$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C61D938B5D87EBE0E627EE07FC45036B2BBA4F39.cer File: C61D938B5D87EBE0E627EE07FC45036B2BBA4F39.cer (raw, json) Hash identifier: JdEt/eCsb+8R0MqdfYVRW9zdirF4HAXa4xaOJcbmTXQ= Subject key identifier: C6:1D:93:8B:5D:87:EB:E0:E6:27:EE:07:FC:45:03:6B:2B:BA:4F:39 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7F735534061130D30B8BF2308773D1D2D8F4D043 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/C61D938B5D87EBE0E627EE07FC45036B2BBA4F39.mft caRepository: rsync://rpki-rsync.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:45:47 +0000 Certificate not after: Sun 02 May 2027 00:50:47 +0000 Subordinate resources: IP: 103.190.170.0/23 IP: 2001:df1:a40::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:73:55:34:06:11:30:d3:0b:8b:f2:30:87:73:d1:d2:d8:f4:d0:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:45:47 2026 GMT Not After : May 2 00:50:47 2027 GMT Subject: CN=C61D938B5D87EBE0E627EE07FC45036B2BBA4F39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:23:46:56:d3:dc:5b:53:31:4d:91:ea:61:ad: 8c:ed:88:50:2c:21:41:77:9c:e9:58:aa:c1:04:fa: c1:3f:38:0d:c4:c6:2c:fc:1b:c9:c1:97:e3:b2:2e: 87:43:58:1d:e4:1c:6f:3a:f8:c5:cc:d9:7e:01:76: fb:f0:57:79:1f:2c:56:2e:12:4d:e0:28:39:fb:f3: fa:88:e9:1c:d0:e6:35:26:e8:7a:55:76:0c:7a:3b: 8d:a2:d0:01:da:c6:33:77:b8:2b:d8:4a:35:9c:48: 4d:b3:81:18:8e:34:99:3f:4d:d0:1b:a6:06:fa:2c: e7:b2:d7:1c:57:dc:f9:7e:3e:49:85:cc:5f:d6:02: 5f:45:bd:29:a3:da:0c:78:b0:79:18:15:73:b4:cb: bc:8f:9b:be:4e:5c:85:45:ec:e4:cb:26:d3:68:97: 6c:67:46:95:aa:e3:19:f2:2b:0b:b2:2d:eb:16:c9: 8d:26:26:59:d0:f9:a5:25:0d:19:5f:79:b9:c6:1b: 9f:5f:e8:3e:b2:3f:15:f2:e1:7d:77:e4:6f:f7:c5: 2e:1e:ae:34:7e:b5:27:c7:e0:8f:ad:e8:5b:87:6b: 2e:99:b5:a6:ab:c5:07:e4:b2:7a:64:21:3f:2d:69: b5:f8:18:29:a6:e7:2e:12:0e:f3:a4:09:6e:a2:fc: 6b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C6:1D:93:8B:5D:87:EB:E0:E6:27:EE:07:FC:45:03:6B:2B:BA:4F:39 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/C61D938B5D87EBE0E627EE07FC45036B2BBA4F39.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.170.0/23 IPv6: 2001:df1:a40::/48 Signature Algorithm: sha256WithRSAEncryption 2e:75:21:c3:07:75:1f:a0:2d:c3:d0:9e:27:dd:c9:41:37:25: fe:f8:95:0e:4e:75:f0:07:ed:3c:dd:6b:a7:52:98:fa:aa:23: c6:fc:52:f6:73:97:7e:62:8e:b0:4c:27:6f:ac:b5:49:95:db: 72:1e:f2:63:3a:25:ce:67:7c:23:30:6e:12:f5:ea:c1:c3:2f: 72:40:b9:0f:86:10:46:23:e8:74:51:19:57:90:81:38:bc:30: e4:31:e7:0d:a3:7b:da:55:74:c7:1e:39:84:1e:60:57:80:53: 18:a6:28:e0:4c:ef:54:c6:4b:a2:fa:2b:22:1c:3a:9e:df:dd: 92:18:f4:79:82:ad:ec:32:ed:52:8a:61:da:83:42:34:ac:12: 5f:43:d2:8d:a1:c5:4d:e7:62:e4:c0:4a:c1:4e:97:4c:74:e8: 49:f0:de:f6:70:6e:a7:e8:a3:ea:cd:6e:bd:ca:94:27:30:c2: 1e:ac:8c:bd:9e:c5:3e:88:18:d4:81:9c:73:5b:a9:d3:98:50: d5:55:8e:7a:ec:4d:74:b3:0c:fd:8f:da:0a:b7:4b:31:39:e5: 00:d0:62:ba:1f:b1:b8:f6:ad:5f:5a:05:00:42:f6:0b:7d:fe: b0:2d:41:e3:57:2e:b7:cf:69:1e:ce:97:22:56:e4:a2:2a:73: 9a:2c:f6:8c -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUf3NVNAYRMNMLi/Iwh3PR0tj00EMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDU0N1oX DTI3MDUwMjAwNTA0N1owMzExMC8GA1UEAxMoQzYxRDkzOEI1RDg3RUJFMEU2MjdF RTA3RkM0NTAzNkIyQkJBNEYzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM0jRlbT3FtTMU2R6mGtjO2IUCwhQXec6ViqwQT6wT84DcTGLPwbycGX47Iu h0NYHeQcbzr4xczZfgF2+/BXeR8sVi4STeAoOfvz+ojpHNDmNSboelV2DHo7jaLQ AdrGM3e4K9hKNZxITbOBGI40mT9N0BumBvos57LXHFfc+X4+SYXMX9YCX0W9KaPa DHiweRgVc7TLvI+bvk5chUXs5Msm02iXbGdGlarjGfIrC7It6xbJjSYmWdD5pSUN GV95ucYbn1/oPrI/FfLhfXfkb/fFLh6uNH61J8fgj63oW4drLpm1pqvFB+SyemQh Py1ptfgYKabnLhIO86QJbqL8azsCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMYdk4tdh+vg5ifuB/xFA2sruk85MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzYyYWZkZjUwLWRmNTEtNDk1YS1iMWIwLWExM2EwMTM5YWIxNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82MmFmZGY1 MC1kZjUxLTQ5NWEtYjFiMC1hMTNhMDEzOWFiMTUvMC9DNjFEOTM4QjVEODdFQkUw RTYyN0VFMDdGQzQ1MDM2QjJCQkE0RjM5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ76qMA8EAgACMAkDBwAgAQ3xCkAwDQYJKoZIhvcNAQELBQADggEBAC51IcMH dR+gLcPQnifdyUE3Jf74lQ5OdfAH7Tzda6dSmPqqI8b8UvZzl35ijrBMJ2+stUmV 23Ie8mM6Jc5nfCMwbhL16sHDL3JAuQ+GEEYj6HRRGVeQgTi8MOQx5w2je9pVdMce OYQeYFeAUximKOBM71TGS6L6KyIcOp7f3ZIY9HmCrewy7VKKYdqDQjSsEl9D0o2h xU3nYuTASsFOl0x06Enw3vZwbqfoo+rNbr3KlCcwwh6sjL2exT6IGNSBnHNbqdOY UNVVjnrsTXSzDP2P2gq3SzE55QDQYrofsbj2rV9aBQBC9gt9/rAtQeNXLrfPaR7O lyJW5KIqc5os9ow= -----END CERTIFICATE-----Generated at Tue May 12 22:47:43 2026 by rpki-client