$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.cer File: 6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.cer (raw, json) Hash identifier: 8YMKk1U8HBAZeXqkY00WYQu1vbeZT4910gobb0OWMNo= Subject key identifier: 6F:AE:5D:44:DD:E9:97:DF:0A:08:C5:5D:DF:BE:12:D2:6F:1F:D9:B1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6A2D9712D2CBBA01D3396929383344BCAECB947A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:55:36 +0000 Certificate not after: Sun 02 May 2027 00:00:36 +0000 Subordinate resources: IP: 103.167.22.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 05:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:2d:97:12:d2:cb:ba:01:d3:39:69:29:38:33:44:bc:ae:cb:94:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:55:36 2026 GMT Not After : May 2 00:00:36 2027 GMT Subject: CN=6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a6:30:ce:1e:87:c7:77:fc:28:b7:6d:91:68: f8:78:a1:25:38:8a:14:7e:3e:b3:0d:ce:5d:27:4c: 27:8b:d3:de:41:d2:86:62:df:04:6f:72:c6:81:14: 98:54:c3:7f:9f:b4:42:d3:aa:4e:e5:6e:8f:95:fc: e2:eb:4b:6e:eb:16:7e:28:29:07:8e:c3:50:24:b0: 33:27:c2:88:f7:68:8e:22:1f:ba:bf:9b:20:49:8c: c6:73:4b:71:5b:df:28:f2:6b:64:4b:fd:84:94:55: 31:3d:d7:ac:fa:2d:60:c4:8b:40:d4:d8:a2:96:7e: 5a:69:95:fa:b2:ef:6e:47:14:11:d2:47:0a:99:19: a1:24:f8:8b:d1:c4:03:51:4c:74:2b:e7:26:6b:c3: b5:d9:59:ee:8b:b1:fd:17:56:9a:3a:5e:be:3d:78: e7:28:a6:1e:09:4a:bc:f2:bf:01:5c:78:66:39:cb: 49:45:90:82:f4:cf:59:7f:54:9d:52:5d:da:89:5f: bc:75:78:c5:ea:ea:de:55:9c:da:05:07:c3:0a:a1: 76:e6:81:19:72:ca:6c:30:1b:33:27:22:ea:de:68: e7:54:60:93:4c:c8:75:ae:43:e6:37:a3:eb:58:7b: 48:91:c9:98:7d:06:db:7a:79:ca:ef:39:8c:41:d1: df:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6F:AE:5D:44:DD:E9:97:DF:0A:08:C5:5D:DF:BE:12:D2:6F:1F:D9:B1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.22.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:d5:f2:26:0e:4e:5c:d3:9e:45:5d:20:63:01:fd:0c:c9:9d: 8c:22:b2:a8:f0:7e:30:9f:80:d9:3c:23:75:ea:5c:fd:75:cb: 4b:98:a9:37:89:c8:6d:6b:8a:3f:6a:fd:d0:2c:f0:44:65:48: fa:05:06:bd:d3:bd:8f:6a:b4:77:19:b5:7f:5a:03:35:58:9c: 47:fb:48:3e:cc:a3:3d:27:86:43:9d:da:a9:73:f3:18:8f:17: 86:4d:04:08:18:ab:65:ac:0d:8e:da:fa:09:7b:fb:f5:10:aa: 23:30:d4:3b:67:65:44:55:ac:25:98:9e:92:48:4d:b5:78:eb: 1c:70:54:34:99:9b:82:93:e4:39:35:ad:ff:60:2a:8a:be:e3: 29:91:1d:8d:70:21:2f:16:82:7e:37:74:ca:fa:8f:25:17:f4: 3a:d0:a3:dd:f4:cc:fe:d5:76:4e:c2:0e:e2:81:3a:db:8f:b5: 1f:60:0e:85:51:9a:04:a9:65:9b:92:9b:db:0c:80:a3:4d:41: 5b:3f:da:cf:a8:bf:63:4f:c8:6d:2c:f3:da:bd:1a:0d:43:34: 9e:83:f7:85:f3:14:f6:52:b4:9a:b8:0a:61:31:fd:69:c0:df: ec:dc:de:75:ae:5f:90:be:d0:e5:41:e2:23:22:36:41:b4:49: c6:9a:ea:b5 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUai2XEtLLugHTOWkpODNEvK7LlHowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTUzNloX DTI3MDUwMjAwMDAzNlowMzExMC8GA1UEAxMoNkZBRTVENDREREU5OTdERjBBMDhD NTVEREZCRTEyRDI2RjFGRDlCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIGmMM4eh8d3/Ci3bZFo+HihJTiKFH4+sw3OXSdMJ4vT3kHShmLfBG9yxoEU mFTDf5+0QtOqTuVuj5X84utLbusWfigpB47DUCSwMyfCiPdojiIfur+bIEmMxnNL cVvfKPJrZEv9hJRVMT3XrPotYMSLQNTYopZ+WmmV+rLvbkcUEdJHCpkZoST4i9HE A1FMdCvnJmvDtdlZ7oux/RdWmjpevj145yimHglKvPK/AVx4ZjnLSUWQgvTPWX9U nVJd2olfvHV4xerq3lWc2gUHwwqhduaBGXLKbDAbMyci6t5o51Rgk0zIda5D5jej 61h7SJHJmH0G23p5yu85jEHR32MCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG+uXUTd6ZffCgjFXd++EtJvH9mxMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE4MWUzMDViLTAwMzktNGIwZS04YzU5LTI0MjMyODBiN2MzYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xODFlMzA1 Yi0wMDM5LTRiMGUtOGM1OS0yNDIzMjgwYjdjM2MvMC82RkFFNUQ0NERERTk5N0RG MEEwOEM1NURERkJFMTJEMjZGMUZEOUIxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6cWMA0GCSqGSIb3DQEBCwUAA4IBAQCN1fImDk5c055FXSBjAf0MyZ2MIrKo 8H4wn4DZPCN16lz9dctLmKk3ichta4o/av3QLPBEZUj6BQa9072ParR3GbV/WgM1 WJxH+0g+zKM9J4ZDndqpc/MYjxeGTQQIGKtlrA2O2voJe/v1EKojMNQ7Z2VEVawl mJ6SSE21eOsccFQ0mZuCk+Q5Na3/YCqKvuMpkR2NcCEvFoJ+N3TK+o8lF/Q60KPd 9Mz+1XZOwg7igTrbj7UfYA6FUZoEqWWbkpvbDICjTUFbP9rPqL9jT8htLPPavRoN QzSeg/eF8xT2UrSauAphMf1pwN/s3N51rl+QvtDlQeIjIjZBtEnGmuq1 -----END CERTIFICATE-----Generated at Fri May 8 07:29:34 2026 by rpki-client