$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6E9E7C02630983CE900C230302BBB85D5049C526.cer File: 6E9E7C02630983CE900C230302BBB85D5049C526.cer (raw, json) Hash identifier: E54C2Pt4URPMyv+j4m/Nbp3Psy7WR3ytt8v7Ekdo26Y= Subject key identifier: 6E:9E:7C:02:63:09:83:CE:90:0C:23:03:02:BB:B8:5D:50:49:C5:26 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0508693C150598A569145205191673EF4EA911C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/6E9E7C02630983CE900C230302BBB85D5049C526.mft caRepository: rsync://rpki-rsync.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:54:23 +0000 Certificate not after: Sun 02 May 2027 00:59:23 +0000 Subordinate resources: IP: 103.211.26.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:08:69:3c:15:05:98:a5:69:14:52:05:19:16:73:ef:4e:a9:11:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:54:23 2026 GMT Not After : May 2 00:59:23 2027 GMT Subject: CN=6E9E7C02630983CE900C230302BBB85D5049C526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cf:c5:ba:88:93:44:2a:00:ef:e6:31:2d:3c: 78:e1:a2:7f:37:2a:15:ef:81:08:66:61:cc:84:81: f9:70:c1:5d:18:e4:6e:07:50:e0:51:d5:84:d2:35: 01:2a:b8:2e:d7:3f:9a:c6:94:40:a7:f1:6a:86:6a: 40:35:7f:ef:4a:51:0d:6e:38:b8:b2:2d:4c:98:bd: d3:2d:4c:df:4f:be:f4:71:1a:17:09:fb:95:e6:04: fc:d4:0d:ee:d9:84:8b:cc:5b:42:35:10:62:fe:db: 93:43:ed:bf:30:df:70:4c:69:f0:f7:b5:f5:d8:d7: 07:76:b8:16:d9:fb:47:ca:03:12:57:19:98:d4:03: ee:c2:36:54:17:53:c7:2f:3d:15:00:6c:81:81:63: fe:02:03:1f:c0:ef:fd:22:4e:bd:0b:5d:fc:02:b1: 91:18:c1:f5:ce:bf:70:4d:8e:50:73:dd:00:29:e6: dd:e6:e0:7d:e0:b2:93:84:24:e0:7c:d4:7e:f6:7c: 0e:d2:e3:1f:26:e4:c6:c8:0e:bc:cf:05:ff:cd:8b: a8:fc:4d:47:4b:31:27:49:25:f2:dc:c6:5a:89:ab: 81:ff:f9:52:f3:96:56:4d:91:80:cd:3c:ee:9e:93: e5:93:45:5e:bc:b0:4c:ad:7e:20:32:4a:bb:b6:97: ca:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6E:9E:7C:02:63:09:83:CE:90:0C:23:03:02:BB:B8:5D:50:49:C5:26 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/6E9E7C02630983CE900C230302BBB85D5049C526.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.211.26.0/23 Signature Algorithm: sha256WithRSAEncryption 09:7d:2d:ee:01:93:f9:9f:d5:3c:54:52:4d:42:8e:1e:58:fd: f4:dd:5c:84:8f:57:ff:1c:fb:47:c7:97:c5:c6:4a:d6:bb:e9: 04:c2:49:76:48:08:9d:f8:3d:37:99:3c:da:45:ac:46:82:a3: bd:70:62:43:0e:bf:88:00:5d:97:ff:cc:32:d0:4a:c0:39:05: 23:0b:5a:2b:02:e6:b2:d1:d0:63:30:6b:df:be:78:bc:43:13: 26:a7:60:1e:ac:e9:35:9b:28:a1:6f:2e:7c:fc:84:15:93:a1: 86:8c:e0:66:c5:ce:66:2d:70:e5:6f:50:e2:59:e6:a8:d2:d6: 9a:6b:24:b7:17:7e:83:2e:05:99:04:e8:cd:e4:cc:8a:ca:5d: 7a:5d:2d:2a:25:e4:b0:79:3f:0c:93:fb:da:0b:0e:0c:38:ca: 0e:6d:1f:3d:d8:76:d2:a6:ea:f6:a8:f5:6b:b3:82:28:78:e7: ab:db:d4:e7:96:9c:4c:48:62:0b:3d:2a:b2:06:5a:8c:a2:f6: 62:c6:0c:11:46:cf:67:a3:eb:dd:c6:88:02:2d:f3:76:52:b8: c8:3f:9c:fe:73:ce:d5:a6:1b:54:09:14:1d:ce:3f:93:9c:ba: 27:43:92:da:04:dc:8b:61:a8:48:14:89:d7:d3:26:5f:8d:c6: b8:82:4d:75 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUBQhpPBUFmKVpFFIFGRZz706pEcIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTQyM1oX DTI3MDUwMjAwNTkyM1owMzExMC8GA1UEAxMoNkU5RTdDMDI2MzA5ODNDRTkwMEMy MzAzMDJCQkI4NUQ1MDQ5QzUyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3PxbqIk0QqAO/mMS08eOGifzcqFe+BCGZhzISB+XDBXRjkbgdQ4FHVhNI1 ASq4Ltc/msaUQKfxaoZqQDV/70pRDW44uLItTJi90y1M30++9HEaFwn7leYE/NQN 7tmEi8xbQjUQYv7bk0PtvzDfcExp8Pe19djXB3a4Ftn7R8oDElcZmNQD7sI2VBdT xy89FQBsgYFj/gIDH8Dv/SJOvQtd/AKxkRjB9c6/cE2OUHPdACnm3ebgfeCyk4Qk 4HzUfvZ8DtLjHybkxsgOvM8F/82LqPxNR0sxJ0kl8tzGWomrgf/5UvOWVk2RgM08 7p6T5ZNFXrywTK1+IDJKu7aXyp8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG6efAJjCYPOkAwjAwK7uF1QScUmMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzcwZDY2YjY5LTcwN2EtNDgzMC1hMmQzLWFmNmNhMGQxNWJjZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83MGQ2NmI2 OS03MDdhLTQ4MzAtYTJkMy1hZjZjYTBkMTViY2UvMC82RTlFN0MwMjYzMDk4M0NF OTAwQzIzMDMwMkJCQjg1RDUwNDlDNTI2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ9MaMA0GCSqGSIb3DQEBCwUAA4IBAQAJfS3uAZP5n9U8VFJNQo4eWP303VyE j1f/HPtHx5fFxkrWu+kEwkl2SAid+D03mTzaRaxGgqO9cGJDDr+IAF2X/8wy0ErA OQUjC1orAuay0dBjMGvfvni8QxMmp2AerOk1myihby58/IQVk6GGjOBmxc5mLXDl b1DiWeao0taaayS3F36DLgWZBOjN5MyKyl16XS0qJeSweT8Mk/vaCw4MOMoObR89 2HbSpur2qPVrs4IoeOer29TnlpxMSGILPSqyBlqMovZixgwRRs9no+vdxogCLfN2 UrjIP5z+c87VphtUCRQdzj+TnLonQ5LaBNyLYahIFInX0yZfjca4gk11 -----END CERTIFICATE-----Generated at Tue May 12 22:32:30 2026 by rpki-client