$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.cer File: B6F1A042F58FD773EC6B7221470156F5EBD0CE45.cer (raw, json) Hash identifier: r5Z6HRpV28/gNEb89TrjRoX37qa//tinbYJMUpOKfng= Subject key identifier: B6:F1:A0:42:F5:8F:D7:73:EC:6B:72:21:47:01:56:F5:EB:D0:CE:45 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1D10B715925DCB226E3FE1F28F148BCEDD31B7F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:41:12 +0000 Certificate not after: Sun 02 May 2027 02:46:12 +0000 Subordinate resources: IP: 203.175.102.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:10:b7:15:92:5d:cb:22:6e:3f:e1:f2:8f:14:8b:ce:dd:31:b7:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:41:12 2026 GMT Not After : May 2 02:46:12 2027 GMT Subject: CN=B6F1A042F58FD773EC6B7221470156F5EBD0CE45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b0:e3:bc:05:a1:1e:0e:e5:e6:01:16:f3:2b: ff:13:4b:bb:37:2a:0f:3d:e5:9f:77:08:9b:91:d6: fc:e8:7d:a6:e0:16:fe:19:55:cf:7b:9a:1c:92:cc: 4a:34:17:2c:15:6b:e8:3a:59:7b:1b:e1:be:4f:6f: 94:81:10:91:f9:92:f2:ee:61:f4:cb:83:2b:40:84: 33:d4:43:a7:7a:51:8c:dc:15:76:81:07:7d:be:14: 6d:af:06:ad:05:55:d5:aa:7b:b8:89:bd:c1:6f:c9: bb:6d:9f:e0:f2:a3:ba:48:2f:85:62:05:34:e6:74: b4:99:26:4f:90:da:14:8d:a5:69:9b:09:c6:88:7e: 68:57:e4:9a:0a:d8:2d:26:73:b9:c1:9d:3e:17:b2: b2:ff:b4:d1:ef:e5:4b:2a:18:b8:f2:18:81:2e:91: 05:a1:7d:19:78:64:e6:a3:d1:04:47:2f:b5:b2:91: 2a:99:06:99:30:98:34:55:06:03:35:41:c8:53:ea: 51:54:0e:59:41:ee:69:0c:53:15:4b:38:ab:b2:56: 5f:10:57:4e:77:d3:84:97:0d:05:19:dd:55:71:5b: f6:35:c2:0f:ab:d5:c6:04:a6:fa:f8:d0:88:f8:46: 72:52:b7:a4:aa:e3:aa:51:2f:03:6d:30:c0:26:f0: 3e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B6:F1:A0:42:F5:8F:D7:73:EC:6B:72:21:47:01:56:F5:EB:D0:CE:45 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.175.102.0/23 Signature Algorithm: sha256WithRSAEncryption 97:74:5e:cd:21:18:2e:25:9c:02:0c:c9:48:d8:09:8e:c7:87: 3b:d0:cb:00:31:57:a9:0b:26:70:5e:87:d9:f6:b3:6c:de:22: af:48:20:2c:b8:0b:d7:8e:29:20:be:90:c6:85:c6:d5:0a:f8: 72:8d:75:66:2d:6e:d7:67:61:4c:68:f8:25:42:d8:76:48:60: 7c:ab:97:70:0a:05:c5:5a:82:c1:f3:32:27:88:33:af:a3:6f: b9:d6:f8:df:8f:03:a4:b0:b3:5c:e9:e3:94:4e:ae:97:a5:01: bd:06:f8:fb:55:09:39:8e:54:75:a4:5c:e9:a3:cb:6f:63:42: e3:cf:a6:67:21:b5:77:c6:5b:e3:4c:90:94:ab:61:38:e0:f7: aa:70:1e:bf:b1:83:e3:61:ca:c3:ac:6e:89:c1:94:00:de:78: 3e:21:66:92:c3:27:58:38:91:43:be:92:ce:d3:e2:3b:68:c3: 72:b0:7b:ea:02:e3:7a:c1:bb:1a:62:f2:04:cc:11:18:b5:d4: a0:dc:6f:b0:ce:30:fc:9b:b1:bf:ec:71:97:df:14:3d:c7:5c: 89:05:82:da:9c:78:f2:ca:63:6b:f0:db:4e:10:ee:fc:0c:98: 61:d0:04:6c:98:c4:f5:78:26:49:67:70:88:a9:3b:76:4e:49: 31:6c:3c:94 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUHRC3FZJdyyJuP+HyjxSLzt0xt/QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDExMloX DTI3MDUwMjAyNDYxMlowMzExMC8GA1UEAxMoQjZGMUEwNDJGNThGRDc3M0VDNkI3 MjIxNDcwMTU2RjVFQkQwQ0U0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPSw47wFoR4O5eYBFvMr/xNLuzcqDz3ln3cIm5HW/Oh9puAW/hlVz3uaHJLM SjQXLBVr6DpZexvhvk9vlIEQkfmS8u5h9MuDK0CEM9RDp3pRjNwVdoEHfb4Uba8G rQVV1ap7uIm9wW/Ju22f4PKjukgvhWIFNOZ0tJkmT5DaFI2laZsJxoh+aFfkmgrY LSZzucGdPheysv+00e/lSyoYuPIYgS6RBaF9GXhk5qPRBEcvtbKRKpkGmTCYNFUG AzVByFPqUVQOWUHuaQxTFUs4q7JWXxBXTnfThJcNBRndVXFb9jXCD6vVxgSm+vjQ iPhGclK3pKrjqlEvA20wwCbwPiUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLbxoEL1j9dz7GtyIUcBVvXr0M5FMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y5NTdmYTVkLWZhNjctNGU2Yi04OTIwLWM0NzQ3YWRiMzBiYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mOTU3ZmE1 ZC1mYTY3LTRlNmItODkyMC1jNDc0N2FkYjMwYmIvMC9CNkYxQTA0MkY1OEZENzcz RUM2QjcyMjE0NzAxNTZGNUVCRDBDRTQ1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBy69mMA0GCSqGSIb3DQEBCwUAA4IBAQCXdF7NIRguJZwCDMlI2AmOx4c70MsA MVepCyZwXofZ9rNs3iKvSCAsuAvXjikgvpDGhcbVCvhyjXVmLW7XZ2FMaPglQth2 SGB8q5dwCgXFWoLB8zIniDOvo2+51vjfjwOksLNc6eOUTq6XpQG9Bvj7VQk5jlR1 pFzpo8tvY0Ljz6ZnIbV3xlvjTJCUq2E44PeqcB6/sYPjYcrDrG6JwZQA3ng+IWaS wydYOJFDvpLO0+I7aMNysHvqAuN6wbsaYvIEzBEYtdSg3G+wzjD8m7G/7HGX3xQ9 x1yJBYLanHjyymNr8NtOEO78DJhh0ARsmMT1eCZJZ3CIqTt2TkkxbDyU -----END CERTIFICATE-----Generated at Tue May 12 22:52:51 2026 by rpki-client