb3DQEBCwUAA4IBAQAya6Nxe7Ru 7bHWcaNQ/agWvmtvVfa54KHURX34iybANpwIyD/FR4Cs2uTPbbWOEluPNd7WL1Zp DiDdljij1ony0GuzCQ6ZH2T8ocaPlzjH3ccipWxGsI/pMx+Fz0azWZ40N2QTLMzT 8WcJpwfrIH1BqcfbLOT+DOlum7/2Ixic6nraLF6XUd+MyGb834GVSAR3vqkpoHdm DnMEJSMPzjddNbIZZgz/CjcoE7HarwbvymrWUEMMC9JsRkotznJDDDG4UTe3KKm2 JXNj0RtchGyERzWGmeCOmeg4aYAQeSEU5qGR999qwLwEAjFoYJGesI3CHW22l870 jIPRtGRb9TtG -----END CERTIFICATE-----Generated at Tue May 12 22:02:51 2026 by rpki-client