$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.cer File: 6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.cer (raw, json) Hash identifier: 9oAbBchFumC3uznviEbXJF7WJ5MqSo0d7WPXboBVDV8= Subject key identifier: 6F:B3:C1:3C:FC:02:A5:1A:CF:15:79:05:EE:65:79:4F:B0:7B:A8:FA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 62CD38F72806E22C344ECBF46B016DD7BE3B9927 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:11:25 +0000 Certificate not after: Sun 02 May 2027 01:16:25 +0000 Subordinate resources: IP: 103.169.132.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:cd:38:f7:28:06:e2:2c:34:4e:cb:f4:6b:01:6d:d7:be:3b:99:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:11:25 2026 GMT Not After : May 2 01:16:25 2027 GMT Subject: CN=6FB3C13CFC02A51ACF157905EE65794FB07BA8FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:77:d2:d5:99:8d:32:d3:46:d1:6b:11:78:0c: a5:46:62:89:4b:5f:b9:47:d4:63:9c:8c:73:fd:f4: c6:d6:8c:49:a5:52:d0:6b:46:f5:4e:a0:4b:77:69: 36:36:7f:1f:e7:65:be:b0:5b:49:55:66:f6:d7:8f: 26:1a:84:e2:28:82:f4:af:26:4c:63:75:60:c6:6d: 0e:b6:d7:75:df:eb:2f:94:d3:19:8e:91:23:a2:5d: 32:06:8f:1b:b8:01:1c:c7:0d:63:17:ad:8f:ef:3d: c7:45:87:c8:c4:18:3c:e3:c0:83:21:50:7b:c5:12: 3d:32:03:c0:bc:fa:47:76:a7:20:31:eb:9f:08:6a: f9:db:4b:93:9d:16:df:f2:d5:a1:86:f9:ca:d9:2e: 8a:42:3c:32:5b:c9:fb:26:15:36:57:f3:b6:0f:ff: e4:1e:10:60:b2:ea:03:46:83:42:c6:f8:91:79:ed: cd:85:db:2e:4b:02:d1:d4:1e:ef:19:d2:0c:ba:59: 42:bc:ed:d1:bc:eb:5f:21:cc:f8:f6:9e:31:96:f3: d2:c2:d5:59:31:1c:aa:89:80:a9:8d:a2:e4:00:a1: 2f:94:4b:f9:74:62:01:7c:ab:b6:b6:b5:a2:91:ff: 50:bd:30:a6:b2:c6:3a:49:7d:6f:78:e9:a7:fa:69: 25:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6F:B3:C1:3C:FC:02:A5:1A:CF:15:79:05:EE:65:79:4F:B0:7B:A8:FA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.132.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:b7:7a:02:d9:5c:18:c9:bc:02:ad:1a:35:96:46:f1:24:3a: d3:31:ad:43:c9:e3:d3:06:56:8b:fa:72:92:78:52:dc:d1:4d: 12:27:0c:7e:d3:2d:0c:74:dd:4a:21:27:f0:58:0e:8e:f1:1a: 8c:94:57:8c:7b:99:8b:42:4b:4e:60:f9:b5:ee:02:0f:12:28: 1e:ba:14:a4:37:ca:b0:34:9f:7c:d1:01:09:28:29:e9:04:3b: a6:a4:3f:e8:b2:c0:c4:7a:23:5b:46:06:27:b4:6d:6c:18:84: bd:63:ec:9b:c5:39:d2:46:c0:a7:ed:8d:d1:ca:a2:3a:4b:b1: f2:8b:de:3e:a5:91:97:7c:17:0b:bc:ab:de:81:73:e7:5e:8f: 72:08:d9:eb:44:39:29:14:ef:bb:5b:00:b2:d0:d4:d5:0a:93: a5:e2:62:13:0b:09:cc:fc:1c:7a:13:81:d7:a4:3d:ac:d2:6f: cd:34:ce:be:4d:05:3a:54:61:f8:bb:9c:5c:7b:f7:d7:e4:fc: eb:38:ca:5e:ad:d4:20:97:df:53:cf:67:fe:36:da:21:2a:c0: 31:13:82:c0:38:3d:c1:d6:bb:e3:19:62:93:da:33:d6:79:74: 69:52:83:03:52:83:30:41:58:bb:57:29:f7:88:85:d3:62:67: cc:ef:c3:45 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYs049ygG4iw0Tsv0awFt1747mScwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTEyNVoX DTI3MDUwMjAxMTYyNVowMzExMC8GA1UEAxMoNkZCM0MxM0NGQzAyQTUxQUNGMTU3 OTA1RUU2NTc5NEZCMDdCQThGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOF30tWZjTLTRtFrEXgMpUZiiUtfuUfUY5yMc/30xtaMSaVS0GtG9U6gS3dp NjZ/H+dlvrBbSVVm9tePJhqE4iiC9K8mTGN1YMZtDrbXdd/rL5TTGY6RI6JdMgaP G7gBHMcNYxetj+89x0WHyMQYPOPAgyFQe8USPTIDwLz6R3anIDHrnwhq+dtLk50W 3/LVoYb5ytkuikI8MlvJ+yYVNlfztg//5B4QYLLqA0aDQsb4kXntzYXbLksC0dQe 7xnSDLpZQrzt0bzrXyHM+PaeMZbz0sLVWTEcqomAqY2i5AChL5RL+XRiAXyrtra1 opH/UL0wprLGOkl9b3jpp/ppJf0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG+zwTz8AqUazxV5Be5leU+we6j6MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg3ZDIwMzFiLTI3NjEtNGMzNi1iNjkwLTViNjlkMTU2OWJhZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84N2QyMDMx Yi0yNzYxLTRjMzYtYjY5MC01YjY5ZDE1NjliYWUvMC82RkIzQzEzQ0ZDMDJBNTFB Q0YxNTc5MDVFRTY1Nzk0RkIwN0JBOEZBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6mEMA0GCSqGSIb3DQEBCwUAA4IBAQBct3oC2VwYybwCrRo1lkbxJDrTMa1D yePTBlaL+nKSeFLc0U0SJwx+0y0MdN1KISfwWA6O8RqMlFeMe5mLQktOYPm17gIP EigeuhSkN8qwNJ980QEJKCnpBDumpD/ossDEeiNbRgYntG1sGIS9Y+ybxTnSRsCn 7Y3RyqI6S7Hyi94+pZGXfBcLvKvegXPnXo9yCNnrRDkpFO+7WwCy0NTVCpOl4mIT CwnM/Bx6E4HXpD2s0m/NNM6+TQU6VGH4u5xce/fX5PzrOMperdQgl99Tz2f+Ntoh KsAxE4LAOD3B1rvjGWKT2jPWeXRpUoMDUoMwQVi7Vyn3iIXTYmfM78NF -----END CERTIFICATE-----Generated at Tue May 12 22:09:59 2026 by rpki-client