$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6D25B0844A51EFC1F9C953A3D40868AAD2196824.cer File: 6D25B0844A51EFC1F9C953A3D40868AAD2196824.cer (raw, json) Hash identifier: cEwg06KV6/kY5Ce0egDf6ub+L+xMyy5ZnhjNlKrEAlc= Subject key identifier: 6D:25:B0:84:4A:51:EF:C1:F9:C9:53:A3:D4:08:68:AA:D2:19:68:24 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5CBA533E82835640EB200385F9D9D25798E75985 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft caRepository: rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:00:05 +0000 Certificate not after: Sun 02 May 2027 01:05:05 +0000 Subordinate resources: IP: 103.149.42.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ba:53:3e:82:83:56:40:eb:20:03:85:f9:d9:d2:57:98:e7:59:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:00:05 2026 GMT Not After : May 2 01:05:05 2027 GMT Subject: CN=6D25B0844A51EFC1F9C953A3D40868AAD2196824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4f:e5:9b:20:6f:34:3b:92:d0:95:29:e4:b0: c0:5f:89:34:49:28:d0:0d:1a:cf:f5:c6:36:cb:03: 97:02:c9:38:43:6e:73:af:25:23:0f:99:2d:a9:cc: ea:26:a4:8a:f0:cb:c4:50:b7:73:06:94:c3:17:2c: 54:2b:18:8a:16:54:24:44:13:a0:30:52:9d:42:ea: 9b:3c:73:e9:31:31:ac:58:8f:66:38:3c:c9:84:71: a4:7b:d1:e7:f8:3b:8a:ef:75:6f:19:71:a2:6b:c2: 44:03:a4:f3:19:79:24:47:0a:29:14:dd:51:e6:0d: b5:1e:4c:54:74:9d:84:b7:3f:98:c3:13:5d:f3:4a: c9:2d:49:90:19:20:68:47:85:1d:3a:ad:94:32:8b: 63:cd:d4:88:62:5d:8c:59:22:22:4c:a4:d2:fe:f8: 1f:62:ee:8e:f2:6c:cc:7d:12:11:05:f3:a8:d2:b0: 34:6d:5d:cd:c3:02:57:c0:c9:10:4e:d5:53:05:01: d1:67:2e:2e:99:b6:e3:eb:4f:78:d4:cb:7e:f7:a8: fb:3a:5f:0f:1d:90:01:34:74:8a:5d:a6:c6:00:5c: c6:b9:66:82:f3:82:52:ad:9d:c2:2d:dc:a9:0d:d6: a0:80:52:7a:bc:f0:dd:25:7a:a8:4a:e1:37:f2:8c: a8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6D:25:B0:84:4A:51:EF:C1:F9:C9:53:A3:D4:08:68:AA:D2:19:68:24 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.42.0/24 Signature Algorithm: sha256WithRSAEncryption 81:c8:b4:dc:20:11:53:c2:fc:3d:4f:69:2d:b1:70:8d:02:d6: 7d:e1:af:94:a5:04:c9:23:86:34:9a:90:46:42:87:6d:85:47: 85:6f:fc:f5:78:03:d9:ee:9b:a2:5d:9f:56:df:5a:7b:be:f4: 97:a0:88:07:30:7f:5f:08:f6:ad:dc:3c:a9:99:b1:2d:65:db: e1:3d:4a:56:60:e2:dd:f1:30:83:69:7e:fa:1d:5a:dc:e6:e3: f3:b3:1f:69:8d:e8:0b:2f:94:8b:3b:71:08:78:86:f8:11:51: 54:27:c8:d2:fa:77:2f:22:da:20:f3:da:bb:36:62:92:87:50: 53:37:6a:25:d5:0f:d9:52:0f:2f:23:77:0d:a3:f4:94:43:3e: 61:24:19:a5:66:55:25:d8:7b:38:75:0e:df:3f:5a:39:04:a1: 5c:38:4c:e5:ec:b4:2d:8c:8b:23:20:04:85:6b:fd:c0:d8:ed: e8:3f:4e:43:2e:5c:c2:5e:c4:d0:9b:51:9e:f6:7b:91:b9:43: 49:43:a1:f7:d0:bc:a0:48:95:21:0a:68:02:2c:dd:fb:96:27: 19:4b:b3:49:d9:b3:70:09:79:e9:ae:29:dc:6d:6d:9c:2b:e5: fb:21:bb:d3:df:7d:68:1d:3b:1b:25:ee:7f:6e:48:c0:a9:d6: f3:31:47:84 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUXLpTPoKDVkDrIAOF+dnSV5jnWYUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDAwNVoX DTI3MDUwMjAxMDUwNVowMzExMC8GA1UEAxMoNkQyNUIwODQ0QTUxRUZDMUY5Qzk1 M0EzRDQwODY4QUFEMjE5NjgyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlP5ZsgbzQ7ktCVKeSwwF+JNEko0A0az/XGNssDlwLJOENuc68lIw+ZLanM 6iakivDLxFC3cwaUwxcsVCsYihZUJEQToDBSnULqmzxz6TExrFiPZjg8yYRxpHvR 5/g7iu91bxlxomvCRAOk8xl5JEcKKRTdUeYNtR5MVHSdhLc/mMMTXfNKyS1JkBkg aEeFHTqtlDKLY83UiGJdjFkiIkyk0v74H2LujvJszH0SEQXzqNKwNG1dzcMCV8DJ EE7VUwUB0WcuLpm24+tPeNTLfveo+zpfDx2QATR0il2mxgBcxrlmgvOCUq2dwi3c qQ3WoIBSerzw3SV6qErhN/KMqMcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG0lsIRKUe/B+clTo9QIaKrSGWgkMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc4NjU5OWE2LWQ4NmItNDcxYS1hMDViLWE5ZmFmZTNiYjY5YS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ODY1OTlh Ni1kODZiLTQ3MWEtYTA1Yi1hOWZhZmUzYmI2OWEvMC82RDI1QjA4NDRBNTFFRkMx RjlDOTUzQTNENDA4NjhBQUQyMTk2ODI0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ5UqMA0GCSqGSIb3DQEBCwUAA4IBAQCByLTcIBFTwvw9T2ktsXCNAtZ94a+U pQTJI4Y0mpBGQodthUeFb/z1eAPZ7puiXZ9W31p7vvSXoIgHMH9fCPat3DypmbEt ZdvhPUpWYOLd8TCDaX76HVrc5uPzsx9pjegLL5SLO3EIeIb4EVFUJ8jS+ncvItog 89q7NmKSh1BTN2ol1Q/ZUg8vI3cNo/SUQz5hJBmlZlUl2Hs4dQ7fP1o5BKFcOEzl 7LQtjIsjIASFa/3A2O3oP05DLlzCXsTQm1Ge9nuRuUNJQ6H30LygSJUhCmgCLN37 licZS7NJ2bNwCXnprincbW2cK+X7IbvT331oHTsbJe5/bkjAqdbzMUeE -----END CERTIFICATE-----Generated at Tue May 12 22:02:32 2026 by rpki-client