$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer File: 69815E9AA14BB02AA62080FF68CEED525920B7CB.cer (raw, json) Hash identifier: 9stST19UOu+LoUhEcA45cl/jkuzIIQcqMK6nldl/4i4= Subject key identifier: 69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0EB3C55B62DD633292ACC668C28E98A046519335 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:46:22 +0000 Certificate not after: Sat 01 May 2027 23:51:22 +0000 Subordinate resources: IP: 103.158.194.0/23 IP: 2001:df5:6280::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b3:c5:5b:62:dd:63:32:92:ac:c6:68:c2:8e:98:a0:46:51:93:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:46:22 2026 GMT Not After : May 1 23:51:22 2027 GMT Subject: CN=69815E9AA14BB02AA62080FF68CEED525920B7CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ec:88:9c:8c:40:5c:d5:70:18:4c:66:96:e2: 2d:4b:88:39:ea:aa:ba:1d:d8:76:a1:36:15:40:38: 22:d4:8f:05:9f:b5:20:4e:80:d9:fe:fc:fa:8d:ff: ee:3b:fc:c8:e9:b3:28:94:60:af:be:f2:60:c6:2f: f1:68:76:19:b6:db:57:be:a3:a5:c8:b8:73:d6:a6: e3:92:ac:3d:3c:53:ae:af:1f:85:c1:70:53:ae:0a: 8c:f1:30:0d:11:2f:ec:93:c3:88:db:30:58:9e:da: 75:c8:34:ea:99:d3:09:59:53:cf:b3:45:78:2a:67: af:df:97:4a:d7:11:ca:ae:54:4a:a2:db:dc:66:ce: e2:89:14:ab:a4:67:bc:d8:73:00:f1:f2:66:3a:6c: 76:c3:d5:04:7c:ab:d8:61:1e:52:36:7e:13:08:b3: 41:2b:ae:5e:92:3e:63:98:f2:3b:32:2e:26:e9:a6: 08:20:e8:97:4d:f8:1a:0a:f2:20:87:b1:7a:44:65: 50:de:db:d3:c2:56:bf:67:ae:20:1f:cb:b2:93:e1: 70:86:9a:83:b2:aa:70:f6:27:9c:d1:2d:f2:3b:1e: a3:af:73:a2:59:a3:60:0d:a0:8b:2c:da:ca:d2:53: 85:53:3e:bb:e7:34:f0:b8:69:97:37:92:f3:35:0c: 2d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.194.0/23 IPv6: 2001:df5:6280::/48 Signature Algorithm: sha256WithRSAEncryption a3:ed:fb:4f:2e:63:56:32:ca:1d:e2:a2:87:b4:38:49:23:21: 8b:6d:90:d9:b4:e8:b3:92:fe:76:27:97:de:d7:42:17:fa:2d: c2:b8:07:76:52:57:e9:3e:d5:cb:72:85:00:cb:33:f7:a2:d0: 23:fb:e6:5c:02:11:ef:45:e2:06:84:ed:79:07:f4:60:d2:d0: fd:c0:5f:67:0e:f1:c7:75:88:50:9e:5b:e4:fa:83:2f:2c:8b: 42:7e:2d:56:4f:b3:4a:f4:8a:7e:54:aa:8a:6a:0d:68:be:78: f9:bf:ae:76:58:75:e4:c4:d4:e6:d0:d4:a9:8d:3f:84:38:64: a4:07:2e:75:74:51:63:fc:bb:07:63:4b:bf:5c:5e:27:aa:b2: c1:eb:71:d8:85:2b:fb:2e:ef:41:d3:66:1c:ca:8f:03:3a:67: 95:02:ac:fe:c8:88:bf:c2:22:35:60:83:85:33:84:90:88:e4: 51:0a:e8:df:7c:2d:d8:af:5a:4a:61:79:9c:84:74:d4:b6:72: 63:d8:bd:8a:62:de:bc:9c:02:9f:db:7b:6e:0b:9f:2f:4d:ae: 45:85:c6:7b:2f:e0:29:73:f6:bf:ea:98:49:22:31:44:16:70: 7d:c8:11:3c:b7:0a:c3:f3:30:cc:85:11:40:80:fc:fd:8c:52: 09:6e:46:37 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUDrPFW2LdYzKSrMZowo6YoEZRkzUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDYyMloX DTI3MDUwMTIzNTEyMlowMzExMC8GA1UEAxMoNjk4MTVFOUFBMTRCQjAyQUE2MjA4 MEZGNjhDRUVENTI1OTIwQjdDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIrsiJyMQFzVcBhMZpbiLUuIOeqquh3YdqE2FUA4ItSPBZ+1IE6A2f78+o3/ 7jv8yOmzKJRgr77yYMYv8Wh2GbbbV76jpci4c9am45KsPTxTrq8fhcFwU64KjPEw DREv7JPDiNswWJ7adcg06pnTCVlTz7NFeCpnr9+XStcRyq5USqLb3GbO4okUq6Rn vNhzAPHyZjpsdsPVBHyr2GEeUjZ+EwizQSuuXpI+Y5jyOzIuJummCCDol034Ggry IIexekRlUN7b08JWv2euIB/LspPhcIaag7KqcPYnnNEt8jseo69zolmjYA2giyza ytJThVM+u+c08LhplzeS8zUMLf8CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGmBXpqhS7AqpiCA/2jO7VJZILfLMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBhNDZiZGFkLWYxMzAtNDhhOS04NTM0LTU0YmEzZThlZDYxZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wYTQ2YmRh ZC1mMTMwLTQ4YTktODUzNC01NGJhM2U4ZWQ2MWYvMC82OTgxNUU5QUExNEJCMDJB QTYyMDgwRkY2OENFRUQ1MjU5MjBCN0NCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ57CMA8EAgACMAkDBwAgAQ31YoAwDQYJKoZIhvcNAQELBQADggEBAKPt+08u Y1Yyyh3iooe0OEkjIYttkNm06LOS/nYnl97XQhf6LcK4B3ZSV+k+1ctyhQDLM/ei 0CP75lwCEe9F4gaE7XkH9GDS0P3AX2cO8cd1iFCeW+T6gy8si0J+LVZPs0r0in5U qopqDWi+ePm/rnZYdeTE1ObQ1KmNP4Q4ZKQHLnV0UWP8uwdjS79cXieqssHrcdiF K/su70HTZhzKjwM6Z5UCrP7IiL/CIjVgg4UzhJCI5FEK6N98LdivWkpheZyEdNS2 cmPYvYpi3rycAp/be24Lny9NrkWFxnsv4Clz9r/qmEkiMUQWcH3IETy3CsPzMMyF EUCA/P2MUgluRjc= -----END CERTIFICATE-----Generated at Tue May 12 22:10:23 2026 by rpki-client