$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.cer File: D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.cer (raw, json) Hash identifier: gSvovvUnABxhSiwK02fuDMaoL9Z5NqdFp4XzlrTLqug= Subject key identifier: D6:BB:B0:4A:96:DE:95:BA:1D:B1:CF:B1:59:DA:9A:E0:30:BB:39:8E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6E1DD7DE33DF347F72A62515F36FBE92A4FE4D78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:28:39 +0000 Certificate not after: Sun 02 May 2027 01:33:39 +0000 Subordinate resources: IP: 103.117.58.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:1d:d7:de:33:df:34:7f:72:a6:25:15:f3:6f:be:92:a4:fe:4d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:28:39 2026 GMT Not After : May 2 01:33:39 2027 GMT Subject: CN=D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bc:b2:6c:24:77:c5:32:ca:52:8d:ab:38:40: fa:33:39:c2:cc:d1:98:df:75:cd:6d:0c:b3:ec:64: 55:eb:59:ae:bd:f3:1f:ae:6d:79:a5:fe:aa:c9:3b: a1:69:1c:f8:2a:98:4c:9f:a2:a7:54:e3:73:7a:5e: 3e:d8:cd:7a:5d:ed:60:25:0e:ca:87:a7:af:c5:4b: 16:88:7a:5a:8b:96:9a:13:92:57:8d:1a:ff:47:31: b2:d4:f0:93:8a:ab:5b:64:cf:9c:ce:76:67:9c:55: 83:ed:ad:71:8a:0a:54:b2:9b:90:e7:2b:9c:f3:1c: 4a:77:73:09:97:ec:d6:11:2f:41:51:d7:3b:23:f4: 87:9b:4c:a7:a0:41:bb:4a:52:05:24:7b:8f:03:9a: 8c:5e:f6:17:89:1b:e2:8f:08:cf:4b:d7:31:e8:c1: fd:9d:62:91:61:91:d9:34:14:e3:9f:d5:8e:b1:67: 42:12:8c:07:38:99:a0:85:d6:53:e2:9d:f4:bd:d1: b2:02:33:3f:b5:b2:84:9b:fd:73:37:84:89:39:55: 3b:28:56:3d:9a:12:eb:47:e3:14:29:cf:bc:e9:7b: 68:6d:3c:4f:5b:a7:6c:53:2f:76:04:3f:ad:38:3e: 75:a0:71:b2:0f:cd:04:5a:25:68:1c:03:32:ee:52: e4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:BB:B0:4A:96:DE:95:BA:1D:B1:CF:B1:59:DA:9A:E0:30:BB:39:8E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.117.58.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:9f:b2:77:ba:aa:d8:1c:4f:0d:21:1c:73:25:43:93:98:be: 0f:43:06:25:72:e4:a2:d1:74:28:c3:5a:1a:f3:9f:c3:72:55: 0e:a9:63:6c:90:54:bb:f3:7c:cf:e4:36:1c:e9:41:af:d0:9b: 9f:2b:72:01:c3:94:34:33:0b:da:4d:9a:df:54:fd:76:dc:5c: d7:ca:83:f4:ee:06:80:60:a8:30:3e:b8:2f:76:6c:27:12:c8: ed:f0:34:ca:32:1a:e2:07:85:ba:ae:f4:0e:a6:0c:81:57:54: 3c:f4:14:ad:2e:6f:09:ce:08:6f:b7:e9:90:a8:29:24:1f:6f: 2d:0d:60:be:e9:a6:d0:b9:99:20:21:8d:fe:26:46:c3:a6:72: 72:e4:da:2d:a3:0a:6f:b9:9f:e4:00:90:13:4b:f3:82:cd:a7: 54:31:37:7d:65:73:48:d1:62:b0:94:e6:fb:0a:d2:e0:60:6b: b1:e3:57:23:dd:38:6a:d0:d6:e9:a8:6e:4d:76:63:b5:a2:dc: 46:f4:df:6b:67:30:02:1c:9b:63:bb:39:ca:d7:44:38:eb:ad: b2:f8:f1:a1:36:d5:d4:2d:d5:3c:f3:f5:cd:5c:01:60:22:73: a7:b6:e2:0e:4e:2b:05:56:4a:97:38:80:72:a3:12:f7:68:cd: b3:d5:23:7b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUbh3X3jPfNH9ypiUV82++kqT+TXgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjgzOVoX DTI3MDUwMjAxMzMzOVowMzExMC8GA1UEAxMoRDZCQkIwNEE5NkRFOTVCQTFEQjFD RkIxNTlEQTlBRTAzMEJCMzk4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALy8smwkd8UyylKNqzhA+jM5wszRmN91zW0Ms+xkVetZrr3zH65teaX+qsk7 oWkc+CqYTJ+ip1Tjc3pePtjNel3tYCUOyoenr8VLFoh6WouWmhOSV40a/0cxstTw k4qrW2TPnM52Z5xVg+2tcYoKVLKbkOcrnPMcSndzCZfs1hEvQVHXOyP0h5tMp6BB u0pSBSR7jwOajF72F4kb4o8Iz0vXMejB/Z1ikWGR2TQU45/VjrFnQhKMBziZoIXW U+Kd9L3RsgIzP7WyhJv9czeEiTlVOyhWPZoS60fjFCnPvOl7aG08T1unbFMvdgQ/ rTg+daBxsg/NBFolaBwDMu5S5EkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNa7sEqW3pW6HbHPsVnamuAwuzmOMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2EyNjJkMzQxLTk0YjUtNDc0ZS04YmNkLWQxNzk4OGYwOTliMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hMjYyZDM0 MS05NGI1LTQ3NGUtOGJjZC1kMTc5ODhmMDk5YjMvMC9ENkJCQjA0QTk2REU5NUJB MURCMUNGQjE1OURBOUFFMDMwQkIzOThFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ3U6MA0GCSqGSIb3DQEBCwUAA4IBAQALn7J3uqrYHE8NIRxzJUOTmL4PQwYl cuSi0XQow1oa85/DclUOqWNskFS783zP5DYc6UGv0JufK3IBw5Q0MwvaTZrfVP12 3FzXyoP07gaAYKgwPrgvdmwnEsjt8DTKMhriB4W6rvQOpgyBV1Q89BStLm8Jzghv t+mQqCkkH28tDWC+6abQuZkgIY3+JkbDpnJy5NotowpvuZ/kAJATS/OCzadUMTd9 ZXNI0WKwlOb7CtLgYGux41cj3Thq0NbpqG5NdmO1otxG9N9rZzACHJtjuznK10Q4 662y+PGhNtXULdU88/XNXAFgInOntuIOTisFVkqXOIByoxL3aM2z1SN7 -----END CERTIFICATE-----Generated at Tue May 12 22:04:12 2026 by rpki-client