$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6D157C9F12B387F14489E16709B7918837CC6D0D.cer File: 6D157C9F12B387F14489E16709B7918837CC6D0D.cer (raw, json) Hash identifier: v9uHMGFkb5NeyFfmKsP4kS/Ut1Gw1Ay2RlmoHCpjmQY= Subject key identifier: 6D:15:7C:9F:12:B3:87:F1:44:89:E1:67:09:B7:91:88:37:CC:6D:0D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 43A90359E9752AD892D68FCEF299F3CCE33886DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:23:23 +0000 Certificate not after: Sun 02 May 2027 01:28:23 +0000 Subordinate resources: IP: 103.61.234.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a9:03:59:e9:75:2a:d8:92:d6:8f:ce:f2:99:f3:cc:e3:38:86:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:23:23 2026 GMT Not After : May 2 01:28:23 2027 GMT Subject: CN=6D157C9F12B387F14489E16709B7918837CC6D0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a8:95:3e:aa:f6:e7:b6:c8:12:58:d0:2b:97: fe:b0:36:bb:05:85:c8:39:f9:bd:bd:c9:fb:c5:f1: 5f:ca:a2:21:3d:67:36:d0:a8:64:dd:30:a3:b0:7d: ae:8c:72:ba:04:a6:4f:b4:21:bc:53:e0:26:76:f6: be:29:b5:ac:f7:7a:b4:62:97:1e:59:81:a5:e1:10: 38:92:4a:61:2d:39:54:29:44:1e:e4:8e:bb:97:7f: 9c:47:66:80:14:34:52:a5:fc:49:bc:ae:83:ec:ae: 30:42:6e:86:cc:48:8f:71:e8:9b:d2:58:0d:1a:11: cd:79:24:1c:d1:f0:d4:bd:b8:e4:66:8b:1e:3d:6f: 9d:8d:98:16:1e:84:88:6b:a7:71:bf:93:a9:0f:97: 8c:4c:c2:6a:36:fd:b6:f1:4f:ad:8e:5f:cc:f3:36: cf:be:cc:9b:d6:bf:da:66:e7:3c:85:a5:7f:b1:45: d9:91:b1:13:c6:76:96:a0:fe:fe:34:19:0e:12:01: 8c:6d:2a:d3:4c:3c:85:ef:45:19:ee:10:18:17:1c: 53:cb:83:54:1a:1c:92:4d:32:e3:01:6b:38:4b:0c: fe:b4:67:bd:f9:d8:f6:3e:c2:18:2b:7a:e7:0e:6d: 4c:47:28:c9:7f:fe:fc:38:d8:72:67:98:25:6e:b7: cd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6D:15:7C:9F:12:B3:87:F1:44:89:E1:67:09:B7:91:88:37:CC:6D:0D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.61.234.0/23 Signature Algorithm: sha256WithRSAEncryption 77:0f:ad:8c:0b:fa:56:8e:c0:3a:2c:54:1a:c7:60:77:e4:6f: 54:42:70:9a:6a:ae:b0:90:18:29:d7:a7:8c:36:88:ba:4d:00: 0a:6a:00:b2:c8:11:d0:21:b4:0b:a5:ed:17:0b:ce:5c:28:0e: e1:06:98:fd:de:af:aa:d6:bb:37:5e:6d:9c:74:99:e8:e5:f9: 1c:14:0b:e0:96:4e:c1:ee:59:db:fa:89:8d:c5:e6:23:23:3c: 2c:82:f4:06:6b:dd:32:1c:21:7f:37:1b:29:e6:ac:08:e1:99: 9f:2d:9a:4e:7d:4f:ec:21:24:92:21:e5:6c:21:f2:e8:34:38: 63:5d:04:3c:95:af:92:c7:40:fe:ca:e1:05:dc:86:7b:57:94: 0d:30:9b:5f:d6:df:49:53:63:85:f7:9c:41:d9:8c:77:72:90: ad:18:fb:28:b8:0c:bf:1a:db:88:e0:a0:63:ab:64:f9:a0:0f: 9b:78:bd:e2:fd:af:dc:3e:35:00:f4:23:09:8b:c5:c0:b4:79: 54:c1:2f:0c:23:53:c1:c7:11:6e:30:0d:1c:6a:e3:86:2d:6a: 6d:2d:1d:78:88:ea:64:c6:23:39:e1:cb:52:7d:24:63:f5:81: 70:81:4a:95:8f:36:f0:90:43:55:37:e5:e7:e4:cc:49:2e:24: b2:5a:a2:b6 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUQ6kDWel1KtiS1o/O8pnzzOM4ht8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjMyM1oX DTI3MDUwMjAxMjgyM1owMzExMC8GA1UEAxMoNkQxNTdDOUYxMkIzODdGMTQ0ODlF MTY3MDlCNzkxODgzN0NDNkQwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOolT6q9ue2yBJY0CuX/rA2uwWFyDn5vb3J+8XxX8qiIT1nNtCoZN0wo7B9 roxyugSmT7QhvFPgJnb2vim1rPd6tGKXHlmBpeEQOJJKYS05VClEHuSOu5d/nEdm gBQ0UqX8Sbyug+yuMEJuhsxIj3Hom9JYDRoRzXkkHNHw1L245GaLHj1vnY2YFh6E iGuncb+TqQ+XjEzCajb9tvFPrY5fzPM2z77Mm9a/2mbnPIWlf7FF2ZGxE8Z2lqD+ /jQZDhIBjG0q00w8he9FGe4QGBccU8uDVBockk0y4wFrOEsM/rRnvfnY9j7CGCt6 5w5tTEcoyX/+/DjYcmeYJW63zS8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG0VfJ8Ss4fxRInhZwm3kYg3zG0NMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzlhMmJmZTlhLTM4MjMtNDRlOS05N2MwLTIxOTFhNTZiYWZkMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85YTJiZmU5 YS0zODIzLTQ0ZTktOTdjMC0yMTkxYTU2YmFmZDMvMC82RDE1N0M5RjEyQjM4N0Yx NDQ4OUUxNjcwOUI3OTE4ODM3Q0M2RDBELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZz3qMA0GCSqGSIb3DQEBCwUAA4IBAQB3D62MC/pWjsA6LFQax2B35G9UQnCa aq6wkBgp16eMNoi6TQAKagCyyBHQIbQLpe0XC85cKA7hBpj93q+q1rs3Xm2cdJno 5fkcFAvglk7B7lnb+omNxeYjIzwsgvQGa90yHCF/Nxsp5qwI4ZmfLZpOfU/sISSS IeVsIfLoNDhjXQQ8la+Sx0D+yuEF3IZ7V5QNMJtf1t9JU2OF95xB2Yx3cpCtGPso uAy/GtuI4KBjq2T5oA+beL3i/a/cPjUA9CMJi8XAtHlUwS8MI1PBxxFuMA0cauOG LWptLR14iOpkxiM54ctSfSRj9YFwgUqVjzbwkENVN+Xn5MxJLiSyWqK2 -----END CERTIFICATE-----Generated at Tue May 12 22:33:14 2026 by rpki-client