$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.cer File: 6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.cer (raw, json) Hash identifier: eN1tcFiEdJiuUNX9DneWTd55kPSbKt2dSfsxP8IWwf4= Subject key identifier: 6E:FC:A1:AA:74:52:F5:83:B4:33:17:E5:60:CC:93:F8:C9:CB:8D:C5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 086D7A05C5F862DC0C9D8F532B56B1945A128610 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:19:21 +0000 Certificate not after: Sun 02 May 2027 01:24:21 +0000 Subordinate resources: IP: 103.169.44.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:6d:7a:05:c5:f8:62:dc:0c:9d:8f:53:2b:56:b1:94:5a:12:86:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:19:21 2026 GMT Not After : May 2 01:24:21 2027 GMT Subject: CN=6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:34:87:d0:73:2e:15:00:1d:93:8e:5d:4d:c2: d0:a7:39:b8:11:d3:bc:c1:4b:32:9f:be:e1:46:b3: 01:db:f7:80:00:c9:66:f8:a4:d0:1b:a4:f0:8f:9c: d6:1a:7c:a6:e4:84:e7:06:cc:0a:ec:34:81:3c:c3: 00:34:5e:82:05:38:f1:93:03:a5:b1:be:51:d5:c6: 9e:73:7a:33:4e:62:e4:71:ad:9a:4f:78:d3:87:ef: c4:eb:ba:92:65:d7:22:fa:cf:e2:9f:0c:e9:4d:30: b5:99:52:d7:36:95:2b:fb:bf:0a:fe:f4:b2:16:5e: a3:29:c9:66:d0:5f:da:fe:cd:e5:3b:d0:8f:28:59: 78:74:b0:7e:74:e4:27:a6:c7:81:99:74:0d:a6:3f: 26:9f:7e:65:47:56:93:5c:11:34:90:3a:37:5b:34: 5b:16:aa:a0:9e:73:3f:35:d5:17:0b:17:3a:b6:b7: b9:c2:14:5f:b9:62:21:c0:a6:e0:df:7a:2b:9f:56: ee:15:87:00:8e:91:c4:65:7a:db:08:cb:78:a1:ce: 93:0f:a9:30:b5:e3:4c:b7:d8:5d:91:a6:8a:90:27: ab:91:6d:dd:71:47:ef:f7:07:56:f7:8b:6f:63:3d: 37:c6:a9:89:dc:f0:ce:36:73:a7:a8:45:15:e6:b7: 38:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6E:FC:A1:AA:74:52:F5:83:B4:33:17:E5:60:CC:93:F8:C9:CB:8D:C5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.44.0/23 Signature Algorithm: sha256WithRSAEncryption 91:6d:d4:e4:5e:c9:08:89:bc:3b:c2:4c:e3:4d:9e:7f:89:e5: 17:87:af:69:6f:a6:b4:ef:be:35:eb:09:3f:3c:fe:e3:8d:65: 27:31:31:6d:ac:22:8b:2f:7e:ce:ea:27:3f:71:e9:46:17:21: a5:a9:4b:75:93:d9:ab:6e:5c:84:8d:dd:09:d5:88:fa:b0:e9: fd:0c:4e:d2:7f:d7:0b:7a:d9:99:69:08:1d:d6:7f:a4:c3:5f: 00:56:1b:ff:35:87:32:18:71:e4:51:8b:0a:73:52:6b:fb:4d: c5:ec:19:a2:45:76:b3:b9:67:76:cb:5d:80:5d:76:db:9d:be: a3:6b:62:31:9a:0a:b8:fc:ac:c0:36:e4:a2:49:e2:48:35:94: 80:82:d1:1e:70:40:7f:a3:3f:87:ae:f5:8c:8a:1c:34:e2:ee: bf:4c:de:14:8e:a1:14:56:5d:cc:2b:31:4a:00:8d:c2:84:53: 2c:11:ec:7d:bd:76:8e:c4:f4:83:59:0d:2c:dc:dc:5e:72:f9: 6f:12:c8:75:2a:25:5a:fe:07:89:5a:22:f7:ee:c5:e3:20:83: 3a:4d:ba:e5:3a:26:23:9f:31:2c:ab:54:f1:d6:79:d3:52:44: f3:f2:ec:e4:56:33:26:50:12:e7:cc:01:ea:7d:fc:9e:ea:09: 81:ed:6a:ec -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUCG16BcX4YtwMnY9TK1axlFoShhAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTkyMVoX DTI3MDUwMjAxMjQyMVowMzExMC8GA1UEAxMoNkVGQ0ExQUE3NDUyRjU4M0I0MzMx N0U1NjBDQzkzRjhDOUNCOERDNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO00h9BzLhUAHZOOXU3C0Kc5uBHTvMFLMp++4UazAdv3gADJZvik0Buk8I+c 1hp8puSE5wbMCuw0gTzDADReggU48ZMDpbG+UdXGnnN6M05i5HGtmk9404fvxOu6 kmXXIvrP4p8M6U0wtZlS1zaVK/u/Cv70shZeoynJZtBf2v7N5TvQjyhZeHSwfnTk J6bHgZl0DaY/Jp9+ZUdWk1wRNJA6N1s0WxaqoJ5zPzXVFwsXOra3ucIUX7liIcCm 4N96K59W7hWHAI6RxGV62wjLeKHOkw+pMLXjTLfYXZGmipAnq5Ft3XFH7/cHVveL b2M9N8apidzwzjZzp6hFFea3OOUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG78oap0UvWDtDMX5WDMk/jJy43FMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk0NmI1MjQ4LWNlMzMtNGU5Ny04ODJmLWY2MTQ1ZjMxOTAyNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85NDZiNTI0 OC1jZTMzLTRlOTctODgyZi1mNjE0NWYzMTkwMjYvMC82RUZDQTFBQTc0NTJGNTgz QjQzMzE3RTU2MENDOTNGOEM5Q0I4REM1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6ksMA0GCSqGSIb3DQEBCwUAA4IBAQCRbdTkXskIibw7wkzjTZ5/ieUXh69p b6a077416wk/PP7jjWUnMTFtrCKLL37O6ic/celGFyGlqUt1k9mrblyEjd0J1Yj6 sOn9DE7Sf9cLetmZaQgd1n+kw18AVhv/NYcyGHHkUYsKc1Jr+03F7BmiRXazuWd2 y12AXXbbnb6ja2Ixmgq4/KzANuSiSeJINZSAgtEecEB/oz+HrvWMihw04u6/TN4U jqEUVl3MKzFKAI3ChFMsEex9vXaOxPSDWQ0s3NxecvlvEsh1KiVa/geJWiL37sXj IIM6TbrlOiYjnzEsq1Tx1nnTUkTz8uzkVjMmUBLnzAHqffye6gmB7Wrs -----END CERTIFICATE-----Generated at Tue May 12 22:47:34 2026 by rpki-client