$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.cer File: C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.cer (raw, json) Hash identifier: +Zs5nxJIQt5GgQ7bacKqHH3EfDZH2+UbYWx2lvIzKYQ= Subject key identifier: C6:FF:E1:E5:84:38:BC:5B:35:72:39:10:4B:53:DB:D6:B6:9A:F9:D3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6E29546028DAB8FA9FFC8A138D58CE17A19C869A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:09:17 +0000 Certificate not after: Sun 02 May 2027 02:14:17 +0000 Subordinate resources: IP: 103.121.186.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:29:54:60:28:da:b8:fa:9f:fc:8a:13:8d:58:ce:17:a1:9c:86:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:09:17 2026 GMT Not After : May 2 02:14:17 2027 GMT Subject: CN=C6FFE1E58438BC5B357239104B53DBD6B69AF9D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:40:64:0e:04:0f:6a:9b:a6:29:8c:b4:a4:62: 36:c4:4f:65:ab:e0:93:dc:48:38:de:8a:ef:5e:b1: f7:31:ed:4b:4e:9a:10:6f:af:ce:0e:33:f8:ff:1f: 40:8c:5a:27:83:9c:ea:cd:76:80:d5:4a:21:03:22: b2:36:7c:56:c9:52:9e:20:f4:8d:a8:4d:d4:b1:af: 58:3d:34:07:d1:6d:17:d2:47:be:37:f5:10:28:b0: 93:3f:48:79:08:15:28:68:4a:7f:21:17:c9:a1:10: 8e:1c:10:b2:ba:ea:84:b1:ce:57:b5:31:68:fa:5c: 93:81:1b:86:84:43:48:91:c9:27:be:b5:63:52:9d: 82:b9:15:95:bf:a5:cb:54:98:47:ab:28:87:97:4c: 4b:d4:cc:e8:ea:f1:83:08:0a:85:a2:d7:99:de:5f: bd:6e:56:39:02:ef:85:c5:77:d7:02:59:cd:44:16: 2c:4b:13:b1:9f:12:6a:ca:b5:80:14:52:30:6d:0c: d0:29:38:fe:bd:cc:5b:0f:4b:fe:15:bc:8a:b9:87: 69:db:f1:46:6f:e0:2a:69:44:25:33:22:e8:6f:20: 68:e5:82:12:f8:43:6b:32:17:48:81:2b:93:73:89: fc:5d:29:84:6a:7d:fe:e0:bc:0f:88:3a:55:42:bb: 08:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C6:FF:E1:E5:84:38:BC:5B:35:72:39:10:4B:53:DB:D6:B6:9A:F9:D3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.186.0/23 Signature Algorithm: sha256WithRSAEncryption 74:f3:32:27:df:c1:7c:e1:d6:a9:8f:23:de:ee:5a:28:12:55: e6:a3:60:02:a6:4d:fc:08:36:d2:d8:9b:33:df:27:ed:87:a7: 6d:c3:b9:29:0d:ee:35:a7:17:5c:0d:81:c7:64:39:bd:58:e7: 90:67:ae:01:74:ad:00:fa:d2:4f:83:81:b9:33:c5:6d:e2:71: 06:32:5d:9f:58:3b:d7:1b:f7:64:67:f8:98:f9:80:fd:1b:9d: b7:65:8a:5f:3e:8f:22:90:27:d9:28:8e:35:25:83:4b:9c:06: 73:48:b9:cf:fc:5a:80:a0:a1:1c:78:af:1d:ae:fd:e9:32:0d: 21:56:86:22:60:19:cf:57:69:ae:9a:c5:c7:48:1b:41:54:21: 60:1d:59:43:f3:b0:7f:8e:3b:ef:62:ad:a0:03:f3:bc:43:08: 40:bb:74:01:a2:92:0b:a1:b5:68:bd:d1:8f:99:19:28:3b:7b: 3c:ee:e3:3b:ff:9e:5a:07:6a:70:dd:8f:93:17:b1:a7:30:db: 7c:ad:16:9e:72:b8:fa:9f:3e:85:f6:7c:c5:c8:70:fe:b6:52: 13:d8:8a:51:eb:90:7f:68:8a:f2:56:a3:2f:a1:1e:ac:08:d9: 76:49:dc:1b:a9:7e:33:e2:9f:af:a8:82:35:68:1f:ba:3e:9b: b8:75:9b:c0 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUbilUYCjauPqf/IoTjVjOF6GchpowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDkxN1oX DTI3MDUwMjAyMTQxN1owMzExMC8GA1UEAxMoQzZGRkUxRTU4NDM4QkM1QjM1NzIz OTEwNEI1M0RCRDZCNjlBRjlEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJRAZA4ED2qbpimMtKRiNsRPZavgk9xION6K716x9zHtS06aEG+vzg4z+P8f QIxaJ4Oc6s12gNVKIQMisjZ8VslSniD0jahN1LGvWD00B9FtF9JHvjf1ECiwkz9I eQgVKGhKfyEXyaEQjhwQsrrqhLHOV7UxaPpck4EbhoRDSJHJJ761Y1KdgrkVlb+l y1SYR6soh5dMS9TM6OrxgwgKhaLXmd5fvW5WOQLvhcV31wJZzUQWLEsTsZ8Sasq1 gBRSMG0M0Ck4/r3MWw9L/hW8irmHadvxRm/gKmlEJTMi6G8gaOWCEvhDazIXSIEr k3OJ/F0phGp9/uC8D4g6VUK7CD8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMb/4eWEOLxbNXI5EEtT29a2mvnTMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2UwNjIwY2ZjLWI0NmMtNDU3Yy05ZmRlLTI5NzcxMGM1NDZhOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lMDYyMGNm Yy1iNDZjLTQ1N2MtOWZkZS0yOTc3MTBjNTQ2YTkvMC9DNkZGRTFFNTg0MzhCQzVC MzU3MjM5MTA0QjUzREJENkI2OUFGOUQzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ3m6MA0GCSqGSIb3DQEBCwUAA4IBAQB08zIn38F84dapjyPe7looElXmo2AC pk38CDbS2Jsz3yfth6dtw7kpDe41pxdcDYHHZDm9WOeQZ64BdK0A+tJPg4G5M8Vt 4nEGMl2fWDvXG/dkZ/iY+YD9G523ZYpfPo8ikCfZKI41JYNLnAZzSLnP/FqAoKEc eK8drv3pMg0hVoYiYBnPV2mumsXHSBtBVCFgHVlD87B/jjvvYq2gA/O8QwhAu3QB opILobVovdGPmRkoO3s87uM7/55aB2pw3Y+TF7GnMNt8rRaecrj6nz6F9nzFyHD+ tlIT2IpR65B/aIryVqMvoR6sCNl2SdwbqX4z4p+vqII1aB+6Ppu4dZvA -----END CERTIFICATE-----Generated at Tue May 12 22:38:46 2026 by rpki-client