$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6E337B5444B52C51F604D54444178A988904A1E8.cer File: 6E337B5444B52C51F604D54444178A988904A1E8.cer (raw, json) Hash identifier: rVLcZp2lzzkykxhn/7Y8o7RN+BCIx4RbN8JSsgfdZzk= Subject key identifier: 6E:33:7B:54:44:B5:2C:51:F6:04:D5:44:44:17:8A:98:89:04:A1:E8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 479A086EC7849D65B5C8DE446C7C152343181876 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/6E337B5444B52C51F604D54444178A988904A1E8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:03:12 +0000 Certificate not after: Sun 02 May 2027 01:08:12 +0000 Subordinate resources: IP: 180.131.128.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:9a:08:6e:c7:84:9d:65:b5:c8:de:44:6c:7c:15:23:43:18:18:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:03:12 2026 GMT Not After : May 2 01:08:12 2027 GMT Subject: CN=6E337B5444B52C51F604D54444178A988904A1E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:95:36:11:87:c3:ba:00:4e:35:99:d1:1b:a5: 49:8b:d5:1d:4d:0e:99:1f:23:d5:7b:d5:86:db:e1: 06:c7:35:ef:9b:1e:29:5f:53:5d:ad:08:4b:34:fb: a9:13:d7:6e:28:61:d0:34:4c:72:bb:2c:2c:4f:7c: 6b:84:fe:73:3a:04:1b:96:3d:b6:73:77:d3:ed:48: c4:e6:94:61:0c:9a:70:93:83:07:79:49:29:c7:52: 2e:38:4f:ac:9b:1f:54:6a:47:6e:ef:d3:25:21:a6: 62:dd:fc:58:65:c9:dc:9c:f4:2f:c9:85:f6:c7:f9: c0:78:11:c8:8d:25:8f:a5:2a:d9:df:ae:59:69:62: 27:a3:e5:8b:ea:34:a3:f3:1a:b4:2b:02:c7:72:14: 31:ec:44:62:fe:42:35:b9:f2:38:b4:9e:f0:5c:69: 08:2b:af:9f:04:e1:d4:0d:d7:32:ed:2a:a7:4d:96: e7:d0:b3:61:bc:bc:8a:3e:50:b8:8a:9f:53:ce:f2: f1:b5:33:26:74:b2:33:68:d7:5f:3e:44:fc:3c:7f: cb:61:e4:06:c1:32:84:6b:00:2d:87:d2:74:1f:e3: bf:8b:42:0a:1e:34:6a:80:29:1c:6f:77:51:c0:d6: 08:1f:d6:5f:13:17:f0:40:d4:f8:43:0c:d0:ab:15: 23:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6E:33:7B:54:44:B5:2C:51:F6:04:D5:44:44:17:8A:98:89:04:A1:E8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/6E337B5444B52C51F604D54444178A988904A1E8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.131.128.0/24 Signature Algorithm: sha256WithRSAEncryption 21:99:be:2d:4a:4b:fd:a4:34:f1:12:fe:12:46:4d:da:4b:42: b7:4f:df:84:1b:6d:a0:d6:76:57:d9:e1:27:ad:34:12:9b:c9: e4:29:4f:e6:7a:65:f7:e9:21:12:8c:34:05:84:78:f4:36:ad: 7d:48:4d:0a:68:bf:be:81:3a:5b:f1:30:3c:62:f4:01:06:99: 5d:3b:01:c9:6d:75:d8:be:72:ca:f3:23:38:76:44:5b:de:6f: f7:af:f7:24:f1:d8:4f:e0:31:1f:5c:9a:13:34:a5:04:95:1b: ca:92:39:b1:7b:70:7c:cb:bc:c1:42:0f:f4:cd:33:5e:4f:58: 0b:6b:e8:9e:26:1a:e2:22:28:f6:b8:a0:e1:5d:15:74:6f:46: 2b:ba:5b:0d:c4:be:b0:cb:0b:4e:69:81:12:12:32:16:dc:7c: 35:ed:79:a4:4d:0b:77:55:1c:d9:f9:b5:5d:d3:71:40:95:cf: f3:d9:65:c5:e4:27:fe:2f:76:4a:44:76:8f:cd:81:bd:21:86: e5:b1:23:7f:f2:6c:b2:82:b5:1e:28:59:6f:f8:5f:16:d5:d3: e3:15:ac:b5:16:ca:36:0a:40:9f:02:2c:47:b2:4a:15:0e:96: a1:0f:a1:ec:51:92:56:9b:df:41:64:d3:d5:57:c7:f8:7f:9d: c0:52:a3:bc -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUR5oIbseEnWW1yN5EbHwVI0MYGHYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDMxMloX DTI3MDUwMjAxMDgxMlowMzExMC8GA1UEAxMoNkUzMzdCNTQ0NEI1MkM1MUY2MDRE NTQ0NDQxNzhBOTg4OTA0QTFFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMqVNhGHw7oATjWZ0RulSYvVHU0OmR8j1XvVhtvhBsc175seKV9TXa0ISzT7 qRPXbihh0DRMcrssLE98a4T+czoEG5Y9tnN30+1IxOaUYQyacJODB3lJKcdSLjhP rJsfVGpHbu/TJSGmYt38WGXJ3Jz0L8mF9sf5wHgRyI0lj6Uq2d+uWWliJ6Pli+o0 o/MatCsCx3IUMexEYv5CNbnyOLSe8FxpCCuvnwTh1A3XMu0qp02W59CzYby8ij5Q uIqfU87y8bUzJnSyM2jXXz5E/Dx/y2HkBsEyhGsALYfSdB/jv4tCCh40aoApHG93 UcDWCB/WXxMX8EDU+EMM0KsVI6cCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG4ze1REtSxR9gTVREQXipiJBKHoMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdkMDJhNThkLWI5NTgtNDIxOS04NmQzLTYxZTQzY2VlMzE5YS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ZDAyYTU4 ZC1iOTU4LTQyMTktODZkMy02MWU0M2NlZTMxOWEvMC82RTMzN0I1NDQ0QjUyQzUx RjYwNEQ1NDQ0NDE3OEE5ODg5MDRBMUU4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAtIOAMA0GCSqGSIb3DQEBCwUAA4IBAQAhmb4tSkv9pDTxEv4SRk3aS0K3T9+E G22g1nZX2eEnrTQSm8nkKU/memX36SESjDQFhHj0Nq19SE0KaL++gTpb8TA8YvQB BpldOwHJbXXYvnLK8yM4dkRb3m/3r/ck8dhP4DEfXJoTNKUElRvKkjmxe3B8y7zB Qg/0zTNeT1gLa+ieJhriIij2uKDhXRV0b0YrulsNxL6wywtOaYESEjIW3Hw17Xmk TQt3VRzZ+bVd03FAlc/z2WXF5Cf+L3ZKRHaPzYG9IYblsSN/8myygrUeKFlv+F8W 1dPjFay1Fso2CkCfAixHskoVDpahD6HsUZJWm99BZNPVV8f4f53AUqO8 -----END CERTIFICATE-----Generated at Wed May 13 00:54:21 2026 by rpki-client