$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.cer File: 6340B85B817E071CA1087080DE8CCB9ED89BC9CC.cer (raw, json) Hash identifier: QNRJqNrVPTuKtexFlXDo/NZkOVfirhKYKq9bJj5aBBQ= Subject key identifier: 63:40:B8:5B:81:7E:07:1C:A1:08:70:80:DE:8C:CB:9E:D8:9B:C9:CC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0A3FC846F1E0B1B31AEB941293D37C3D23B81A29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:34:29 +0000 Certificate not after: Sun 02 May 2027 00:39:29 +0000 Subordinate resources: IP: 103.169.2.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 05:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:3f:c8:46:f1:e0:b1:b3:1a:eb:94:12:93:d3:7c:3d:23:b8:1a:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:34:29 2026 GMT Not After : May 2 00:39:29 2027 GMT Subject: CN=6340B85B817E071CA1087080DE8CCB9ED89BC9CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fa:70:15:7f:a9:13:57:d9:eb:a0:40:89:cb: 1c:da:de:f9:10:90:e1:19:87:ff:ae:f1:a9:0e:98: 27:5e:e8:fa:fc:8b:67:50:e8:6b:2a:4d:9f:17:78: c7:60:37:c9:ec:34:99:e9:9d:68:4d:26:e5:68:1d: 20:3d:27:62:d5:ec:e4:d8:a9:b1:a3:2a:2e:4e:7a: c2:66:a0:00:1d:6c:7d:8f:8d:88:44:f8:a1:cc:cf: df:80:10:48:0b:d0:03:e5:57:95:97:bb:c8:0c:55: 6e:45:34:25:e8:c1:7e:b1:46:c3:d8:42:68:20:19: f2:da:dc:b9:a0:c6:c6:97:2f:f9:84:03:94:43:62: f6:11:17:6d:dd:13:10:18:26:89:fa:56:04:fa:de: 0c:38:e5:a2:62:e2:ad:94:04:e7:e4:a5:70:f8:92: e7:b1:3f:e2:f8:fe:94:8c:60:90:9a:d9:b2:5f:83: 88:a7:8a:7c:b9:85:c1:e6:ef:ed:2e:f7:14:76:8f: 12:05:e7:29:65:03:bc:82:31:4a:53:12:b2:cc:ef: 4c:4d:26:62:58:03:8a:50:d1:a8:64:6e:4e:c7:d7: 7b:88:0c:a8:14:e7:5d:b9:cd:24:6c:1a:71:24:eb: 84:8a:47:18:b3:42:a1:2b:f2:e0:7b:45:57:2f:8c: 6e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 63:40:B8:5B:81:7E:07:1C:A1:08:70:80:DE:8C:CB:9E:D8:9B:C9:CC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.2.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:a7:29:21:f1:57:9c:4d:88:90:db:f0:86:7d:f2:9a:79:23: e1:b1:75:47:6c:d8:b5:ed:72:fa:bf:79:02:e5:49:2a:b3:db: 27:df:b4:a2:5d:f0:03:ab:d3:68:a8:e0:9e:d3:ec:02:7d:07: 49:2b:25:81:88:b8:50:02:4d:e7:84:04:f3:4c:8c:c9:3c:b6: 13:7f:ea:31:c0:94:f3:10:28:bf:19:c6:88:c8:7d:3c:c3:b0: 70:d3:f2:b6:6c:f6:59:40:8e:ad:fd:bb:30:5c:8d:f4:bb:99: 1d:e8:57:c2:65:4d:74:2b:35:33:15:57:d9:73:4c:47:f5:cd: 31:94:63:17:9c:5b:83:ad:f0:5b:08:70:9c:a0:26:18:22:c7: 0a:87:96:52:ca:25:29:60:3b:26:b6:a7:1e:f8:f8:61:31:08: 25:05:25:c3:c4:be:f2:bf:7c:ab:8a:67:92:c3:57:4b:57:3d: 34:4d:f6:6c:3c:4a:29:34:82:0d:fa:ca:45:b6:2f:67:d8:6f: 3c:05:3c:a1:db:cb:52:51:b7:0b:3a:4c:11:11:53:34:30:05: 48:79:05:6c:d3:1c:bb:4f:84:b1:ac:47:34:f2:78:e8:05:eb: 01:8e:07:06:29:39:0b:81:97:00:9e:e0:d7:60:12:42:a5:83: 83:89:82:75 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUCj/IRvHgsbMa65QSk9N8PSO4GikwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzQyOVoX DTI3MDUwMjAwMzkyOVowMzExMC8GA1UEAxMoNjM0MEI4NUI4MTdFMDcxQ0ExMDg3 MDgwREU4Q0NCOUVEODlCQzlDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALL6cBV/qRNX2eugQInLHNre+RCQ4RmH/67xqQ6YJ17o+vyLZ1DoaypNnxd4 x2A3yew0memdaE0m5WgdID0nYtXs5NipsaMqLk56wmagAB1sfY+NiET4oczP34AQ SAvQA+VXlZe7yAxVbkU0JejBfrFGw9hCaCAZ8trcuaDGxpcv+YQDlENi9hEXbd0T EBgmifpWBPreDDjlomLirZQE5+SlcPiS57E/4vj+lIxgkJrZsl+DiKeKfLmFwebv 7S73FHaPEgXnKWUDvIIxSlMSsszvTE0mYlgDilDRqGRuTsfXe4gMqBTnXbnNJGwa cSTrhIpHGLNCoSvy4HtFVy+MbnECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGNAuFuBfgccoQhwgN6My57Ym8nMMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzUyY2Q5Y2VhLTNiZjQtNGE5Yy1hZWU2LTAwMzM5YzA2NTUwYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81MmNkOWNl YS0zYmY0LTRhOWMtYWVlNi0wMDMzOWMwNjU1MGIvMC82MzQwQjg1QjgxN0UwNzFD QTEwODcwODBERThDQ0I5RUQ4OUJDOUNDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6kCMA0GCSqGSIb3DQEBCwUAA4IBAQCdpykh8VecTYiQ2/CGffKaeSPhsXVH bNi17XL6v3kC5Ukqs9sn37SiXfADq9NoqOCe0+wCfQdJKyWBiLhQAk3nhATzTIzJ PLYTf+oxwJTzECi/GcaIyH08w7Bw0/K2bPZZQI6t/bswXI30u5kd6FfCZU10KzUz FVfZc0xH9c0xlGMXnFuDrfBbCHCcoCYYIscKh5ZSyiUpYDsmtqce+PhhMQglBSXD xL7yv3yrimeSw1dLVz00TfZsPEopNIIN+spFti9n2G88BTyh28tSUbcLOkwREVM0 MAVIeQVs0xy7T4SxrEc08njoBesBjgcGKTkLgZcAnuDXYBJCpYODiYJ1 -----END CERTIFICATE-----Generated at Fri May 8 07:27:37 2026 by rpki-client