$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/69D1B06609905E16DB4C45F18E3E2558EE62EFC4.cer File: 69D1B06609905E16DB4C45F18E3E2558EE62EFC4.cer (raw, json) Hash identifier: isAD1QIMCmQNKfCgAtPh230wA00O+NJcDtoYwj4pV9U= Subject key identifier: 69:D1:B0:66:09:90:5E:16:DB:4C:45:F1:8E:3E:25:58:EE:62:EF:C4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6192D309A0B2A187A5BBE328818EEA4942BD8261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/69D1B06609905E16DB4C45F18E3E2558EE62EFC4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:43:54 +0000 Certificate not after: Sun 02 May 2027 00:48:54 +0000 Subordinate resources: IP: 2001:df3:c240::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:92:d3:09:a0:b2:a1:87:a5:bb:e3:28:81:8e:ea:49:42:bd:82:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:43:54 2026 GMT Not After : May 2 00:48:54 2027 GMT Subject: CN=69D1B06609905E16DB4C45F18E3E2558EE62EFC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:08:34:a5:cc:21:74:3c:1b:91:12:46:c9:2e: 2d:65:b2:bc:5d:cc:ea:0e:f2:20:6f:b2:23:ed:e1: ec:39:b0:f7:59:d4:d6:cf:61:94:8e:86:c7:28:d9: 64:e3:47:a0:c9:cb:02:8d:69:cc:d7:d8:ad:e9:e3: 86:08:04:a9:4b:84:99:a6:b0:1a:3c:4d:a6:1c:25: a4:8b:39:d4:ed:db:e6:3f:3e:64:72:e6:17:ee:76: 5a:08:fe:d8:aa:9a:a2:72:ff:8c:da:aa:57:d4:59: c0:c3:99:b1:ce:a7:fe:b4:cc:cf:0f:ca:ee:47:5f: 4b:32:47:aa:bd:21:7c:50:10:cb:8c:c9:68:e3:ab: 12:91:5d:aa:90:64:b9:0e:46:0d:71:04:42:11:2d: e6:17:2c:a2:af:25:c3:e7:76:2d:d6:5a:bc:43:4d: d6:fc:81:0f:43:28:19:cd:06:bd:58:80:2a:8a:3d: d1:4b:14:50:c1:1b:7f:c5:f1:a5:6d:5d:3d:e9:58: fa:d5:1e:8f:15:84:67:f0:09:5b:68:fe:9a:ae:9e: d7:0f:e3:46:22:d7:91:d6:40:75:dd:6d:e8:9c:86: e1:85:41:e9:1e:ff:5b:f5:4d:93:48:eb:ca:a9:d0: 0c:13:56:6c:7b:65:4e:78:3a:99:82:a9:d8:ee:72: 9a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:D1:B0:66:09:90:5E:16:DB:4C:45:F1:8E:3E:25:58:EE:62:EF:C4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/69D1B06609905E16DB4C45F18E3E2558EE62EFC4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:c240::/48 Signature Algorithm: sha256WithRSAEncryption 34:da:47:f4:c5:c4:56:50:e1:fd:58:17:54:88:21:04:13:7a: 2a:76:fe:71:ee:18:09:7a:f4:e9:27:b8:f1:de:91:0b:6f:4d: 42:4d:15:cc:ba:03:a2:1d:8b:38:c3:4a:0f:78:e0:60:d2:68: 62:60:2d:7e:c0:81:b0:f6:80:c2:e8:bc:0a:f9:a6:d3:57:c5: 8e:99:24:38:ed:92:9d:b1:45:bf:47:ed:7e:57:22:f2:10:2d: 3b:40:6d:61:63:9a:d1:5b:61:0a:4b:e8:b6:c0:a6:ec:bb:06: f5:a8:09:12:b8:d5:83:91:75:06:0c:f0:24:cf:99:72:6e:cc: f6:b5:67:e9:0c:7d:ba:1f:39:f8:a0:72:7b:a8:6d:1e:67:ca: 2a:a1:af:07:47:dd:fe:4c:a2:a8:91:28:ee:ee:42:d6:1e:de: b3:a9:96:d5:5b:ea:67:a5:c3:96:e3:40:50:68:5c:0a:2e:26: 61:10:13:d0:87:10:47:75:0e:48:ed:66:1d:1f:dd:04:4b:42: 0d:9a:52:11:2f:a4:2d:94:19:f0:0b:c0:69:db:16:7f:0c:22: fb:81:00:b6:34:2b:8f:2f:8b:43:2e:fd:e2:7f:cb:ac:91:4f: 4d:65:90:3b:f3:81:39:b3:3e:0b:84:da:b6:6d:6a:3c:fe:09: 78:c5:9e:c2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUYZLTCaCyoYelu+MogY7qSUK9gmEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDM1NFoX DTI3MDUwMjAwNDg1NFowMzExMC8GA1UEAxMoNjlEMUIwNjYwOTkwNUUxNkRCNEM0 NUYxOEUzRTI1NThFRTYyRUZDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKcINKXMIXQ8G5ESRskuLWWyvF3M6g7yIG+yI+3h7Dmw91nU1s9hlI6GxyjZ ZONHoMnLAo1pzNfYrenjhggEqUuEmaawGjxNphwlpIs51O3b5j8+ZHLmF+52Wgj+ 2KqaonL/jNqqV9RZwMOZsc6n/rTMzw/K7kdfSzJHqr0hfFAQy4zJaOOrEpFdqpBk uQ5GDXEEQhEt5hcsoq8lw+d2LdZavENN1vyBD0MoGc0GvViAKoo90UsUUMEbf8Xx pW1dPelY+tUejxWEZ/AJW2j+mq6e1w/jRiLXkdZAdd1t6JyG4YVB6R7/W/VNk0jr yqnQDBNWbHtlTng6mYKp2O5ymv8CAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGnRsGYJkF4W20xF8Y4+JVjuYu/EMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVmYjgwOGViLWM5OGUtNDAzNi1iZTlhLTE5M2JiY2M2NDg5Mi8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81ZmI4MDhl Yi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMS82OUQxQjA2NjA5OTA1RTE2 REI0QzQ1RjE4RTNFMjU1OEVFNjJFRkM0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN88JAMA0GCSqGSIb3DQEBCwUAA4IBAQA02kf0xcRWUOH9WBdUiCEEE3oq dv5x7hgJevTpJ7jx3pELb01CTRXMugOiHYs4w0oPeOBg0mhiYC1+wIGw9oDC6LwK +abTV8WOmSQ47ZKdsUW/R+1+VyLyEC07QG1hY5rRW2EKS+i2wKbsuwb1qAkSuNWD kXUGDPAkz5lybsz2tWfpDH26Hzn4oHJ7qG0eZ8oqoa8HR93+TKKokSju7kLWHt6z qZbVW+pnpcOW40BQaFwKLiZhEBPQhxBHdQ5I7WYdH90ES0INmlIRL6QtlBnwC8Bp 2xZ/DCL7gQC2NCuPL4tDLv3if8uskU9NZZA784E5sz4LhNq2bWo8/gl4xZ7C -----END CERTIFICATE-----Generated at Tue May 12 22:03:39 2026 by rpki-client