$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E66029B9A162C470EEC1DFA42227448C5628C7C0.cer File: E66029B9A162C470EEC1DFA42227448C5628C7C0.cer (raw, json) Hash identifier: GX6PQMcLxKqQgFhsYoWBRu1ZYkD6UcI9sjW/T/pWhUs= Subject key identifier: E6:60:29:B9:A1:62:C4:70:EE:C1:DF:A4:22:27:44:8C:56:28:C7:C0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 646B2FE812341DD60C9B36CFF2D6AE6D52FFAE48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:35:52 +0000 Certificate not after: Sun 02 May 2027 01:40:52 +0000 Subordinate resources: IP: 103.242.204.0/22 IP: 117.102.224.0/19 IP: 150.107.132.0/22 IP: 202.6.224.0/20 IP: 2406:6200::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:6b:2f:e8:12:34:1d:d6:0c:9b:36:cf:f2:d6:ae:6d:52:ff:ae:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:35:52 2026 GMT Not After : May 2 01:40:52 2027 GMT Subject: CN=E66029B9A162C470EEC1DFA42227448C5628C7C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:56:1f:dc:ba:d9:e4:ed:1d:7c:49:04:f7:08: cf:37:da:9b:68:24:c5:44:77:ef:2b:d2:2c:12:af: 0a:75:1d:bc:05:e8:34:db:48:a1:3c:16:07:89:b7: f3:e8:ba:79:04:15:80:10:79:f6:1f:19:ce:20:74: 73:02:8a:22:e4:2d:01:14:7d:76:03:e5:c6:f0:8f: 59:c5:4f:55:80:a2:35:79:8c:ee:e0:49:41:b1:77: e3:a8:f1:db:61:0b:ff:2e:c1:6d:5b:18:42:64:16: f3:58:a9:a3:ab:90:1f:99:dd:4a:14:60:44:16:30: ef:45:fb:3c:aa:c9:36:43:97:a1:9b:fd:83:2a:2e: 4a:a8:bb:ad:5c:cb:2c:b0:1e:1c:c6:48:3f:b4:69: 6a:e0:b0:22:41:47:51:bf:9e:66:34:8b:ea:b2:bf: 24:1c:02:02:63:e8:63:ac:57:f7:4e:75:06:50:59: fa:b3:50:af:46:7a:6e:00:7b:ca:30:41:96:37:32: 6a:67:fe:29:d9:e2:1e:62:8c:ee:99:99:60:97:f1: 2a:ca:c1:fd:86:71:0b:b7:9e:62:a7:47:eb:8a:50: 32:13:ef:d3:81:a4:3d:a8:66:c2:4c:08:44:42:f6: 0c:05:58:a0:fa:73:e8:43:64:dd:fe:9b:c9:67:22: 88:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E6:60:29:B9:A1:62:C4:70:EE:C1:DF:A4:22:27:44:8C:56:28:C7:C0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.242.204.0/22 117.102.224.0/19 150.107.132.0/22 202.6.224.0/20 IPv6: 2406:6200::/32 Signature Algorithm: sha256WithRSAEncryption 16:f4:d1:32:b7:cc:92:16:89:f9:00:21:45:2a:14:9f:f6:a4: 58:b8:95:a7:6a:bb:10:2e:8f:9a:3a:ca:d4:e0:0c:88:d5:3d: c7:73:aa:7a:50:f3:25:fd:b9:7b:e9:17:3f:9c:a9:15:2b:e0: 7e:15:74:75:2a:28:4d:4a:66:89:77:c0:6b:ab:d7:2d:ac:4c: 1d:1a:fd:f0:14:8e:0c:0c:82:1e:9a:db:09:32:79:49:de:04: 60:0f:bb:94:c0:ef:b1:df:df:17:06:d6:7e:6a:47:87:c1:2a: d6:02:6a:a5:b0:f7:83:a7:5f:ee:3f:3b:4d:64:45:68:b1:5e: 9a:9a:1f:e9:90:62:4d:00:e0:e5:94:a5:96:f8:bd:c8:9c:77: f9:7a:72:c9:02:6a:8d:24:6d:73:53:ad:46:de:86:84:33:80: 7d:cc:08:a2:32:5e:da:45:c0:d8:41:0d:38:18:fa:a6:b7:1c: d8:9c:9a:c7:67:50:6a:23:01:bf:6b:18:b3:12:86:07:b2:88: 2e:a3:61:3a:7a:70:99:a0:65:96:94:c8:94:3f:5b:dd:13:f9: 83:a8:47:fb:96:df:b1:ec:da:4c:be:09:eb:e6:c4:0e:c0:d4: 5c:34:73:e1:65:13:a1:be:ae:01:cc:7e:31:35:85:18:d4:2b: e5:db:23:ff -----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgIUZGsv6BI0HdYMmzbP8taubVL/rkgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzU1MloX DTI3MDUwMjAxNDA1MlowMzExMC8GA1UEAxMoRTY2MDI5QjlBMTYyQzQ3MEVFQzFE RkE0MjIyNzQ0OEM1NjI4QzdDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALpWH9y62eTtHXxJBPcIzzfam2gkxUR37yvSLBKvCnUdvAXoNNtIoTwWB4m3 8+i6eQQVgBB59h8ZziB0cwKKIuQtARR9dgPlxvCPWcVPVYCiNXmM7uBJQbF346jx 22EL/y7BbVsYQmQW81ipo6uQH5ndShRgRBYw70X7PKrJNkOXoZv9gyouSqi7rVzL LLAeHMZIP7RpauCwIkFHUb+eZjSL6rK/JBwCAmPoY6xX9051BlBZ+rNQr0Z6bgB7 yjBBljcyamf+KdniHmKM7pmZYJfxKsrB/YZxC7eeYqdH64pQMhPv04GkPahmwkwI REL2DAVYoPpz6ENk3f6byWciiE8CAwEAAaOCAtowggLWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOZgKbmhYsRw7sHfpCInRIxWKMfAMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FkMGYxYTZlLTgzYjYtNDUzNC05NjdkLWY4ZGIzYzM3MTFmNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hZDBmMWE2 ZS04M2I2LTQ1MzQtOTY3ZC1mOGRiM2MzNzExZjQvMC9FNjYwMjlCOUExNjJDNDcw RUVDMURGQTQyMjI3NDQ4QzU2MjhDN0MwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAY AwQCZ/LMAwQFdWbgAwQClmuEAwQEygbgMA0EAgACMAcDBQAkBmIAMA0GCSqGSIb3 DQEBCwUAA4IBAQAW9NEyt8ySFon5ACFFKhSf9qRYuJWnarsQLo+aOsrU4AyI1T3H c6p6UPMl/bl76Rc/nKkVK+B+FXR1KihNSmaJd8Brq9ctrEwdGv3wFI4MDIIemtsJ MnlJ3gRgD7uUwO+x398XBtZ+akeHwSrWAmqlsPeDp1/uPztNZEVosV6amh/pkGJN AODllKWW+L3InHf5enLJAmqNJG1zU61G3oaEM4B9zAiiMl7aRcDYQQ04GPqmtxzY nJrHZ1BqIwG/axizEoYHsoguo2E6enCZoGWWlMiUP1vdE/mDqEf7lt+x7NpMvgnr 5sQOwNRcNHPhZROhvq4BzH4xNYUY1Cvl2yP/ -----END CERTIFICATE-----Generated at Tue May 12 22:16:14 2026 by rpki-client