$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A6E683651BBB97D321A42D48AA16ED775E81B1C4.cer File: A6E683651BBB97D321A42D48AA16ED775E81B1C4.cer (raw, json) Hash identifier: DhQczaFXNHRL3mnOZdW+iWC7pHMTQOuF+FFzX3AzF1s= Subject key identifier: A6:E6:83:65:1B:BB:97:D3:21:A4:2D:48:AA:16:ED:77:5E:81:B1:C4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3A1140328B077336AD55E0E499952CE152A1EC35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:02:33 +0000 Certificate not after: Sun 02 May 2027 01:07:33 +0000 Subordinate resources: IP: 103.178.2.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:11:40:32:8b:07:73:36:ad:55:e0:e4:99:95:2c:e1:52:a1:ec:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:02:33 2026 GMT Not After : May 2 01:07:33 2027 GMT Subject: CN=A6E683651BBB97D321A42D48AA16ED775E81B1C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9c:2e:a3:6c:91:d4:ef:b7:7d:8b:b4:6e:0d: b5:a3:8f:41:ea:7f:a9:f8:4f:6e:41:4c:c0:9b:cf: 8f:32:02:b6:1e:8d:1f:3f:72:15:32:27:e2:c3:2b: 47:80:ae:54:56:75:d9:6b:54:80:a5:dc:72:ec:9b: 94:80:a0:bd:08:6b:cd:38:a8:b2:a3:e5:50:16:ea: 64:79:f5:8f:69:88:f0:b1:5b:fe:a6:3e:52:28:0c: d0:56:b7:b2:d1:82:b6:6f:9a:35:46:04:a9:1c:8e: fa:0e:70:27:e3:03:ef:41:c7:8d:bb:72:6b:78:31: 3c:a5:b7:e7:f2:6b:74:dc:79:ea:a4:13:ed:9c:3c: 4a:b7:57:7b:7c:7d:3f:6f:1f:c0:a5:90:b1:e7:7a: 64:ec:9c:33:65:2c:a7:ca:da:dd:f4:86:76:61:97: d3:91:fd:8d:3e:ef:4d:53:9e:d2:2c:4c:86:6c:b8: 04:61:98:23:36:a2:e1:3c:2c:ff:9c:69:68:cc:35: 12:2a:35:05:20:91:f4:1d:4d:72:b7:ac:95:a2:9c: 38:2e:13:da:6d:a6:39:11:34:13:6a:1e:b1:5f:fd: 77:36:7a:0d:19:3b:9a:ef:52:ce:ae:e1:3d:28:06: e5:0d:bd:6d:89:aa:44:ce:6b:d3:ee:b1:7f:93:25: fa:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A6:E6:83:65:1B:BB:97:D3:21:A4:2D:48:AA:16:ED:77:5E:81:B1:C4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.2.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:99:24:92:44:44:d3:aa:58:4b:39:55:1c:a6:d5:a4:6b:49: df:80:ba:1e:c2:e5:3c:5f:e7:80:9c:de:d1:a6:6b:3a:14:00: 0f:91:4c:ce:89:06:64:a0:e0:98:59:3a:92:9a:fb:55:ee:6a: d6:fa:2d:05:ea:49:75:79:5c:d2:5a:08:6c:dc:f1:a8:a5:07: 45:2d:91:25:ef:f2:26:56:ce:b1:1f:da:ac:75:3f:86:c3:dd: 5b:58:45:46:3a:30:f0:98:f3:ac:f7:c4:33:81:dc:de:95:a2: 7a:ab:5b:68:75:35:cd:b5:1a:d2:19:18:61:c9:12:d5:ff:89: 34:25:90:e8:ec:20:ff:82:f8:57:8f:3c:e8:ce:03:7a:39:ff: 57:d6:1c:a5:b6:e4:d8:bb:d2:d5:f1:7b:65:c0:38:a2:5a:02: de:2c:2c:51:a8:2a:28:e1:45:66:db:5d:81:e2:d3:3a:12:bb: ba:1b:5f:b9:51:c8:47:c6:9b:65:9c:db:85:2b:9f:cd:44:7f: 78:ca:35:94:1c:8a:6e:bb:f9:8f:0e:7e:23:a2:0a:34:aa:a3: 35:85:15:b9:0c:df:9e:35:8a:6f:f4:86:7e:ce:fd:85:4e:1e: 6a:3e:2a:10:6f:0b:9d:1e:a2:07:a0:68:bf:56:09:26:09:25: 07:44:f2:f1 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUOhFAMosHczatVeDkmZUs4VKh7DUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDIzM1oX DTI3MDUwMjAxMDczM1owMzExMC8GA1UEAxMoQTZFNjgzNjUxQkJCOTdEMzIxQTQy RDQ4QUExNkVENzc1RTgxQjFDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJecLqNskdTvt32LtG4NtaOPQep/qfhPbkFMwJvPjzICth6NHz9yFTIn4sMr R4CuVFZ12WtUgKXccuyblICgvQhrzTiosqPlUBbqZHn1j2mI8LFb/qY+UigM0Fa3 stGCtm+aNUYEqRyO+g5wJ+MD70HHjbtya3gxPKW35/JrdNx56qQT7Zw8SrdXe3x9 P28fwKWQsed6ZOycM2Usp8ra3fSGdmGX05H9jT7vTVOe0ixMhmy4BGGYIzai4Tws /5xpaMw1Eio1BSCR9B1NcreslaKcOC4T2m2mORE0E2oesV/9dzZ6DRk7mu9Szq7h PSgG5Q29bYmqRM5r0+6xf5Ml+gkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKbmg2Ubu5fTIaQtSKoW7XdegbHEMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdiZmFlNTY1LTQxMTQtNDQzNC05NDBkLTdjMDE5MjhjOGFiMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83YmZhZTU2 NS00MTE0LTQ0MzQtOTQwZC03YzAxOTI4YzhhYjEvMC9BNkU2ODM2NTFCQkI5N0Qz MjFBNDJENDhBQTE2RUQ3NzVFODFCMUM0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7ICMA0GCSqGSIb3DQEBCwUAA4IBAQA6mSSSRETTqlhLOVUcptWka0nfgLoe wuU8X+eAnN7Rpms6FAAPkUzOiQZkoOCYWTqSmvtV7mrW+i0F6kl1eVzSWghs3PGo pQdFLZEl7/ImVs6xH9qsdT+Gw91bWEVGOjDwmPOs98QzgdzelaJ6q1todTXNtRrS GRhhyRLV/4k0JZDo7CD/gvhXjzzozgN6Of9X1hyltuTYu9LV8XtlwDiiWgLeLCxR qCoo4UVm212B4tM6Eru6G1+5UchHxptlnNuFK5/NRH94yjWUHIpuu/mPDn4jogo0 qqM1hRW5DN+eNYpv9IZ+zv2FTh5qPioQbwudHqIHoGi/VgkmCSUHRPLx -----END CERTIFICATE-----Generated at Wed May 13 02:37:53 2026 by rpki-client