$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6B03ED08A18F139AA9D88990B07CF4297AFA15D7.cer File: 6B03ED08A18F139AA9D88990B07CF4297AFA15D7.cer (raw, json) Hash identifier: 301DBxgGpWljbHq1M4pzWlxPAQ3NrYaKCiKKCLOU7Bc= Subject key identifier: 6B:03:ED:08:A1:8F:13:9A:A9:D8:89:90:B0:7C:F4:29:7A:FA:15:D7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4A9325A2200540FCDAD5B8EC4E793FA7C06AA866 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/6B03ED08A18F139AA9D88990B07CF4297AFA15D7.mft caRepository: rsync://rpki-rsync.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:48:00 +0000 Certificate not after: Sun 02 May 2027 00:53:00 +0000 Subordinate resources: IP: 202.94.71.0/24 IP: 2001:df6:2e40::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:93:25:a2:20:05:40:fc:da:d5:b8:ec:4e:79:3f:a7:c0:6a:a8:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:48:00 2026 GMT Not After : May 2 00:53:00 2027 GMT Subject: CN=6B03ED08A18F139AA9D88990B07CF4297AFA15D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d0:78:63:26:7f:e3:f3:e7:51:25:4f:89:e8: f3:18:23:3e:ee:12:ba:f0:5b:9c:d8:27:87:81:83: e3:49:f3:f6:9e:b9:11:7f:90:14:47:6c:55:cb:ed: b6:0f:71:fd:53:e0:e0:7f:e9:2e:be:cc:d8:74:31: 78:65:a0:bd:cb:da:96:e7:33:10:d2:66:1b:61:bb: 44:f1:10:b5:87:23:6a:87:c0:27:5c:af:74:ca:3e: 21:d3:26:0f:55:b6:f3:c1:91:d4:69:c9:bd:94:a5: d8:81:9f:25:08:aa:bf:79:0d:3a:e5:1a:2f:1f:5f: 0c:75:dc:9a:13:06:8d:48:57:23:d2:3b:bc:32:56: 51:66:f3:ef:0b:bb:67:24:7b:2d:43:70:54:72:a7: 03:aa:09:e9:ae:28:1f:2d:bc:fe:97:33:6f:04:cd: 17:97:83:dd:e3:ca:0b:0e:bb:18:d5:68:db:f7:e7: 15:5d:ca:38:f1:a2:04:ec:95:5b:ad:8d:08:c2:54: a4:e2:b5:96:48:ad:c2:13:c0:f8:66:f4:51:15:7a: 21:38:b1:b7:9e:be:bc:c8:ee:a6:e3:4a:0f:d9:2b: 18:00:9b:02:48:73:05:48:6d:32:67:fe:da:94:58: 2d:3c:6c:94:15:09:c3:5a:2c:ed:a5:3a:6c:56:09: 25:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6B:03:ED:08:A1:8F:13:9A:A9:D8:89:90:B0:7C:F4:29:7A:FA:15:D7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/6B03ED08A18F139AA9D88990B07CF4297AFA15D7.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.94.71.0/24 IPv6: 2001:df6:2e40::/48 Signature Algorithm: sha256WithRSAEncryption 85:2f:9a:10:8d:e9:93:68:36:b8:fd:73:f3:7f:4a:18:ee:3a: f0:43:cb:8e:e1:02:f3:9e:3b:42:82:1d:c6:87:5b:e2:76:0e: 05:23:86:ad:75:72:d2:0b:4f:47:b8:13:6c:9f:35:c4:d7:98: 25:6d:f2:a2:94:d6:45:25:8d:7d:62:ae:e1:18:b7:5f:3b:c5: c8:8a:de:9c:26:08:e9:74:89:14:a6:12:ed:77:cc:d1:54:6a: 1e:bf:cc:0e:0b:85:8e:de:df:a6:c7:7d:64:f9:70:ed:5b:08: 01:1e:2f:06:e0:b7:f4:50:05:73:ed:21:f9:ec:69:90:70:ff: ef:0d:14:f1:79:93:58:39:83:5d:35:54:c1:fd:f1:10:91:4d: d0:65:ef:6d:79:91:fa:c6:c8:f0:a1:be:80:c2:0b:39:c7:af: bf:9a:a7:ba:16:8a:f7:d0:40:dc:22:d4:9a:23:76:1f:8d:a7: 2b:6a:8c:cc:c7:41:2f:e1:ec:73:60:54:1b:7d:88:ad:26:16: 81:c6:df:b7:41:2d:ba:92:35:a9:e1:e9:2e:57:bf:06:18:05: 29:86:07:ec:83:2a:35:a0:cc:4a:56:5a:94:26:b0:64:c0:41: f0:09:bc:5c:20:b4:ca:ba:62:59:d8:2a:9a:50:41:3f:61:81: 5e:f5:5a:af -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUSpMloiAFQPza1bjsTnk/p8BqqGYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDgwMFoX DTI3MDUwMjAwNTMwMFowMzExMC8GA1UEAxMoNkIwM0VEMDhBMThGMTM5QUE5RDg4 OTkwQjA3Q0Y0Mjk3QUZBMTVENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM/QeGMmf+Pz51ElT4no8xgjPu4SuvBbnNgnh4GD40nz9p65EX+QFEdsVcvt tg9x/VPg4H/pLr7M2HQxeGWgvcvaluczENJmG2G7RPEQtYcjaofAJ1yvdMo+IdMm D1W288GR1GnJvZSl2IGfJQiqv3kNOuUaLx9fDHXcmhMGjUhXI9I7vDJWUWbz7wu7 ZyR7LUNwVHKnA6oJ6a4oHy28/pczbwTNF5eD3ePKCw67GNVo2/fnFV3KOPGiBOyV W62NCMJUpOK1lkitwhPA+Gb0URV6ITixt56+vMjupuNKD9krGACbAkhzBUhtMmf+ 2pRYLTxslBUJw1os7aU6bFYJJWkCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGsD7QihjxOaqdiJkLB89Cl6+hXXMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY1ODA2ZDMwLWVlMDUtNDUwZi05NDY2LTdmOTA4ZTljYzdlNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82NTgwNmQz MC1lZTA1LTQ1MGYtOTQ2Ni03ZjkwOGU5Y2M3ZTQvMC82QjAzRUQwOEExOEYxMzlB QTlEODg5OTBCMDdDRjQyOTdBRkExNUQ3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAyl5HMA8EAgACMAkDBwAgAQ32LkAwDQYJKoZIhvcNAQELBQADggEBAIUvmhCN 6ZNoNrj9c/N/ShjuOvBDy47hAvOeO0KCHcaHW+J2DgUjhq11ctILT0e4E2yfNcTX mCVt8qKU1kUljX1iruEYt187xciK3pwmCOl0iRSmEu13zNFUah6/zA4LhY7e36bH fWT5cO1bCAEeLwbgt/RQBXPtIfnsaZBw/+8NFPF5k1g5g101VMH98RCRTdBl7215 kfrGyPChvoDCCznHr7+ap7oWivfQQNwi1Jojdh+NpytqjMzHQS/h7HNgVBt9iK0m FoHG37dBLbqSNanh6S5XvwYYBSmGB+yDKjWgzEpWWpQmsGTAQfAJvFwgtMq6YlnY KppQQT9hgV71Wq8= -----END CERTIFICATE-----Generated at Tue May 12 22:16:17 2026 by rpki-client