$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer File: A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer (raw, json) Hash identifier: TyMA8QNZ+8jbQoLZQgFmDQ+ZmZ9YVocTRuPoCF/Rjfo= Subject key identifier: A6:AF:D6:5A:C6:6D:4E:B7:02:7A:ED:5F:89:8E:8E:CD:80:79:F4:62 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 036FB5ECD5A3A1D752ACB1E978E6A44988EDEB65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft caRepository: rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:44:17 +0000 Certificate not after: Sun 02 May 2027 00:49:17 +0000 Subordinate resources: IP: 45.121.40.0/22 IP: 103.10.80.0/23 IP: 103.61.118.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:6f:b5:ec:d5:a3:a1:d7:52:ac:b1:e9:78:e6:a4:49:88:ed:eb:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:44:17 2026 GMT Not After : May 2 00:49:17 2027 GMT Subject: CN=A6AFD65AC66D4EB7027AED5F898E8ECD8079F462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:79:8d:07:d1:0d:cd:7e:3e:86:5c:b2:50:b4: 11:97:7e:c0:42:0d:7b:51:75:2e:34:21:90:54:d0: 3e:3a:e4:e4:d0:32:dd:db:fd:3d:04:2b:d4:4f:76: 60:9b:1a:f4:01:8c:67:0d:0c:4b:ab:60:f0:3d:b1: 2e:53:16:32:18:71:2f:6e:e1:73:57:8f:62:29:6d: 62:ee:dc:8d:a1:ff:10:66:05:76:73:ee:7e:60:22: e0:58:68:5e:22:e2:94:a8:eb:7f:1c:7f:81:3d:b1: 5b:b8:57:9f:d4:8d:5e:39:47:1c:93:25:33:d4:28: 0b:96:52:ab:c7:50:59:4d:8b:c8:a7:c8:f1:52:3f: 7b:9b:1e:d7:20:a2:d0:f6:62:97:e4:19:7f:f8:d7: 83:0d:99:9a:07:4d:ee:6a:d5:16:c7:0d:0a:20:4b: ec:34:d1:0c:66:90:0d:15:ac:53:3b:20:ec:d9:4c: 1d:32:0c:43:d3:4e:0e:37:ba:50:5e:84:c9:eb:23: 12:72:5f:97:e6:73:40:0e:58:42:d1:c3:aa:8d:55: 2d:cb:1e:d9:ab:41:e1:59:2b:00:1e:c1:7d:90:fa: 87:21:af:43:d8:45:c9:ae:45:52:c8:ae:41:0a:0d: 21:03:f7:12:82:58:cc:5d:4b:9b:3c:5f:63:84:e9: 90:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A6:AF:D6:5A:C6:6D:4E:B7:02:7A:ED:5F:89:8E:8E:CD:80:79:F4:62 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.121.40.0/22 103.10.80.0/23 103.61.118.0/23 Signature Algorithm: sha256WithRSAEncryption 19:59:d5:d7:71:16:3d:e6:56:3b:a5:33:35:01:39:da:61:f4: c0:84:4b:5c:50:fa:dd:ad:3b:59:f1:7a:6f:2a:ac:98:d7:bd: 76:25:54:bf:1c:a6:77:30:5a:7d:a7:13:d1:ed:07:27:7a:db: 0d:51:b9:6e:a5:52:e2:6f:a3:14:34:9c:82:74:1d:b0:27:6b: 93:50:d2:0b:01:11:4e:96:49:5e:15:82:56:ef:de:94:55:b1: 6c:cb:0c:7d:18:8e:f4:a7:06:b1:36:0d:1f:9d:82:6a:c0:3c: af:46:89:3c:1c:d1:bf:da:b5:6e:8d:9b:a8:40:17:af:50:a4: 4c:5a:3c:1a:d7:6d:1d:1d:78:c6:dd:6f:c7:9a:7f:94:ef:e9: d6:37:06:d5:dd:4b:48:ed:ac:7e:b8:60:6e:52:03:8d:85:86: f3:24:9f:1d:81:4c:75:79:10:36:4e:46:dc:d6:7b:58:9a:67: 9d:46:4c:52:44:2a:aa:62:53:93:ee:8c:d7:f5:0f:62:5f:37: 93:23:3a:e2:e0:95:48:eb:21:11:d2:fa:3e:d4:0f:e6:96:46: a9:26:58:d4:78:ab:a2:2f:af:c1:6f:c4:e6:2a:27:5a:00:98: 02:87:fc:0c:6a:af:23:46:9c:ec:8c:6d:3a:a5:a2:01:c7:35: 57:9c:ae:45 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUA2+17NWjoddSrLHpeOakSYjt62UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDQxN1oX DTI3MDUwMjAwNDkxN1owMzExMC8GA1UEAxMoQTZBRkQ2NUFDNjZENEVCNzAyN0FF RDVGODk4RThFQ0Q4MDc5RjQ2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMl5jQfRDc1+PoZcslC0EZd+wEINe1F1LjQhkFTQPjrk5NAy3dv9PQQr1E92 YJsa9AGMZw0MS6tg8D2xLlMWMhhxL27hc1ePYiltYu7cjaH/EGYFdnPufmAi4Fho XiLilKjrfxx/gT2xW7hXn9SNXjlHHJMlM9QoC5ZSq8dQWU2LyKfI8VI/e5se1yCi 0PZil+QZf/jXgw2ZmgdN7mrVFscNCiBL7DTRDGaQDRWsUzsg7NlMHTIMQ9NODje6 UF6EyesjEnJfl+ZzQA5YQtHDqo1VLcse2atB4VkrAB7BfZD6hyGvQ9hFya5FUsiu QQoNIQP3EoJYzF1LmzxfY4TpkKMCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKav1lrGbU63AnrtX4mOjs2AefRiMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzYwODg2ODA1LTNiODUtNGM1Yi05YjZhLWQ2MmFkNTZhNjZhYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82MDg4Njgw NS0zYjg1LTRjNWItOWI2YS1kNjJhZDU2YTY2YWMvMC9BNkFGRDY1QUM2NkQ0RUI3 MDI3QUVENUY4OThFOEVDRDgwNzlGNDYyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATAS AwQCLXkoAwQBZwpQAwQBZz12MA0GCSqGSIb3DQEBCwUAA4IBAQAZWdXXcRY95lY7 pTM1ATnaYfTAhEtcUPrdrTtZ8XpvKqyY1712JVS/HKZ3MFp9pxPR7QcnetsNUblu pVLib6MUNJyCdB2wJ2uTUNILARFOlkleFYJW796UVbFsywx9GI70pwaxNg0fnYJq wDyvRok8HNG/2rVujZuoQBevUKRMWjwa120dHXjG3W/Hmn+U7+nWNwbV3UtI7ax+ uGBuUgONhYbzJJ8dgUx1eRA2Tkbc1ntYmmedRkxSRCqqYlOT7ozX9Q9iXzeTIzri 4JVI6yER0vo+1A/mlkapJljUeKuiL6/Bb8TmKidaAJgCh/wMaq8jRpzsjG06paIB xzVXnK5F -----END CERTIFICATE-----Generated at Tue May 12 22:39:21 2026 by rpki-client