$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6D8C2202C602D4BCB9586F638744BA643908A389.cer File: 6D8C2202C602D4BCB9586F638744BA643908A389.cer (raw, json) Hash identifier: wZuPHcWbvb2N/zidpK/vkj6qhgPEoF5ZYjXriZ0pKnY= Subject key identifier: 6D:8C:22:02:C6:02:D4:BC:B9:58:6F:63:87:44:BA:64:39:08:A3:89 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 39638A8BA94E9B933E4A0D5F17823D7807DD2686 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:28:04 +0000 Certificate not after: Sun 02 May 2027 01:33:04 +0000 Subordinate resources: IP: 210.87.112.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:63:8a:8b:a9:4e:9b:93:3e:4a:0d:5f:17:82:3d:78:07:dd:26:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:28:04 2026 GMT Not After : May 2 01:33:04 2027 GMT Subject: CN=6D8C2202C602D4BCB9586F638744BA643908A389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fe:00:a2:e4:88:73:f5:25:cc:5d:9c:38:35: de:93:e3:ac:c7:3f:e8:7c:63:44:0b:47:74:76:41: 22:ba:ed:ca:7d:54:b6:3f:eb:2f:e9:2b:85:c0:32: bc:65:8f:87:d1:36:79:f2:22:47:f0:03:90:da:37: ec:52:14:a8:bb:d4:e0:e8:71:c3:26:40:a3:45:47: 18:15:be:37:7f:10:d9:60:fa:01:81:f4:02:39:4e: 21:4e:19:fc:b5:57:32:11:f7:82:24:af:46:ed:c8: f8:51:b3:e6:81:54:e0:cc:d3:4b:73:ed:f8:c6:69: 13:78:94:77:1e:4a:57:93:44:78:6e:26:43:d6:69: 6d:c6:e5:cd:5c:9a:12:25:5b:92:b7:0c:24:46:f3: c2:28:fb:21:42:fd:2e:19:6f:06:cb:02:41:b8:57: 5d:41:c6:6e:f3:53:9a:15:2b:ce:3b:5e:78:67:cc: 01:80:fd:77:6b:c9:18:8a:34:20:70:31:8f:58:08: b2:1d:ac:15:63:a0:95:4f:66:8c:cf:61:36:41:f1: b0:e4:ba:b0:d3:a5:fa:d3:53:15:21:a2:ec:2f:00: 94:53:60:f7:47:c4:2d:d9:0d:23:0d:d2:5c:3f:ca: de:72:79:e0:02:23:57:a0:fa:37:2c:39:11:25:1e: 9b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6D:8C:22:02:C6:02:D4:BC:B9:58:6F:63:87:44:BA:64:39:08:A3:89 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.87.112.0/23 Signature Algorithm: sha256WithRSAEncryption 30:fb:53:7d:14:26:bb:8b:7c:65:0e:8d:f5:21:d8:e2:d1:ae: bf:69:5c:f7:56:d6:ae:93:77:ad:cb:3e:e5:4f:b6:03:b1:b8: 1f:56:2a:9d:b1:35:75:60:c2:b5:c0:86:81:19:f5:cb:5e:b4: 99:b5:1a:05:a3:61:01:73:d7:af:b5:b2:f8:e0:99:3a:b8:d0: c6:6c:d6:14:94:1e:24:cd:ea:0b:18:df:b8:2f:08:93:01:b2: d0:c1:04:f7:38:1a:eb:f1:38:26:82:3c:c2:49:08:12:a1:8d: 8d:d4:c3:22:eb:a1:c4:7e:d6:0c:47:67:16:90:cd:cd:4b:ae: 2f:ce:20:e1:b1:b1:37:9a:00:f4:fd:5d:8e:b2:5c:15:d4:16: 9f:3f:ca:d1:15:28:5c:1f:91:ba:2f:fb:45:ba:10:8a:31:ab: 3a:9f:c8:a2:7b:2b:b0:33:b8:12:bc:9f:9b:02:9b:7c:b9:55: 91:89:8f:01:13:5b:28:41:7b:5d:7d:b5:46:26:30:5c:8d:40: 5a:a9:45:6e:b4:37:28:58:99:07:7e:98:cb:db:af:2e:c4:e3: 7e:67:4a:ef:2d:57:f4:af:53:b4:18:44:7a:65:a5:14:b6:60: d3:99:c5:1e:32:55:e6:17:01:a6:80:52:48:74:18:95:0d:77: 8e:47:93:13 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUOWOKi6lOm5M+Sg1fF4I9eAfdJoYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjgwNFoX DTI3MDUwMjAxMzMwNFowMzExMC8GA1UEAxMoNkQ4QzIyMDJDNjAyRDRCQ0I5NTg2 RjYzODc0NEJBNjQzOTA4QTM4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMX+AKLkiHP1JcxdnDg13pPjrMc/6HxjRAtHdHZBIrrtyn1Utj/rL+krhcAy vGWPh9E2efIiR/ADkNo37FIUqLvU4OhxwyZAo0VHGBW+N38Q2WD6AYH0AjlOIU4Z /LVXMhH3giSvRu3I+FGz5oFU4MzTS3Pt+MZpE3iUdx5KV5NEeG4mQ9ZpbcblzVya EiVbkrcMJEbzwij7IUL9LhlvBssCQbhXXUHGbvNTmhUrzjteeGfMAYD9d2vJGIo0 IHAxj1gIsh2sFWOglU9mjM9hNkHxsOS6sNOl+tNTFSGi7C8AlFNg90fELdkNIw3S XD/K3nJ54AIjV6D6Nyw5ESUem9MCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG2MIgLGAtS8uVhvY4dEumQ5CKOJMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ExZWUzNzY1LTBhYmItNGJhMy1hMDBkLWNiY2VjODM5OTkyOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hMWVlMzc2 NS0wYWJiLTRiYTMtYTAwZC1jYmNlYzgzOTk5MjgvMC82RDhDMjIwMkM2MDJENEJD Qjk1ODZGNjM4NzQ0QkE2NDM5MDhBMzg5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQB0ldwMA0GCSqGSIb3DQEBCwUAA4IBAQAw+1N9FCa7i3xlDo31Idji0a6/aVz3 Vtauk3etyz7lT7YDsbgfViqdsTV1YMK1wIaBGfXLXrSZtRoFo2EBc9evtbL44Jk6 uNDGbNYUlB4kzeoLGN+4LwiTAbLQwQT3OBrr8TgmgjzCSQgSoY2N1MMi66HEftYM R2cWkM3NS64vziDhsbE3mgD0/V2OslwV1BafP8rRFShcH5G6L/tFuhCKMas6n8ii eyuwM7gSvJ+bApt8uVWRiY8BE1soQXtdfbVGJjBcjUBaqUVutDcoWJkHfpjL268u xON+Z0rvLVf0r1O0GER6ZaUUtmDTmcUeMlXmFwGmgFJIdBiVDXeOR5MT -----END CERTIFICATE-----Generated at Tue May 12 22:16:43 2026 by rpki-client