$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer File: CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer (raw, json) Hash identifier: 5flsNXtEDy35JxcgOyOrjZ45nO/HUDESCt4ciat27Aw= Subject key identifier: CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1EA9A417DEE1486B920467A8ED49BD5F994481FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:53:26 +0000 Certificate not after: Sun 02 May 2027 01:58:26 +0000 Subordinate resources: AS: 63490 IP: 103.93.236.0/23 IP: 103.131.107.0/24 IP: 103.235.66.0/23 IP: 202.46.156.0/22 IP: 2401:3240::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a9:a4:17:de:e1:48:6b:92:04:67:a8:ed:49:bd:5f:99:44:81:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:53:26 2026 GMT Not After : May 2 01:58:26 2027 GMT Subject: CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9e:3c:ad:84:ed:92:2d:e1:4c:6f:29:d2:25: e5:d8:64:ba:c8:68:49:47:d5:15:79:55:ab:9f:c5: c9:0a:0a:a1:7e:2e:bd:a1:78:7e:bd:a9:74:c1:3a: cf:b3:93:09:d4:4e:fe:3b:9c:03:06:e7:aa:85:5f: 67:fa:ae:81:91:53:6d:bb:f4:f0:79:a9:bb:7c:15: c7:5a:bf:d9:e5:d2:5b:57:aa:97:ad:35:7a:fb:6f: 82:c8:e4:84:4a:ce:dc:38:e6:1c:42:db:ba:f6:0c: d6:bc:32:4b:1b:e0:b5:26:31:92:c1:c6:72:f7:c4: 88:5a:bb:75:05:eb:e5:88:88:18:09:01:2b:84:1b: be:b4:73:53:8c:e4:fe:65:6a:c0:fb:f4:3b:43:d8: 16:a9:1f:28:8a:e3:88:65:7f:65:19:18:0f:58:ce: d0:c7:c0:49:bf:43:02:18:f5:d9:6b:86:ff:5a:38: 30:dc:49:81:10:79:00:d5:d7:ef:c4:d2:9a:77:0e: 6d:e8:d6:54:90:bf:f9:4d:70:e1:5d:63:0f:f8:34: 8e:d9:97:7a:ff:b0:91:ad:44:8c:db:fa:79:cc:a6: 39:0e:ae:51:63:d7:5e:fa:a0:d3:ce:25:db:82:22: a6:eb:7e:98:e2:b4:19:79:61:76:db:69:fb:39:70: b3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.93.236.0/23 103.131.107.0/24 103.235.66.0/23 202.46.156.0/22 IPv6: 2401:3240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63490 Signature Algorithm: sha256WithRSAEncryption 1e:46:ad:af:7d:ee:fa:c3:20:2f:0b:0b:43:2f:bf:e0:42:a4: 74:cf:00:1e:75:33:e7:0e:31:85:46:a1:1a:aa:1f:d1:ba:89: 7a:9b:67:8d:cf:9f:dd:ce:a4:04:ec:fa:ab:5d:5f:58:04:b1: a6:2e:70:c3:5e:4a:f2:6d:1f:4c:ac:a6:8e:7c:e0:2b:d3:89: b5:31:13:ac:53:16:cb:e3:30:68:4f:61:26:da:ca:0f:f9:52: 46:2b:5f:cf:05:14:71:b4:0c:36:96:f2:52:93:81:a7:d2:65: 41:9e:0d:59:75:08:90:e7:49:96:50:1b:f0:24:90:1b:68:73: d5:d3:eb:96:ad:aa:fe:73:99:04:ea:98:b5:67:e0:c2:94:07: de:0a:68:73:d4:e6:0f:b7:de:33:00:f4:16:fa:e3:ab:16:29: ae:ab:68:39:04:a6:e9:c6:d2:41:e4:af:27:8f:b4:81:8e:97: 8b:c6:49:3b:d0:de:1b:b4:5a:8f:fb:3a:70:b4:fa:5a:76:62: 82:9b:a1:7f:4b:c1:3e:9c:31:a3:c9:94:47:eb:23:34:3d:61: 29:34:77:85:86:1c:0f:6c:15:a8:17:8d:67:fc:b4:42:8c:a9: eb:db:7a:33:a8:80:ca:94:ea:bc:d0:fe:bc:89:23:ce:b2:b2: dc:fe:9a:11 -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgIUHqmkF97hSGuSBGeo7Um9X5lEgf4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTMyNloX DTI3MDUwMjAxNTgyNlowMzExMC8GA1UEAxMoQ0E2QTY4QkNFMjA5QzI4MzM4RkMz QzBBQTY1OUFFNTkxRUY2RDMyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMyePK2E7ZIt4UxvKdIl5dhkushoSUfVFXlVq5/FyQoKoX4uvaF4fr2pdME6 z7OTCdRO/jucAwbnqoVfZ/qugZFTbbv08Hmpu3wVx1q/2eXSW1eql601evtvgsjk hErO3DjmHELbuvYM1rwySxvgtSYxksHGcvfEiFq7dQXr5YiIGAkBK4QbvrRzU4zk /mVqwPv0O0PYFqkfKIrjiGV/ZRkYD1jO0MfASb9DAhj12WuG/1o4MNxJgRB5ANXX 78TSmncObejWVJC/+U1w4V1jD/g0jtmXev+wka1EjNv6ecymOQ6uUWPXXvqg084l 24Iiput+mOK0GXlhdttp+zlws40CAwEAAaOCAvYwggLyMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMpqaLziCcKDOPw8CqZZrlke9tMlMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M5ZTM2MDU2LWYwOTctNDlhNy1iZDIzLTNkNzExZTg5ZjMwNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jOWUzNjA1 Ni1mMDk3LTQ5YTctYmQyMy0zZDcxMWU4OWYzMDUvMC9DQTZBNjhCQ0UyMDlDMjgz MzhGQzNDMEFBNjU5QUU1OTFFRjZEMzI1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAY AwQBZ13sAwQAZ4NrAwQBZ+tCAwQCyi6cMA0EAgACMAcDBQAkATJAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwD4AjANBgkqhkiG9w0BAQsFAAOCAQEAHkatr33u+sMg LwsLQy+/4EKkdM8AHnUz5w4xhUahGqof0bqJeptnjc+f3c6kBOz6q11fWASxpi5w w15K8m0fTKymjnzgK9OJtTETrFMWy+MwaE9hJtrKD/lSRitfzwUUcbQMNpbyUpOB p9JlQZ4NWXUIkOdJllAb8CSQG2hz1dPrlq2q/nOZBOqYtWfgwpQH3gpoc9TmD7fe MwD0FvrjqxYprqtoOQSm6cbSQeSvJ4+0gY6Xi8ZJO9DeG7Raj/s6cLT6WnZigpuh f0vBPpwxo8mUR+sjND1hKTR3hYYcD2wVqBeNZ/y0Qoyp69t6M6iAypTqvND+vIkj zrKy3P6aEQ== -----END CERTIFICATE-----Generated at Tue May 12 22:16:18 2026 by rpki-client