$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6E36D51ED37E76652D33954036B724B015FE6535.cer File: 6E36D51ED37E76652D33954036B724B015FE6535.cer (raw, json) Hash identifier: j0MIiYAn4k4u6j2qxpPVDCH3l+AGWj4z/0P6IptMiY8= Subject key identifier: 6E:36:D5:1E:D3:7E:76:65:2D:33:95:40:36:B7:24:B0:15:FE:65:35 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7853A14BED2E43FD1094B64368A5924BF3E7B41A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/6E36D51ED37E76652D33954036B724B015FE6535.mft caRepository: rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:42:39 +0000 Certificate not after: Sat 01 May 2027 23:47:39 +0000 Subordinate resources: IP: 103.139.186.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:53:a1:4b:ed:2e:43:fd:10:94:b6:43:68:a5:92:4b:f3:e7:b4:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:42:39 2026 GMT Not After : May 1 23:47:39 2027 GMT Subject: CN=6E36D51ED37E76652D33954036B724B015FE6535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:09:55:b4:e6:99:9e:8c:74:0e:2e:2e:1b:3b: c7:c2:82:26:ff:ef:b8:74:c9:35:15:20:f0:d8:6d: 63:3e:cb:fd:c0:a3:1e:87:a4:39:1b:55:a6:11:6f: 06:6d:3c:45:1b:a5:64:a4:1b:63:9c:35:51:33:11: 29:be:0b:fc:a0:47:0f:66:b8:3a:91:e3:22:22:97: aa:c8:44:31:ae:19:eb:65:f1:82:f5:ee:e8:77:45: fc:c7:0b:25:b5:8b:89:de:8f:96:76:43:c4:9b:cd: a7:c5:ed:cf:66:fc:87:6b:48:7f:74:7a:9a:fd:22: 25:8e:b0:aa:db:c4:ee:0a:7c:4d:2f:a3:70:2f:3c: 02:7a:c6:fd:e8:2f:9b:fe:25:ae:eb:4f:1b:1c:17: 88:40:cd:f4:89:69:47:ce:3a:34:1b:4a:8a:0a:16: c1:e6:9a:84:c0:cb:83:16:33:a3:b5:94:34:f5:02: 72:0c:6b:01:67:15:ba:d6:5c:9e:99:6a:7e:b8:5c: 62:e8:4f:be:8b:5a:82:26:02:33:b1:ad:d3:01:bb: da:59:14:d9:2c:ad:e7:d5:88:cf:cd:0c:a3:db:26: 2c:97:48:77:fc:33:2c:43:41:2c:e0:fa:4f:a8:f3: 67:e6:7d:ad:22:bd:19:0b:95:f4:70:16:33:c7:a4: da:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6E:36:D5:1E:D3:7E:76:65:2D:33:95:40:36:B7:24:B0:15:FE:65:35 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/6E36D51ED37E76652D33954036B724B015FE6535.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.186.0/24 Signature Algorithm: sha256WithRSAEncryption 38:6f:fb:6d:ca:e9:9d:0a:ce:97:46:c0:37:6c:84:51:c2:07: d0:77:81:cf:26:f6:00:0e:27:3c:6b:dc:71:72:0e:f7:c1:50: eb:8d:06:b9:4b:fd:e8:46:33:dc:b6:8d:39:17:de:0d:47:c1: 96:aa:57:2d:32:29:b6:e5:6b:00:43:cc:fe:3b:a0:c0:45:4a: fa:d1:20:b1:bf:15:9c:6e:89:a1:0e:8b:2b:89:46:8c:ae:bf: 6b:4b:8b:a4:38:38:f4:c9:ac:5e:5e:35:86:91:f8:1b:fe:02: 8d:0b:ef:89:f3:49:42:38:b9:54:e3:79:b7:03:c4:02:fc:42: 13:08:57:74:0f:c7:57:d5:ec:82:8e:d1:bf:08:62:9c:7c:e3: 2e:7b:5c:3d:87:57:88:1b:29:42:89:8e:4a:ca:29:5e:02:c8: 95:8c:a1:e3:8b:0b:f5:e1:64:8c:76:52:de:cf:44:b6:2b:4d: ed:8f:56:6b:c8:8c:c1:85:99:7c:c4:28:bd:0b:62:c7:76:a3: 7d:b6:60:09:33:1f:d6:29:b6:65:ac:ca:d7:59:32:5e:e3:ea: cf:85:d9:f0:dd:5e:b9:f1:96:90:bf:ca:14:2a:08:6d:02:4b: 1b:f0:e1:dd:49:98:60:e0:01:c9:ca:16:33:ac:93:ff:7b:e4: ae:37:03:5d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUeFOhS+0uQ/0QlLZDaKWSS/PntBowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDIzOVoX DTI3MDUwMTIzNDczOVowMzExMC8GA1UEAxMoNkUzNkQ1MUVEMzdFNzY2NTJEMzM5 NTQwMzZCNzI0QjAxNUZFNjUzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK4JVbTmmZ6MdA4uLhs7x8KCJv/vuHTJNRUg8NhtYz7L/cCjHoekORtVphFv Bm08RRulZKQbY5w1UTMRKb4L/KBHD2a4OpHjIiKXqshEMa4Z62XxgvXu6HdF/McL JbWLid6PlnZDxJvNp8Xtz2b8h2tIf3R6mv0iJY6wqtvE7gp8TS+jcC88AnrG/egv m/4lrutPGxwXiEDN9IlpR846NBtKigoWweaahMDLgxYzo7WUNPUCcgxrAWcVutZc nplqfrhcYuhPvotagiYCM7Gt0wG72lkU2Syt59WIz80Mo9smLJdId/wzLENBLOD6 T6jzZ+Z9rSK9GQuV9HAWM8ek2hMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG421R7TfnZlLTOVQDa3JLAV/mU1MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzA0MzU4YjAwLTMxY2QtNDFhMy05NTM2LWRiYjE5M2U3ZjRkMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wNDM1OGIw MC0zMWNkLTQxYTMtOTUzNi1kYmIxOTNlN2Y0ZDAvMC82RTM2RDUxRUQzN0U3NjY1 MkQzMzk1NDAzNkI3MjRCMDE1RkU2NTM1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ4u6MA0GCSqGSIb3DQEBCwUAA4IBAQA4b/ttyumdCs6XRsA3bIRRwgfQd4HP JvYADic8a9xxcg73wVDrjQa5S/3oRjPcto05F94NR8GWqlctMim25WsAQ8z+O6DA RUr60SCxvxWcbomhDosriUaMrr9rS4ukODj0yaxeXjWGkfgb/gKNC++J80lCOLlU 43m3A8QC/EITCFd0D8dX1eyCjtG/CGKcfOMue1w9h1eIGylCiY5KyileAsiVjKHj iwv14WSMdlLez0S2K03tj1ZryIzBhZl8xCi9C2LHdqN9tmAJMx/WKbZlrMrXWTJe 4+rPhdnw3V658ZaQv8oUKghtAksb8OHdSZhg4AHJyhYzrJP/e+SuNwNd -----END CERTIFICATE-----Generated at Tue May 12 22:16:09 2026 by rpki-client