$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6D00F9E4E09CA61520260BEFBC9B7654699D1743.cer File: 6D00F9E4E09CA61520260BEFBC9B7654699D1743.cer (raw, json) Hash identifier: KPGMKYcP2axmDd89Pq14UBEOri6OklDVwawtrLFRE2w= Subject key identifier: 6D:00:F9:E4:E0:9C:A6:15:20:26:0B:EF:BC:9B:76:54:69:9D:17:43 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 22935ED76E5C576A26A0DA72239789005AEF7A56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/6D00F9E4E09CA61520260BEFBC9B7654699D1743.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:48:06 +0000 Certificate not after: Sat 01 May 2027 23:53:06 +0000 Subordinate resources: IP: 103.172.43.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:93:5e:d7:6e:5c:57:6a:26:a0:da:72:23:97:89:00:5a:ef:7a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:48:06 2026 GMT Not After : May 1 23:53:06 2027 GMT Subject: CN=6D00F9E4E09CA61520260BEFBC9B7654699D1743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bb:f1:93:06:54:08:78:4f:d5:4e:36:ab:c8: 1e:65:3f:88:46:14:f5:0a:d4:8f:b5:9f:c0:d3:d5: e0:14:dd:3f:3f:4c:42:e6:ee:13:5c:9c:13:e5:a2: 52:65:e1:5c:60:d7:6a:fe:70:44:e2:13:ce:d7:51: 14:aa:53:0a:f9:64:4c:f1:35:82:85:20:49:59:08: 76:09:75:0b:63:17:1b:c2:7a:d7:7e:8e:91:5e:b2: 81:81:da:7a:6d:05:b6:fc:67:95:72:b0:6b:8b:69: dc:7c:81:fb:f9:2a:83:b4:d3:b0:25:f1:7b:5f:8d: 73:e0:d8:df:97:af:f6:ad:c5:d5:fe:21:ba:8a:8c: 86:27:9c:9e:74:1d:ab:bd:bc:a1:5a:60:40:de:22: ec:a8:87:5e:ed:fd:6e:0b:de:b3:19:b8:a1:c0:8c: 62:c1:8e:19:16:1b:58:dc:9d:25:5c:cf:e1:ef:41: bf:96:b5:e2:13:f3:f4:c4:59:b1:c8:26:e1:0c:ed: 56:44:46:f8:92:87:63:18:8d:51:6e:56:02:4c:68: 8d:a5:b0:ba:29:7a:f3:95:cc:ed:9e:b9:dc:1f:7d: 27:3d:e2:63:92:57:40:15:ea:39:8f:74:a7:fe:12: 6a:43:24:8e:37:a8:82:93:2b:96:de:3d:86:fa:a6: a3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6D:00:F9:E4:E0:9C:A6:15:20:26:0B:EF:BC:9B:76:54:69:9D:17:43 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/6D00F9E4E09CA61520260BEFBC9B7654699D1743.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.43.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:ff:05:e5:b3:d9:6e:b9:59:b1:97:09:fb:2f:36:4e:ef:2f: 59:92:52:32:70:ac:53:2c:4c:2d:46:0e:5f:0f:c1:19:6f:48: 8b:a8:49:8f:20:ec:af:23:9f:0b:04:e2:79:2d:3c:52:93:d0: 38:13:88:9a:79:ac:66:6c:51:42:56:15:8e:98:1a:fe:c9:e4: 61:b0:bc:05:d3:36:75:a4:72:86:1e:c8:ca:3a:e8:28:f7:e3: b4:8c:9e:98:c7:2a:25:80:ec:c6:f9:e9:f6:b6:fb:b4:13:b3: ac:97:7f:ba:fd:1d:1f:9f:c9:7b:dd:41:13:d6:9c:15:4e:db: ee:ad:2d:1f:bb:10:b8:77:0e:7f:6a:7b:6e:b5:a8:19:a9:f8: 02:da:ce:7d:d1:bd:8b:d9:48:38:e3:1e:9d:24:2a:32:40:b0: b8:19:1e:e5:c0:ab:25:36:df:1c:57:b8:a0:c3:41:02:fb:98: a6:77:c7:79:51:f1:b3:fa:41:3e:65:de:aa:f3:56:aa:13:c2: eb:29:d8:0c:0e:50:98:f4:af:ef:ba:c8:1d:f3:b2:a0:0f:b1: f9:96:6b:f1:e3:83:29:fd:6b:f5:0a:74:01:a4:b5:c6:82:83: f3:db:21:00:29:dd:50:0f:2a:16:bf:b5:2c:2d:91:b1:99:46: d3:1e:2c:de -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUIpNe125cV2omoNpyI5eJAFrvelYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDgwNloX DTI3MDUwMTIzNTMwNlowMzExMC8GA1UEAxMoNkQwMEY5RTRFMDlDQTYxNTIwMjYw QkVGQkM5Qjc2NTQ2OTlEMTc0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANG78ZMGVAh4T9VONqvIHmU/iEYU9QrUj7WfwNPV4BTdPz9MQubuE1ycE+Wi UmXhXGDXav5wROITztdRFKpTCvlkTPE1goUgSVkIdgl1C2MXG8J6136OkV6ygYHa em0FtvxnlXKwa4tp3HyB+/kqg7TTsCXxe1+Nc+DY35ev9q3F1f4huoqMhiecnnQd q728oVpgQN4i7KiHXu39bgvesxm4ocCMYsGOGRYbWNydJVzP4e9Bv5a14hPz9MRZ scgm4QztVkRG+JKHYxiNUW5WAkxojaWwuil685XM7Z653B99Jz3iY5JXQBXqOY90 p/4SakMkjjeogpMrlt49hvqmo+0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG0A+eTgnKYVICYL77ybdlRpnRdDMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBlMzFjNjlhLWI3OTItNDBhNC1hMTQ0LTIzNGI1YTFkZGU1Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wZTMxYzY5 YS1iNzkyLTQwYTQtYTE0NC0yMzRiNWExZGRlNTIvMC82RDAwRjlFNEUwOUNBNjE1 MjAyNjBCRUZCQzlCNzY1NDY5OUQxNzQzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6wrMA0GCSqGSIb3DQEBCwUAA4IBAQAv/wXls9luuVmxlwn7LzZO7y9ZklIy cKxTLEwtRg5fD8EZb0iLqEmPIOyvI58LBOJ5LTxSk9A4E4iaeaxmbFFCVhWOmBr+ yeRhsLwF0zZ1pHKGHsjKOugo9+O0jJ6YxyolgOzG+en2tvu0E7Osl3+6/R0fn8l7 3UET1pwVTtvurS0fuxC4dw5/antutagZqfgC2s590b2L2Ug44x6dJCoyQLC4GR7l wKslNt8cV7igw0EC+5imd8d5UfGz+kE+Zd6q81aqE8LrKdgMDlCY9K/vusgd87Kg D7H5lmvx44Mp/Wv1CnQBpLXGgoPz2yEAKd1QDyoWv7UsLZGxmUbTHize -----END CERTIFICATE-----Generated at Tue May 12 22:03:42 2026 by rpki-client