$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.cer File: 6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.cer (raw, json) Hash identifier: gG3kkEGIz6pDS41sQtkzL5jy+SAf5Z8cViQanyEKh6E= Subject key identifier: 6F:52:B6:F5:7C:8A:41:C8:D4:72:9A:32:13:AC:A8:CD:7F:6F:41:FD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6B0F450F46325BEBD44CEB47FFB9078B90933A01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:47:15 +0000 Certificate not after: Sat 01 May 2027 23:52:15 +0000 Subordinate resources: IP: 103.120.40.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:0f:45:0f:46:32:5b:eb:d4:4c:eb:47:ff:b9:07:8b:90:93:3a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:47:15 2026 GMT Not After : May 1 23:52:15 2027 GMT Subject: CN=6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c0:b4:b1:7d:ad:a2:26:64:47:25:5e:ba:1a: bb:fb:14:81:0a:8b:9a:74:c0:d6:ad:22:b9:4d:a7: dc:63:ba:28:31:34:1f:75:7a:13:09:4a:d3:90:91: e2:0e:eb:3a:60:55:dc:5e:64:84:a1:0c:73:03:52: ab:a7:da:bc:eb:40:c0:1c:07:7a:cf:4d:b9:83:21: 33:c1:55:6d:9d:1a:4c:65:a9:bb:8b:33:55:f8:1f: 37:71:ff:76:cd:6d:28:4f:6c:28:f3:d1:be:28:f9: 68:e0:c9:98:70:96:d6:33:e1:f1:06:f6:dd:01:e2: bb:dd:52:5b:d5:e3:70:e1:6c:4a:4d:eb:fe:8d:fe: 2c:fd:a8:fa:87:05:29:ee:3d:17:e5:55:9d:06:88: 60:1f:1b:22:eb:19:20:0a:ff:e1:3d:74:7f:a6:9c: c4:72:fa:b3:88:80:a4:c7:af:eb:96:c7:94:4e:ef: e2:11:dd:82:0b:ba:54:33:5f:29:31:9e:70:0c:08: 5d:cc:76:35:e2:30:da:42:38:41:91:bc:35:7c:a2: b9:74:32:47:3a:c9:a6:0e:f7:27:81:e4:fa:00:1d: 3d:06:ae:ee:70:e7:c0:98:70:f0:14:bd:d8:91:b1: ec:8f:93:ea:e7:85:9a:70:09:09:85:ac:37:57:68: a5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6F:52:B6:F5:7C:8A:41:C8:D4:72:9A:32:13:AC:A8:CD:7F:6F:41:FD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.40.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:e5:a7:80:01:41:a1:f7:7e:58:de:50:f3:6e:a6:97:ca:6a: 4d:80:67:46:e5:27:9c:ca:34:50:94:9d:ae:13:f6:5d:f9:9c: 5e:e1:cc:67:e0:9e:31:0b:83:3e:70:3d:21:f0:d8:13:65:7a: 97:d2:7d:3c:8d:08:1d:83:5c:b5:f2:51:fd:8e:bd:32:6a:65: 31:72:fa:80:77:c6:83:02:2b:78:d0:5f:2b:60:77:da:de:ee: 3f:0b:fb:9e:32:e7:55:74:f9:16:3d:24:46:93:0e:a4:46:0a: f0:86:22:90:0f:be:98:09:28:61:e6:70:35:30:ad:62:b7:f4: 7f:43:91:95:dc:aa:d6:39:64:3f:00:09:e5:21:6d:03:ff:df: 2a:c3:30:f3:32:e8:42:eb:b2:39:86:d5:be:ab:91:71:fe:a7: 26:49:a5:14:8c:0b:48:df:cf:8f:24:00:8a:8d:9d:80:f3:55: 36:85:c1:f8:c2:1e:dc:65:a5:64:4a:60:30:da:25:ea:54:7e: 85:18:b6:c9:f9:66:70:ac:ef:74:a1:09:b6:bd:68:a8:a1:8f: a8:fb:d7:e0:5b:6d:02:f7:43:7d:d4:ef:97:ca:95:50:b0:c5: 2e:24:fc:b4:bf:5e:bd:26:b7:7d:f8:23:bb:41:c0:44:1e:97: 8b:bc:c7:13 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUaw9FD0YyW+vUTOtH/7kHi5CTOgEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDcxNVoX DTI3MDUwMTIzNTIxNVowMzExMC8GA1UEAxMoNkY1MkI2RjU3QzhBNDFDOEQ0NzI5 QTMyMTNBQ0E4Q0Q3RjZGNDFGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjAtLF9raImZEclXroau/sUgQqLmnTA1q0iuU2n3GO6KDE0H3V6EwlK05CR 4g7rOmBV3F5khKEMcwNSq6favOtAwBwHes9NuYMhM8FVbZ0aTGWpu4szVfgfN3H/ ds1tKE9sKPPRvij5aODJmHCW1jPh8Qb23QHiu91SW9XjcOFsSk3r/o3+LP2o+ocF Ke49F+VVnQaIYB8bIusZIAr/4T10f6acxHL6s4iApMev65bHlE7v4hHdggu6VDNf KTGecAwIXcx2NeIw2kI4QZG8NXyiuXQyRzrJpg73J4Hk+gAdPQau7nDnwJhw8BS9 2JGx7I+T6ueFmnAJCYWsN1dopUMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG9StvV8ikHI1HKaMhOsqM1/b0H9MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBiYjhlNjEyLTdiYjMtNDhkZS05NjlkLTcxYjQ1ZjQ2YTE2MS8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wYmI4ZTYx Mi03YmIzLTQ4ZGUtOTY5ZC03MWI0NWY0NmExNjEvMS82RjUyQjZGNTdDOEE0MUM4 RDQ3MjlBMzIxM0FDQThDRDdGNkY0MUZELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ3goMA0GCSqGSIb3DQEBCwUAA4IBAQBv5aeAAUGh935Y3lDzbqaXympNgGdG 5SecyjRQlJ2uE/Zd+Zxe4cxn4J4xC4M+cD0h8NgTZXqX0n08jQgdg1y18lH9jr0y amUxcvqAd8aDAit40F8rYHfa3u4/C/ueMudVdPkWPSRGkw6kRgrwhiKQD76YCShh 5nA1MK1it/R/Q5GV3KrWOWQ/AAnlIW0D/98qwzDzMuhC67I5htW+q5Fx/qcmSaUU jAtI38+PJACKjZ2A81U2hcH4wh7cZaVkSmAw2iXqVH6FGLbJ+WZwrO90oQm2vWio oY+o+9fgW20C90N91O+XypVQsMUuJPy0v169Jrd9+CO7QcBEHpeLvMcT -----END CERTIFICATE-----Generated at Tue May 12 22:10:14 2026 by rpki-client