$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.cer File: 6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.cer (raw, json) Hash identifier: jV8uOnGKJ+EMovQ1U00gShXI/Q2s0bQ3d6nSw0xDyPg= Subject key identifier: 6C:89:F6:F9:E6:A5:18:7B:E1:08:54:53:80:7F:7A:BE:E8:3C:27:BF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 29530DCCC5BC0B344B96F2323C4D39DD58EE5FF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:22:30 +0000 Certificate not after: Sun 02 May 2027 00:27:30 +0000 Subordinate resources: IP: 103.194.172.0/22 IP: 2402:cd80::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:53:0d:cc:c5:bc:0b:34:4b:96:f2:32:3c:4d:39:dd:58:ee:5f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:22:30 2026 GMT Not After : May 2 00:27:30 2027 GMT Subject: CN=6C89F6F9E6A5187BE1085453807F7ABEE83C27BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3c:e3:c6:61:c6:bc:9f:be:2a:d1:14:1e:a3: 19:07:5f:24:28:87:58:95:7c:17:c7:8a:9f:d2:3a: 39:c4:2f:a6:e9:9a:aa:5f:fe:b6:dd:73:08:5a:23: f4:e6:ec:8b:ba:60:22:af:06:16:f8:b1:78:2b:4b: a2:f6:11:cf:bd:90:20:af:f1:8e:26:c0:3c:7a:e2: aa:eb:a3:3e:17:9f:b4:8e:8a:e1:0e:2a:66:f4:2d: fc:fb:31:50:cd:21:e9:3c:fb:71:82:a5:3a:5d:e6: eb:e9:3c:20:3b:98:09:98:77:9c:a4:be:95:aa:eb: 2c:fd:38:b1:b0:9b:9d:68:3d:94:aa:a9:df:34:79: c6:39:47:34:53:9b:bc:e2:95:f7:f1:b1:c3:e0:e2: f1:5f:d0:1e:99:e8:57:9a:f2:f8:6e:08:71:13:ef: 60:a8:fa:15:be:a1:bb:e5:89:ff:bb:b4:4d:77:4a: ad:d4:59:93:f3:e0:47:29:4a:de:a8:29:fa:4f:ed: 7e:15:aa:46:01:3f:e1:2a:10:36:ad:d6:51:23:1e: 53:2d:00:7a:2e:8b:64:cf:00:e3:2c:bf:32:3b:c3: 41:7b:33:aa:c5:57:fb:e9:b9:96:f7:ea:ce:cf:9c: de:29:33:f2:f2:87:96:7e:17:42:1b:74:9b:7e:10: 2f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6C:89:F6:F9:E6:A5:18:7B:E1:08:54:53:80:7F:7A:BE:E8:3C:27:BF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/6C89F6F9E6A5187BE1085453807F7ABEE83C27BF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.194.172.0/22 IPv6: 2402:cd80::/32 Signature Algorithm: sha256WithRSAEncryption 06:e7:10:98:d3:4c:77:e1:22:20:3a:76:11:3d:65:04:68:78: 72:a3:02:6a:3a:57:ce:1b:af:7d:d0:84:84:61:70:9a:33:fe: 85:8b:dc:c3:b6:86:d7:45:ca:80:01:d2:b1:17:5a:9d:01:17: a3:bf:77:b9:85:38:51:8f:34:8d:8d:64:74:83:c5:c1:61:53: 0b:44:9a:87:be:52:a5:9e:9b:04:20:e7:1c:d7:bb:98:9d:e1: 47:21:47:91:47:f2:b0:c0:00:37:36:86:1c:1e:eb:3b:9c:c3: 93:9e:e6:01:ac:c8:46:65:ec:ac:1d:24:b0:69:a4:7b:68:37: b6:17:41:af:e0:34:39:dd:b3:d0:fc:b8:06:79:3a:d2:00:a8: a1:9f:7f:0b:4b:be:c4:b6:03:3f:9c:74:86:05:3e:f2:6c:91: 95:f6:19:7e:ba:16:28:4d:62:c5:1b:6d:e1:67:84:b6:12:5a: f3:6e:fc:6d:fd:c2:f8:95:37:f7:23:1e:80:ab:ce:5f:ed:5b: 96:01:dc:57:e9:1e:40:da:f7:78:60:a8:f1:e2:fc:f6:d7:5d: c8:99:e3:ff:f1:a4:a1:27:96:5e:45:25:3e:d6:f6:5b:f6:19: 91:cd:93:04:8e:81:9f:76:16:19:14:fe:88:68:45:22:3b:d5: d2:7e:d6:0a -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUKVMNzMW8CzRLlvIyPE053VjuX/kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjIzMFoX DTI3MDUwMjAwMjczMFowMzExMC8GA1UEAxMoNkM4OUY2RjlFNkE1MTg3QkUxMDg1 NDUzODA3RjdBQkVFODNDMjdCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALc848ZhxryfvirRFB6jGQdfJCiHWJV8F8eKn9I6OcQvpumaql/+tt1zCFoj 9Obsi7pgIq8GFvixeCtLovYRz72QIK/xjibAPHriquujPheftI6K4Q4qZvQt/Psx UM0h6Tz7cYKlOl3m6+k8IDuYCZh3nKS+larrLP04sbCbnWg9lKqp3zR5xjlHNFOb vOKV9/Gxw+Di8V/QHpnoV5ry+G4IcRPvYKj6Fb6hu+WJ/7u0TXdKrdRZk/PgRylK 3qgp+k/tfhWqRgE/4SoQNq3WUSMeUy0Aei6LZM8A4yy/MjvDQXszqsVX++m5lvfq zs+c3ikz8vKHln4XQht0m34QL3kCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGyJ9vnmpRh74QhUU4B/er7oPCe/MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNmZTM1ZmFhLWVkMmItNDI3MS1iNDhjLTRlYTIxYzMwOTM1Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zZmUzNWZh YS1lZDJiLTQyNzEtYjQ4Yy00ZWEyMWMzMDkzNTIvMC82Qzg5RjZGOUU2QTUxODdC RTEwODU0NTM4MDdGN0FCRUU4M0MyN0JGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ8KsMA0EAgACMAcDBQAkAs2AMA0GCSqGSIb3DQEBCwUAA4IBAQAG5xCY00x3 4SIgOnYRPWUEaHhyowJqOlfOG6990ISEYXCaM/6Fi9zDtobXRcqAAdKxF1qdARej v3e5hThRjzSNjWR0g8XBYVMLRJqHvlKlnpsEIOcc17uYneFHIUeRR/KwwAA3NoYc Hus7nMOTnuYBrMhGZeysHSSwaaR7aDe2F0Gv4DQ53bPQ/LgGeTrSAKihn38LS77E tgM/nHSGBT7ybJGV9hl+uhYoTWLFG23hZ4S2Elrzbvxt/cL4lTf3Ix6Aq85f7VuW AdxX6R5A2vd4YKjx4vz2113ImeP/8aShJ5ZeRSU+1vZb9hmRzZMEjoGfdhYZFP6I aEUiO9XSftYK -----END CERTIFICATE-----Generated at Tue May 12 22:03:37 2026 by rpki-client