$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.cer File: A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.cer (raw, json) Hash identifier: QE+tUFxf6xI19NC7mTXRn6CMxTYuKbZN6KgPVDJ2mq0= Subject key identifier: A6:3A:F0:0E:CA:AA:35:92:90:20:D6:F9:F7:FA:A2:67:3B:1B:47:AF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5C0BC123BB4A93BC95BF505E8A6EE95CA5C04465 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:43:23 +0000 Certificate not after: Sat 01 May 2027 23:48:23 +0000 Subordinate resources: IP: 103.137.144.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:0b:c1:23:bb:4a:93:bc:95:bf:50:5e:8a:6e:e9:5c:a5:c0:44:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:43:23 2026 GMT Not After : May 1 23:48:23 2027 GMT Subject: CN=A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:85:80:45:ab:e5:7d:18:62:3d:5e:e1:71:10: d8:37:13:e2:6b:49:5a:ae:62:65:70:05:99:aa:85: e8:35:21:d1:8e:f9:47:86:2a:7a:aa:29:e2:39:2c: 14:bb:9b:a2:6e:df:98:f8:63:11:19:2d:5f:ea:08: 7a:f4:87:7c:cf:97:6f:6c:6e:62:ac:95:eb:50:b0: c6:ad:a0:97:51:b0:2c:f2:d6:74:d2:07:86:3c:21: 70:86:f6:f9:67:23:5f:e4:df:e3:65:08:70:c9:d7: 79:0b:14:c9:06:68:c0:f0:a0:f9:6d:b4:c3:28:82: e2:00:76:b7:3a:5c:8a:bc:8b:0b:f8:b3:87:5e:96: 91:a7:03:ce:ee:02:20:4a:3c:86:4d:38:fb:15:04: 7e:bd:81:17:cd:5c:b4:a2:e4:74:6b:ec:cd:58:a0: b5:42:c5:ea:27:5f:07:b0:c8:77:f3:9b:72:f5:da: 29:49:11:73:7a:b2:40:1a:91:59:a0:75:04:e3:af: 01:b0:37:74:b1:f4:4f:ab:f1:01:91:47:68:38:94: c4:a3:d6:cb:d6:fb:a2:20:26:a0:4e:90:27:c8:50: 28:0a:3a:af:32:a2:47:76:00:4e:42:c3:b1:ba:82: 80:95:9a:2c:15:d5:a9:2f:11:4d:ac:4d:f7:e4:df: d4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A6:3A:F0:0E:CA:AA:35:92:90:20:D6:F9:F7:FA:A2:67:3B:1B:47:AF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.137.144.0/23 Signature Algorithm: sha256WithRSAEncryption 19:a9:77:68:f8:bc:a0:1c:a7:a9:b4:3e:66:3e:2d:a7:05:80: 3a:a8:e1:d5:34:31:8c:17:5d:3d:98:14:fd:ec:56:0f:92:25: 74:54:e6:0b:52:87:63:b1:cd:07:7a:7d:e3:26:38:eb:a6:65: 58:41:91:07:d1:5e:27:1a:ba:a5:d8:5d:3c:5f:d8:ff:04:85: e1:cc:d9:c9:a8:61:03:54:af:e1:08:1f:5f:fc:bd:cc:f4:eb: 3a:0a:aa:c4:99:a1:e8:b5:b7:3d:11:dd:11:ca:95:fa:33:82: 4d:ba:3a:34:8a:41:08:62:33:fa:e2:ae:00:7a:1b:fd:5e:ac: 16:14:8c:c0:cc:f1:05:dd:03:fa:27:f6:83:84:62:60:5c:66: a7:07:94:9d:20:d0:c9:5c:e1:dc:64:5d:67:de:e0:3d:68:9b: 9c:a0:7e:03:d0:21:7c:6b:5e:79:ba:f3:58:1d:bb:5a:ba:87: 39:59:e6:a6:83:9a:75:fa:e0:5f:40:c1:29:0b:fb:ed:cf:7a: 8d:fa:65:07:7d:09:fc:4b:aa:34:a5:d7:e8:46:62:7c:bb:02: 70:1d:b6:ab:86:3c:53:33:0a:e1:27:a4:f1:2f:5a:14:8e:78: 88:ae:7b:0b:fb:ae:b2:6f:49:1d:22:01:39:28:47:e8:a7:7e: b3:ad:51:9b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUXAvBI7tKk7yVv1Beim7pXKXARGUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDMyM1oX DTI3MDUwMTIzNDgyM1owMzExMC8GA1UEAxMoQTYzQUYwMEVDQUFBMzU5MjkwMjBE NkY5RjdGQUEyNjczQjFCNDdBRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMaFgEWr5X0YYj1e4XEQ2DcT4mtJWq5iZXAFmaqF6DUh0Y75R4Yqeqop4jks FLubom7fmPhjERktX+oIevSHfM+Xb2xuYqyV61Cwxq2gl1GwLPLWdNIHhjwhcIb2 +WcjX+Tf42UIcMnXeQsUyQZowPCg+W20wyiC4gB2tzpciryLC/izh16WkacDzu4C IEo8hk04+xUEfr2BF81ctKLkdGvszVigtULF6idfB7DId/ObcvXaKUkRc3qyQBqR WaB1BOOvAbA3dLH0T6vxAZFHaDiUxKPWy9b7oiAmoE6QJ8hQKAo6rzKiR3YATkLD sbqCgJWaLBXVqS8RTaxN9+Tf1E8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKY68A7KqjWSkCDW+ff6omc7G0evMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzA1NDYxODNjLWQ5ZWYtNGMzMy1iZTk5LWU4NGJlZGIxMGI2OC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wNTQ2MTgz Yy1kOWVmLTRjMzMtYmU5OS1lODRiZWRiMTBiNjgvMC9BNjNBRjAwRUNBQUEzNTky OTAyMEQ2RjlGN0ZBQTI2NzNCMUI0N0FGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ4mQMA0GCSqGSIb3DQEBCwUAA4IBAQAZqXdo+LygHKeptD5mPi2nBYA6qOHV NDGMF109mBT97FYPkiV0VOYLUodjsc0Hen3jJjjrpmVYQZEH0V4nGrql2F08X9j/ BIXhzNnJqGEDVK/hCB9f/L3M9Os6CqrEmaHotbc9Ed0RypX6M4JNujo0ikEIYjP6 4q4Aehv9XqwWFIzAzPEF3QP6J/aDhGJgXGanB5SdINDJXOHcZF1n3uA9aJucoH4D 0CF8a155uvNYHbtauoc5Weamg5p1+uBfQMEpC/vtz3qN+mUHfQn8S6o0pdfoRmJ8 uwJwHbarhjxTMwrhJ6TxL1oUjniIrnsL+66yb0kdIgE5KEfop36zrVGb -----END CERTIFICATE-----Generated at Tue May 12 22:10:18 2026 by rpki-client