$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer File: C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer (raw, json) Hash identifier: WC9vx209PrmpDaWRrYMKwODAOeokA5s4SFjlL5JrkTo= Subject key identifier: C6:F0:EA:3F:49:89:65:C7:36:1B:5E:BC:2E:89:16:30:AD:2F:39:BA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 335BCC1EAC471C1056DD83C1822D100CDF35DA4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:10:44 +0000 Certificate not after: Sun 02 May 2027 02:15:44 +0000 Subordinate resources: IP: 103.106.216.0/22 IP: 2402:4840::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:5b:cc:1e:ac:47:1c:10:56:dd:83:c1:82:2d:10:0c:df:35:da:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:10:44 2026 GMT Not After : May 2 02:15:44 2027 GMT Subject: CN=C6F0EA3F498965C7361B5EBC2E891630AD2F39BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b7:1f:77:c5:96:68:8d:9a:94:07:69:71:b5: 88:4e:6a:1a:f6:29:84:22:42:9b:99:7d:25:29:48: 19:ac:f0:2c:5d:7a:56:48:d2:ca:cd:58:4e:bf:27: 65:ca:ce:b0:25:19:1d:ab:9e:e1:ca:8a:67:98:63: ae:8d:26:7e:24:3b:d9:52:80:09:36:c0:98:08:92: 2d:95:3d:c1:bb:12:07:de:80:f5:bd:f4:66:bf:66: b2:1a:68:64:cf:f9:b7:5b:ff:30:81:54:b4:3e:18: f2:0d:66:2a:b7:07:48:e5:95:11:18:07:af:a4:60: 00:06:93:f4:74:89:50:df:a3:2f:d0:f5:a8:61:a0: c4:2f:af:f1:5a:a7:6b:aa:eb:f0:d3:5c:51:bf:0b: 75:9a:9b:ee:ca:f0:ab:dd:e2:74:51:71:9b:e6:de: 50:2e:17:ee:b0:03:9d:a1:63:57:76:6f:fc:07:fd: 99:33:83:27:d1:06:5d:f9:4d:bb:e4:c0:75:70:fc: 0a:f9:ba:89:1f:7c:e9:41:08:8f:ea:d6:34:76:62: 31:a9:41:b5:42:a4:80:d5:0e:0c:ea:15:f6:9d:f6: 07:01:9f:d8:69:5b:14:54:37:9b:d8:9f:99:62:a6: 23:67:e0:aa:00:83:56:7f:25:6c:ab:5e:6c:08:81: b8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C6:F0:EA:3F:49:89:65:C7:36:1B:5E:BC:2E:89:16:30:AD:2F:39:BA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.106.216.0/22 IPv6: 2402:4840::/32 Signature Algorithm: sha256WithRSAEncryption a1:f8:2f:8b:6c:bc:b4:59:48:ae:96:d0:df:e8:6a:e7:5c:85: 2c:55:60:fc:31:cd:da:56:11:19:f9:d4:b1:f8:26:05:75:6b: 42:58:c0:c6:ae:a4:d2:b8:c6:af:51:7d:3f:5e:cb:21:54:8b: e0:5e:2d:18:90:df:05:f2:ae:61:2f:df:3b:69:f9:e2:b5:89: e8:3e:f7:bb:3d:b6:b6:c8:55:59:74:95:62:87:fd:c7:4d:2e: 72:96:d8:9e:68:94:55:0e:f9:fc:0c:bc:ea:8a:b5:a4:1d:33: 25:40:9a:87:6c:36:7b:7a:4d:4c:8f:18:5a:a5:fc:e4:16:55: 8a:56:8a:de:99:f1:3f:46:14:78:a0:bd:86:ec:f3:8d:4d:56: 79:51:fc:4c:47:41:29:03:d6:80:b8:bf:dd:64:3e:8e:de:fc: bb:f6:6e:d8:5a:e5:27:32:9c:31:ad:84:1b:f9:91:2b:ae:dc: a3:37:47:0f:4b:99:9a:50:2c:6b:7e:3f:e6:ea:bf:16:77:a1: d9:86:9f:04:c2:f4:6c:4d:4b:44:d3:46:4e:3f:17:d2:d4:2b: 8b:46:a7:84:e1:46:58:e7:ce:70:2d:fd:11:71:8e:ab:c4:68: 53:02:dd:b2:ed:bf:31:f0:c6:a5:7d:23:35:ab:8a:cb:00:6b: a9:f4:ae:64 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUM1vMHqxHHBBW3YPBgi0QDN812k8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTA0NFoX DTI3MDUwMjAyMTU0NFowMzExMC8GA1UEAxMoQzZGMEVBM0Y0OTg5NjVDNzM2MUI1 RUJDMkU4OTE2MzBBRDJGMzlCQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANe3H3fFlmiNmpQHaXG1iE5qGvYphCJCm5l9JSlIGazwLF16VkjSys1YTr8n ZcrOsCUZHaue4cqKZ5hjro0mfiQ72VKACTbAmAiSLZU9wbsSB96A9b30Zr9mshpo ZM/5t1v/MIFUtD4Y8g1mKrcHSOWVERgHr6RgAAaT9HSJUN+jL9D1qGGgxC+v8Vqn a6rr8NNcUb8LdZqb7srwq93idFFxm+beUC4X7rADnaFjV3Zv/Af9mTODJ9EGXflN u+TAdXD8Cvm6iR986UEIj+rWNHZiMalBtUKkgNUODOoV9p32BwGf2GlbFFQ3m9if mWKmI2fgqgCDVn8lbKtebAiBuBcCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMbw6j9JiWXHNhtevC6JFjCtLzm6MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2UxN2JkNTAyLTQyYzItNDAwZC1hMmFkLWQxNzU0MzY1YTQ1ZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lMTdiZDUw Mi00MmMyLTQwMGQtYTJhZC1kMTc1NDM2NWE0NWQvMC9DNkYwRUEzRjQ5ODk2NUM3 MzYxQjVFQkMyRTg5MTYzMEFEMkYzOUJBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ2rYMA0EAgACMAcDBQAkAkhAMA0GCSqGSIb3DQEBCwUAA4IBAQCh+C+LbLy0 WUiultDf6GrnXIUsVWD8Mc3aVhEZ+dSx+CYFdWtCWMDGrqTSuMavUX0/XsshVIvg Xi0YkN8F8q5hL987afnitYnoPve7Pba2yFVZdJVih/3HTS5yltieaJRVDvn8DLzq irWkHTMlQJqHbDZ7ek1MjxhapfzkFlWKVoremfE/RhR4oL2G7PONTVZ5UfxMR0Ep A9aAuL/dZD6O3vy79m7YWuUnMpwxrYQb+ZErrtyjN0cPS5maUCxrfj/m6r8Wd6HZ hp8EwvRsTUtE00ZOPxfS1CuLRqeE4UZY585wLf0RcY6rxGhTAt2y7b8x8MalfSM1 q4rLAGup9K5k -----END CERTIFICATE-----Generated at Wed May 13 01:07:06 2026 by rpki-client