$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer File: A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer (raw, json) Hash identifier: LhUyVkvmab9d0SmIB0DEHB1AlEgyUZH1lUsZMepbU/o= Subject key identifier: A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 10BF64A726A643520BA4CAC24C87C9E92DF546CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:00:09 +0000 Certificate not after: Sun 02 May 2027 00:05:09 +0000 Subordinate resources: IP: 103.135.72.0/22 IP: 175.111.112.0/21 IP: 2001:df0:df::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:bf:64:a7:26:a6:43:52:0b:a4:ca:c2:4c:87:c9:e9:2d:f5:46:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:00:09 2026 GMT Not After : May 2 00:05:09 2027 GMT Subject: CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a3:78:e2:38:06:5c:15:1e:06:97:68:b7:82: 29:a8:06:34:70:64:f7:16:3b:48:1e:04:4b:24:4b: ca:12:95:32:30:3a:76:32:72:27:5c:8d:e8:bd:a4: 3b:7f:2e:1b:e8:c7:a5:4a:8e:72:c9:0f:6e:f7:63: b3:25:54:2a:53:77:c1:61:5d:a2:19:cf:53:d7:c8: f2:7b:14:50:70:61:bb:88:fd:d8:31:aa:55:7f:65: e5:bb:03:62:ab:8d:1a:e2:ec:13:4b:e9:8a:2e:88: b3:46:f8:56:0b:df:0b:d9:27:3e:94:d6:d2:da:a0: 43:35:98:db:05:69:3e:80:a6:93:82:ac:7f:45:e3: dc:48:23:d4:c2:dd:bb:4c:f7:d0:b7:55:8f:b8:6d: 18:6a:44:c2:04:f3:9c:82:47:29:74:e3:b0:b9:4a: ec:e4:6a:3a:f6:f6:85:a5:41:49:fc:3b:07:18:76: 55:6f:47:8b:f6:51:6f:fd:a9:8f:f3:c4:7f:9b:b6: 90:1a:e0:49:7d:74:ec:1f:de:48:3b:93:5b:b2:1b: c5:d1:2b:53:69:37:0c:fc:a6:70:af:c0:57:82:45: 22:26:06:c0:af:8c:82:48:68:35:c3:f1:46:32:d8: d8:90:f9:84:86:6b:ac:d7:83:17:fc:50:05:04:ed: 00:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.135.72.0/22 175.111.112.0/21 IPv6: 2001:df0:df::/48 Signature Algorithm: sha256WithRSAEncryption 19:dc:50:11:00:9c:0a:70:c4:12:89:4e:32:44:0a:05:8d:04: 7a:d1:4c:d9:c0:d8:f5:a5:fb:95:66:a6:4f:2a:6a:3e:29:a6: 0d:c7:c9:4a:65:22:b1:0f:55:da:da:1e:8f:da:a3:2f:58:8a: d3:10:21:d5:bf:fc:11:6e:36:a2:05:d3:a3:78:94:87:af:6e: a0:5b:47:84:df:ba:70:17:5d:fb:3e:53:10:68:6e:04:8b:b5: 69:68:3c:ae:04:28:e2:f6:11:5b:20:11:6a:a8:c5:59:1e:c4: be:62:c2:d8:a3:31:c4:fe:a7:00:f7:16:42:c9:2b:82:e1:44: 39:f3:f0:72:93:e2:d5:7a:5e:a7:25:a0:6a:93:c9:26:3b:e7: d8:d9:6b:bc:a1:3d:fe:06:f6:09:95:ad:af:a1:b5:c7:a5:dd: 77:a9:85:17:95:63:4e:be:1b:4e:9d:15:cf:76:41:18:56:aa: 90:e9:a2:4e:1c:f1:28:80:41:e2:34:6d:93:20:c0:6e:c2:8c: 8e:ea:39:06:80:fc:97:b6:90:78:7e:8a:0b:46:e8:fd:57:6a: 7e:e3:8a:c1:df:4a:07:2c:f0:ef:c4:8a:b9:6e:4e:30:31:d4: be:cb:58:d2:fc:77:b9:e3:fc:73:56:e6:0b:54:74:9d:18:1f: 2d:3e:ac:0b -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUEL9kpyamQ1ILpMrCTIfJ6S31RswwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDAwOVoX DTI3MDUwMjAwMDUwOVowMzExMC8GA1UEAxMoQTY2OEJDREE4OUFEMDM1RDQ5NkI2 NENGMjcyNDVBNUYyRTNCMDc5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALyjeOI4BlwVHgaXaLeCKagGNHBk9xY7SB4ESyRLyhKVMjA6djJyJ1yN6L2k O38uG+jHpUqOcskPbvdjsyVUKlN3wWFdohnPU9fI8nsUUHBhu4j92DGqVX9l5bsD YquNGuLsE0vpii6Is0b4VgvfC9knPpTW0tqgQzWY2wVpPoCmk4Ksf0Xj3Egj1MLd u0z30LdVj7htGGpEwgTznIJHKXTjsLlK7ORqOvb2haVBSfw7Bxh2VW9Hi/ZRb/2p j/PEf5u2kBrgSX107B/eSDuTW7IbxdErU2k3DPymcK/AV4JFIiYGwK+MgkhoNcPx RjLY2JD5hIZrrNeDF/xQBQTtAKsCAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKZovNqJrQNdSWtkzyckWl8uOwecMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFmZjRlYmNkLTI5Y2YtNGVlYy1hOTJhLWQxMTM2ZjVmOTkzNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xZmY0ZWJj ZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMC9BNjY4QkNEQTg5QUQwMzVE NDk2QjY0Q0YyNzI0NUE1RjJFM0IwNzlDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQCZ4dIAwQDr29wMA8EAgACMAkDBwAgAQ3wAN8wDQYJKoZIhvcNAQELBQADggEB ABncUBEAnApwxBKJTjJECgWNBHrRTNnA2PWl+5Vmpk8qaj4ppg3HyUplIrEPVdra Ho/aoy9YitMQIdW//BFuNqIF06N4lIevbqBbR4TfunAXXfs+UxBobgSLtWloPK4E KOL2EVsgEWqoxVkexL5iwtijMcT+pwD3FkLJK4LhRDnz8HKT4tV6XqcloGqTySY7 59jZa7yhPf4G9gmVra+htcel3XephReVY06+G06dFc92QRhWqpDpok4c8SiAQeI0 bZMgwG7CjI7qOQaA/Je2kHh+igtG6P1Xan7jisHfSgcs8O/EirluTjAx1L7LWNL8 d7nj/HNW5gtUdJ0YHy0+rAs= -----END CERTIFICATE-----Generated at Tue May 12 22:45:54 2026 by rpki-client