$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6C9BE2712174A61A708F557544E696FFDBDA757D.cer File: 6C9BE2712174A61A708F557544E696FFDBDA757D.cer (raw, json) Hash identifier: JGs6eLbg/4GsqNGWFv7+6NdiTH5JIVCyf+bHZvzZ4k8= Subject key identifier: 6C:9B:E2:71:21:74:A6:1A:70:8F:55:75:44:E6:96:FF:DB:DA:75:7D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 67BEA58556DDFF08612273FFBF4DA79354748243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/6C9BE2712174A61A708F557544E696FFDBDA757D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:17:40 +0000 Certificate not after: Sun 02 May 2027 00:22:40 +0000 Subordinate resources: IP: 103.127.106.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:be:a5:85:56:dd:ff:08:61:22:73:ff:bf:4d:a7:93:54:74:82:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:17:40 2026 GMT Not After : May 2 00:22:40 2027 GMT Subject: CN=6C9BE2712174A61A708F557544E696FFDBDA757D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:87:3c:80:c2:49:08:eb:c3:07:4f:85:95: 0c:01:49:de:c1:f3:a5:d3:f8:f0:a9:c0:0e:5f:4c: e0:d3:5c:34:c4:84:fb:27:69:cc:06:9c:47:70:11: 03:2a:8f:9e:3c:76:b0:26:4b:14:af:f2:35:6f:d7: 2c:72:05:ae:6b:93:c3:0c:d6:d9:7f:d6:39:34:e3: 04:19:74:49:10:f9:bd:1e:85:34:5c:bf:54:17:1d: ef:85:a5:7f:17:56:32:49:41:1a:18:66:2c:db:c2: 2b:08:d8:67:36:b8:13:00:be:0f:99:19:5f:09:af: 08:28:57:63:77:42:fa:89:e0:35:ee:f9:c6:25:76: 80:7e:e4:ef:e2:08:46:e3:c7:55:1a:3a:a4:e3:dd: 32:5d:50:70:47:f0:49:2b:5e:ac:12:4a:7e:c2:63: e9:e7:64:44:d8:bd:cb:8a:f1:26:ba:64:1e:e1:bc: e2:55:60:f9:64:dc:07:87:86:b7:1b:55:ae:c7:e5: 2e:5a:29:bb:a8:36:2a:b9:f2:ba:a8:87:b7:e2:56: 9a:dc:16:58:71:da:bf:8a:fe:0c:90:04:4f:ec:5e: 54:46:12:dc:42:20:90:23:49:03:6e:52:60:08:1e: 1c:75:50:b8:84:bf:99:2f:46:6e:74:ad:0c:5b:8e: 03:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6C:9B:E2:71:21:74:A6:1A:70:8F:55:75:44:E6:96:FF:DB:DA:75:7D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/6C9BE2712174A61A708F557544E696FFDBDA757D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.127.106.0/23 Signature Algorithm: sha256WithRSAEncryption 41:8e:22:89:1f:21:6f:3f:d4:d7:3d:d2:f3:52:0d:06:d4:60: 98:58:d0:f5:cf:bb:a6:67:9e:03:fc:4e:e8:b7:9a:c2:a5:c4: a6:02:17:61:47:1c:2d:ed:66:41:a1:4f:51:6c:70:f5:5b:ab: f4:1f:a5:0d:c3:01:d7:ae:75:fc:00:5b:5b:e6:ac:bd:bc:6a: a5:7e:e2:43:7d:ed:b9:4a:d4:21:2e:35:ee:80:12:4e:e5:12: 9d:db:b8:c2:58:20:db:74:2c:bb:b8:91:b9:97:d6:a8:52:45: e7:0e:f3:3b:48:2d:98:b6:2f:1d:5a:5f:7f:d8:9f:a8:f6:cd: 5b:18:35:c7:1b:aa:06:e7:7f:60:20:6b:9f:51:9b:bc:e2:7b: 8a:1c:fc:48:f6:08:c9:67:c3:a9:4b:c0:9c:5e:a1:5f:16:33: e8:e5:66:2b:e5:df:66:0f:8e:a9:ab:9e:73:f9:da:eb:52:de: 68:b9:9f:57:ce:60:e5:2c:6f:c9:ba:64:d4:a2:9d:9d:b8:64: 7f:78:12:5b:63:bc:a1:44:5c:ab:36:64:4f:c7:8f:4b:2f:9a: a6:88:59:16:cf:c4:9c:d7:12:d6:42:60:5d:b9:ca:92:70:e0: 16:85:bc:1f:47:c7:cc:f9:34:51:1d:66:31:d4:bb:1f:6b:87: 66:ce:76:74 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUZ76lhVbd/whhInP/v02nk1R0gkMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTc0MFoX DTI3MDUwMjAwMjI0MFowMzExMC8GA1UEAxMoNkM5QkUyNzEyMTc0QTYxQTcwOEY1 NTc1NDRFNjk2RkZEQkRBNzU3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGZhzyAwkkI68MHT4WVDAFJ3sHzpdP48KnADl9M4NNcNMSE+ydpzAacR3AR AyqPnjx2sCZLFK/yNW/XLHIFrmuTwwzW2X/WOTTjBBl0SRD5vR6FNFy/VBcd74Wl fxdWMklBGhhmLNvCKwjYZza4EwC+D5kZXwmvCChXY3dC+ongNe75xiV2gH7k7+II RuPHVRo6pOPdMl1QcEfwSSterBJKfsJj6edkRNi9y4rxJrpkHuG84lVg+WTcB4eG txtVrsflLlopu6g2KrnyuqiHt+JWmtwWWHHav4r+DJAET+xeVEYS3EIgkCNJA25S YAgeHHVQuIS/mS9GbnStDFuOA9sCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGyb4nEhdKYacI9VdUTmlv/b2nV9MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM4ZDdhMDM4LWY4YTEtNGVkMC1hMWFmLTU0OTUyZTU0M2M0My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zOGQ3YTAz OC1mOGExLTRlZDAtYTFhZi01NDk1MmU1NDNjNDMvMC82QzlCRTI3MTIxNzRBNjFB NzA4RjU1NzU0NEU2OTZGRkRCREE3NTdELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ39qMA0GCSqGSIb3DQEBCwUAA4IBAQBBjiKJHyFvP9TXPdLzUg0G1GCYWND1 z7umZ54D/E7ot5rCpcSmAhdhRxwt7WZBoU9RbHD1W6v0H6UNwwHXrnX8AFtb5qy9 vGqlfuJDfe25StQhLjXugBJO5RKd27jCWCDbdCy7uJG5l9aoUkXnDvM7SC2Yti8d Wl9/2J+o9s1bGDXHG6oG539gIGufUZu84nuKHPxI9gjJZ8OpS8CcXqFfFjPo5WYr 5d9mD46pq55z+drrUt5ouZ9XzmDlLG/JumTUop2duGR/eBJbY7yhRFyrNmRPx49L L5qmiFkWz8Sc1xLWQmBducqScOAWhbwfR8fM+TRRHWYx1Lsfa4dmznZ0 -----END CERTIFICATE-----Generated at Tue May 12 22:04:12 2026 by rpki-client