$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F.cer File: 69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F.cer (raw, json) Hash identifier: TlJKnY5Apz4zGstL/sTCWhQnn8gvoORwIwgrPAMsoPw= Subject key identifier: 69:EB:8C:4D:4C:8A:1C:4F:F6:9E:9E:4C:4A:C1:98:3F:ED:78:C0:1F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 52DC678922D07787D0BBB1CAC67E227FE2E096E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:39:30 +0000 Certificate not after: Sun 02 May 2027 01:44:30 +0000 Subordinate resources: IP: 202.47.90.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:dc:67:89:22:d0:77:87:d0:bb:b1:ca:c6:7e:22:7f:e2:e0:96:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:39:30 2026 GMT Not After : May 2 01:44:30 2027 GMT Subject: CN=69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:62:88:ef:03:52:d6:f6:0c:16:be:2d:e1:25: e7:32:c9:95:77:ea:74:f8:6d:03:98:e4:47:21:6e: 7a:e0:cc:94:bb:a9:6b:61:64:9e:da:ef:02:f8:da: 8d:5e:61:92:e6:ec:8d:d9:5f:12:be:1a:1e:a3:97: ad:63:55:10:c1:6a:b3:7f:80:f6:98:3f:1d:31:ac: 80:7e:30:4b:ab:13:20:11:86:cc:80:9a:5d:94:47: d0:5c:1c:90:86:de:65:98:0c:cc:d2:5d:ba:32:7c: 79:c4:d1:59:ba:f4:d8:ff:80:ab:85:d1:54:bc:54: fe:c3:2c:7a:37:99:d9:29:c9:d6:99:45:d6:d3:05: a8:c8:77:62:68:23:4a:c4:4d:ff:1d:c7:58:50:d3: 17:ad:f3:d1:4f:3d:27:0b:71:64:d2:47:7c:66:e1: a9:b2:e6:de:87:c0:e7:44:d7:6f:35:54:78:f4:c1: 9f:b1:e8:5f:b6:85:5d:4d:11:b9:7e:86:78:29:28: 14:ba:d5:10:fd:e9:f4:8c:f4:7c:cb:7f:aa:8c:bb: 64:39:6a:c5:e9:3b:74:bf:b9:b6:8c:a9:05:af:05: bf:5e:56:54:13:f1:42:6c:8e:64:25:99:10:56:38: 33:e3:e4:a6:9c:ea:88:b7:2d:50:93:29:94:c6:7f: e9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:EB:8C:4D:4C:8A:1C:4F:F6:9E:9E:4C:4A:C1:98:3F:ED:78:C0:1F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.90.0/23 Signature Algorithm: sha256WithRSAEncryption 65:b7:40:a5:4a:9a:10:3b:ac:e9:c2:e0:3a:ee:73:6c:fe:af: fc:01:73:59:24:bb:0d:ec:e5:29:ca:5e:bc:8f:85:3b:70:04: a9:21:f2:b0:d9:c0:c7:b7:cf:0d:61:6b:a0:ac:32:9e:ab:d7: 07:b6:1e:75:d7:bc:08:9c:35:69:21:bc:8a:b4:db:ac:4a:01: c1:31:b0:67:02:42:35:e1:d1:d9:fe:c8:35:02:3a:db:23:80: 0b:95:2f:0a:95:cd:c9:86:5c:60:bd:a3:69:b8:a4:a7:93:41: e7:a8:9c:49:b5:bc:e3:fe:67:05:07:e6:dc:f6:ea:60:d3:26: 2a:f3:4d:ee:9a:99:c5:e1:c9:23:b8:18:84:59:e2:13:30:99: d3:dc:68:f0:cc:f5:8b:fd:d3:19:62:9c:a9:05:71:53:ca:0b: 40:39:3d:51:a5:07:33:39:8a:7b:79:e9:80:60:82:f9:1e:54: 80:10:91:19:b5:d0:9f:5d:d4:24:83:d7:8b:01:f9:b9:08:c5: 6f:d9:63:20:36:56:94:2d:8a:a7:ea:bf:26:3d:41:87:aa:bc: f7:a2:07:63:83:e0:29:2f:8d:98:f3:d8:0c:51:fa:a9:81:95: 4b:58:9b:e8:90:c4:c1:0c:02:ba:57:0a:94:2a:ec:1c:ec:93: 1a:94:a4:28 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUUtxniSLQd4fQu7HKxn4if+LgluAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzkzMFoX DTI3MDUwMjAxNDQzMFowMzExMC8GA1UEAxMoNjlFQjhDNEQ0QzhBMUM0RkY2OUU5 RTRDNEFDMTk4M0ZFRDc4QzAxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANdiiO8DUtb2DBa+LeEl5zLJlXfqdPhtA5jkRyFueuDMlLupa2FkntrvAvja jV5hkubsjdlfEr4aHqOXrWNVEMFqs3+A9pg/HTGsgH4wS6sTIBGGzICaXZRH0Fwc kIbeZZgMzNJdujJ8ecTRWbr02P+Aq4XRVLxU/sMsejeZ2SnJ1plF1tMFqMh3Ymgj SsRN/x3HWFDTF63z0U89JwtxZNJHfGbhqbLm3ofA50TXbzVUePTBn7HoX7aFXU0R uX6GeCkoFLrVEP3p9Iz0fMt/qoy7ZDlqxek7dL+5toypBa8Fv15WVBPxQmyOZCWZ EFY4M+PkppzqiLctUJMplMZ/6SMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGnrjE1MihxP9p6eTErBmD/teMAfMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2IyYTBhNzcxLTYyZDItNDIzOC1hNDA2LTc5OTlmMjI0ODQ5Yy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iMmEwYTc3 MS02MmQyLTQyMzgtYTQwNi03OTk5ZjIyNDg0OWMvMC82OUVCOEM0RDRDOEExQzRG RjY5RTlFNEM0QUMxOTgzRkVENzhDMDFGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQByi9aMA0GCSqGSIb3DQEBCwUAA4IBAQBlt0ClSpoQO6zpwuA67nNs/q/8AXNZ JLsN7OUpyl68j4U7cASpIfKw2cDHt88NYWugrDKeq9cHth5117wInDVpIbyKtNus SgHBMbBnAkI14dHZ/sg1AjrbI4ALlS8Klc3JhlxgvaNpuKSnk0HnqJxJtbzj/mcF B+bc9upg0yYq803umpnF4ckjuBiEWeITMJnT3GjwzPWL/dMZYpypBXFTygtAOT1R pQczOYp7eemAYIL5HlSAEJEZtdCfXdQkg9eLAfm5CMVv2WMgNlaULYqn6r8mPUGH qrz3ogdjg+ApL42Y89gMUfqpgZVLWJvokMTBDAK6VwqUKuwc7JMalKQo -----END CERTIFICATE-----Generated at Tue May 12 22:39:01 2026 by rpki-client