$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.cer File: D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.cer (raw, json) Hash identifier: 2h9qeMHZREwja1jplHzLGlhOYpyJboAiorxAYzFEuG0= Subject key identifier: D6:C0:95:71:57:A1:ED:A2:4F:0D:EF:F6:D0:FE:F2:81:37:C1:97:DC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 55E7E1920054483D38125656B56673FE06942FC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:42:44 +0000 Certificate not after: Sat 01 May 2027 23:47:44 +0000 Subordinate resources: IP: 103.149.14.0/23 IP: 2405:de40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:e7:e1:92:00:54:48:3d:38:12:56:56:b5:66:73:fe:06:94:2f:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:42:44 2026 GMT Not After : May 1 23:47:44 2027 GMT Subject: CN=D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:44:de:60:a6:84:c3:57:ff:4a:33:aa:68:a9: 94:ea:fc:7f:d5:0f:fb:fe:b2:61:17:80:38:42:72: c5:a7:82:56:d0:09:4d:d4:68:2e:76:3f:c0:0e:b4: d9:08:c8:6b:2e:e3:ef:49:7f:a4:b4:a6:f0:f4:0f: 62:4d:ae:c0:b4:4d:7f:8a:57:6c:10:c2:bd:06:6e: de:bb:da:6e:3f:01:6f:72:af:ec:2c:36:b1:a7:ca: 95:b7:60:be:7a:17:7f:00:bb:40:7c:76:91:c6:52: 28:8b:cb:1b:0e:b5:e3:0a:fe:28:20:6a:f2:8e:03: 98:c8:2f:1e:d5:ff:b3:b9:9a:b8:ce:94:b2:c9:e5: 67:b5:72:e4:5d:4a:63:da:cf:d6:de:4f:05:b7:85: a7:24:f6:7e:d0:3e:61:8b:98:d8:a1:0c:6e:3d:b6: c0:16:07:3b:53:3e:a4:a5:fb:2c:86:a3:b4:2a:20: 18:15:53:b8:80:e8:c3:1f:29:9b:c3:5c:48:72:61: ef:b1:94:d5:f7:16:cd:7c:0c:c3:e6:ad:11:c7:1c: e8:04:8e:28:72:13:c2:5c:e6:bb:f4:2b:33:73:10: 21:90:05:b1:e0:0f:91:79:cd:14:aa:7a:93:f8:28: 54:17:73:1d:21:28:9a:b7:e6:1a:19:48:4a:c9:04: 1f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:C0:95:71:57:A1:ED:A2:4F:0D:EF:F6:D0:FE:F2:81:37:C1:97:DC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.14.0/23 IPv6: 2405:de40::/32 Signature Algorithm: sha256WithRSAEncryption a0:92:e7:3e:ba:ac:e8:46:03:fe:5b:a7:b4:36:4f:de:36:f9: 8c:5f:9d:07:16:81:75:53:16:de:27:f7:25:b8:a7:79:87:5d: 47:87:51:1e:c6:8e:51:08:73:ce:34:c7:c9:ba:cf:39:95:ec: be:c6:76:f9:b2:e0:34:97:c8:1b:6f:78:18:7a:62:38:69:4c: 08:b6:79:cd:ce:e5:6d:e9:f0:74:30:78:40:e9:25:79:9d:ec: 84:fc:2a:1f:38:af:f4:3d:6d:62:f0:9a:23:58:6e:74:b4:eb: f4:8c:9e:96:b2:ec:7f:ea:73:41:4a:15:e1:e5:cb:d5:ac:a3: 88:a5:bd:c5:c8:48:59:96:12:e8:11:7e:0f:32:2c:6a:31:fc: 48:51:3e:4f:74:e9:87:ce:d6:9d:61:69:e0:7c:a7:ff:3d:e7: 0e:18:03:ba:86:fa:e0:a2:55:ef:d6:2f:c9:a3:44:5b:2d:1e: f1:4a:38:a6:c6:9e:8a:ff:32:ac:b5:03:db:45:6c:ea:4e:a6: 77:3b:61:ed:c8:38:25:99:d8:03:36:ae:bb:d0:ac:3a:c9:46: 39:55:da:c0:54:b1:83:dc:84:79:f2:09:85:c7:34:df:ea:b5: 61:26:1e:1d:a2:9d:25:c9:a0:50:dc:70:f6:bc:c1:da:83:13: 9b:9e:80:bd -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUVefhkgBUSD04ElZWtWZz/gaUL8IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDI0NFoX DTI3MDUwMTIzNDc0NFowMzExMC8GA1UEAxMoRDZDMDk1NzE1N0ExRURBMjRGMERF RkY2RDBGRUYyODEzN0MxOTdEQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANVE3mCmhMNX/0ozqmiplOr8f9UP+/6yYReAOEJyxaeCVtAJTdRoLnY/wA60 2QjIay7j70l/pLSm8PQPYk2uwLRNf4pXbBDCvQZu3rvabj8Bb3Kv7Cw2safKlbdg vnoXfwC7QHx2kcZSKIvLGw614wr+KCBq8o4DmMgvHtX/s7mauM6UssnlZ7Vy5F1K Y9rP1t5PBbeFpyT2ftA+YYuY2KEMbj22wBYHO1M+pKX7LIajtCogGBVTuIDowx8p m8NcSHJh77GU1fcWzXwMw+atEccc6ASOKHITwlzmu/QrM3MQIZAFseAPkXnNFKp6 k/goVBdzHSEomrfmGhlISskEH+cCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNbAlXFXoe2iTw3v9tD+8oE3wZfcMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzA0MzkxNjk4LTA4ZWMtNDc5MC1hMTg0LTkyMjg1MmZhNGQwYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wNDM5MTY5 OC0wOGVjLTQ3OTAtYTE4NC05MjI4NTJmYTRkMGEvMC9ENkMwOTU3MTU3QTFFREEy NEYwREVGRjZEMEZFRjI4MTM3QzE5N0RDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5UOMA0EAgACMAcDBQAkBd5AMA0GCSqGSIb3DQEBCwUAA4IBAQCgkuc+uqzo RgP+W6e0Nk/eNvmMX50HFoF1UxbeJ/cluKd5h11Hh1Eexo5RCHPONMfJus85ley+ xnb5suA0l8gbb3gYemI4aUwItnnNzuVt6fB0MHhA6SV5neyE/CofOK/0PW1i8Joj WG50tOv0jJ6Wsux/6nNBShXh5cvVrKOIpb3FyEhZlhLoEX4PMixqMfxIUT5PdOmH ztadYWngfKf/PecOGAO6hvrgolXv1i/Jo0RbLR7xSjimxp6K/zKstQPbRWzqTqZ3 O2HtyDglmdgDNq670Kw6yUY5VdrAVLGD3IR58gmFxzTf6rVhJh4dop0lyaBQ3HD2 vMHagxObnoC9 -----END CERTIFICATE-----Generated at Tue May 12 22:03:14 2026 by rpki-client