$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer File: 6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer (raw, json) Hash identifier: fZcSr6BSGEnMNZprjlrid4TtrSCfvsy1P0hHoC99TlM= Subject key identifier: 6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4BB199822422C605EC45FC1F4FBFB43A5B2C9BD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:59:25 +0000 Certificate not after: Sun 02 May 2027 02:04:25 +0000 Subordinate resources: IP: 103.158.26.0/23 IP: 2406:aec0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b1:99:82:24:22:c6:05:ec:45:fc:1f:4f:bf:b4:3a:5b:2c:9b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:59:25 2026 GMT Not After : May 2 02:04:25 2027 GMT Subject: CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4a:33:6d:ea:ff:7d:e5:5b:a2:81:ad:5d:44: a6:0a:41:33:9c:75:4b:78:c3:77:08:79:7d:2a:49: 92:16:2b:3f:69:86:e3:94:e0:65:68:78:1c:8e:68: ec:6f:fd:0e:8e:24:16:fb:43:31:c7:b1:42:4d:a7: 3d:bc:9e:d5:de:20:d5:a1:bd:0c:a0:20:26:d1:01: 79:f3:d5:2d:52:a2:53:01:1c:99:6b:c9:13:61:3b: 09:b2:28:0e:f0:9e:fa:68:a9:5b:6b:94:75:a2:0f: 2b:b0:cc:32:52:b2:c4:5a:6c:c7:34:da:65:e2:f6: 2e:54:c1:38:70:9b:fa:53:63:73:a3:77:d1:a6:59: c1:86:56:d8:78:dc:f2:59:af:33:1c:a3:ff:78:9d: 1d:a8:ee:43:fa:9d:b3:50:fd:e4:81:f3:e5:8b:0c: 36:57:a1:b5:6c:80:28:09:e2:82:74:43:81:02:7c: ad:32:ab:bc:bb:5d:b1:ed:3a:4a:20:f3:0c:e1:11: 07:b8:45:cf:6f:10:f2:d8:b6:aa:08:e2:17:df:c2: 69:18:b9:ff:72:bb:2f:27:b6:b5:97:f5:21:66:af: ba:81:17:3e:2c:78:54:9c:ac:cc:3f:0e:7a:aa:f4: 58:13:44:ea:8c:da:c5:32:e0:1e:75:92:fc:de:00: aa:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.26.0/23 IPv6: 2406:aec0::/32 Signature Algorithm: sha256WithRSAEncryption 7c:cc:73:3b:4f:ac:b2:55:8a:4d:58:58:39:be:d1:b6:12:bd: 07:a4:b0:bc:d8:f4:63:2b:7a:64:81:ec:82:c4:f7:25:72:3f: b8:66:3b:28:ad:4a:bf:06:1e:07:d6:2d:44:05:c0:9e:20:83: bc:2f:f3:79:4c:ae:78:6e:97:86:46:e3:01:eb:ea:b2:63:23: 04:8a:47:5b:69:1d:f1:e5:15:06:e6:ab:d4:5d:44:85:e0:f2: f5:c5:74:cc:a1:c5:f6:bf:20:e0:6e:31:9c:24:a7:0e:f4:19: 99:31:d5:77:df:47:46:f9:e4:cc:1c:d5:cd:b0:34:11:b3:54: 51:a4:58:63:9b:14:3e:28:bc:0b:5e:94:75:c3:eb:80:40:04: d5:33:f4:f4:0a:f1:22:71:93:35:17:d2:51:57:95:e8:29:92: 63:ba:6e:dc:71:54:b7:49:ad:89:08:b9:16:23:12:cd:90:1d: 88:44:45:c1:9f:c8:c6:ad:09:2c:03:0f:e2:60:7c:03:36:03: 27:35:7d:fa:d3:ea:78:ea:c9:88:7f:eb:25:57:a8:be:b5:87: 7f:bb:f9:b9:a3:4c:b7:b6:e6:a2:78:e6:73:3c:41:de:d4:84: 91:79:72:78:46:d9:04:9c:bf:70:fa:48:d1:ad:16:07:56:a9: 96:86:15:6d -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUS7GZgiQixgXsRfwfT7+0Olssm9AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTkyNVoX DTI3MDUwMjAyMDQyNVowMzExMC8GA1UEAxMoNkQ1RTU0MjBCNDM0OURCNzc5OTU3 NEQxQUE4RUZBNDIzNEIwNjM4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN9KM23q/33lW6KBrV1EpgpBM5x1S3jDdwh5fSpJkhYrP2mG45TgZWh4HI5o 7G/9Do4kFvtDMcexQk2nPbye1d4g1aG9DKAgJtEBefPVLVKiUwEcmWvJE2E7CbIo DvCe+mipW2uUdaIPK7DMMlKyxFpsxzTaZeL2LlTBOHCb+lNjc6N30aZZwYZW2Hjc 8lmvMxyj/3idHajuQ/qds1D95IHz5YsMNlehtWyAKAnignRDgQJ8rTKrvLtdse06 SiDzDOERB7hFz28Q8ti2qgjiF9/CaRi5/3K7Lye2tZf1IWavuoEXPix4VJyszD8O eqr0WBNE6ozaxTLgHnWS/N4AqosCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG1eVCC0NJ23eZV00aqO+kI0sGOOMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q0ZjJjMDI1LTFkNzYtNGEzNi04MTYwLWE5ZThhZmUzNTc5Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kNGYyYzAy NS0xZDc2LTRhMzYtODE2MC1hOWU4YWZlMzU3OWYvMC82RDVFNTQyMEI0MzQ5REI3 Nzk5NTc0RDFBQThFRkE0MjM0QjA2MzhFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ54aMA0EAgACMAcDBQAkBq7AMA0GCSqGSIb3DQEBCwUAA4IBAQB8zHM7T6yy VYpNWFg5vtG2Er0HpLC82PRjK3pkgeyCxPclcj+4ZjsorUq/Bh4H1i1EBcCeIIO8 L/N5TK54bpeGRuMB6+qyYyMEikdbaR3x5RUG5qvUXUSF4PL1xXTMocX2vyDgbjGc JKcO9BmZMdV330dG+eTMHNXNsDQRs1RRpFhjmxQ+KLwLXpR1w+uAQATVM/T0CvEi cZM1F9JRV5XoKZJjum7ccVS3Sa2JCLkWIxLNkB2IREXBn8jGrQksAw/iYHwDNgMn NX360+p46smIf+slV6i+tYd/u/m5o0y3tuaieOZzPEHe1ISReXJ4RtkEnL9w+kjR rRYHVqmWhhVt -----END CERTIFICATE-----Generated at Wed May 13 00:44:47 2026 by rpki-client