$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer File: 6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer (raw, json) Hash identifier: FygYs45IEQcG+Txkbrpq+t430yy2owzTeuVbH9e+0J4= Subject key identifier: 6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 454E60154BAD61F32FC66032A23BF992D49D3D43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:48:50 +0000 Certificate not after: Sat 01 May 2027 23:53:50 +0000 Subordinate resources: IP: 160.22.62.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:4e:60:15:4b:ad:61:f3:2f:c6:60:32:a2:3b:f9:92:d4:9d:3d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 23:48:50 2026 GMT Not After : May 1 23:53:50 2027 GMT Subject: CN=6A896306C12F88C0F83F70AFCC7C6BF9C4F42109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:af:41:4f:ab:f9:b0:2c:05:20:4d:81:c9: 07:49:f5:38:f2:88:45:f6:05:d5:60:94:14:ca:67: cb:7a:8a:f8:23:5a:f9:f9:27:d6:43:26:08:a6:63: 17:8d:5f:89:a7:07:c8:56:69:d8:75:18:a2:0f:32: 86:c7:36:6d:7c:b0:fe:c1:ee:65:6a:4a:1e:66:bf: 10:3d:97:b9:ec:be:ad:e1:be:fb:6e:7a:d7:53:5d: d0:4e:af:53:9e:8a:70:e8:c8:23:53:1d:14:4b:c5: 4e:88:0f:de:97:90:f8:d7:b1:2b:2a:c2:e8:d5:c2: 56:ff:92:5c:1e:ef:37:25:9c:75:2e:9e:81:69:cb: a6:41:8d:ad:c5:6d:33:d4:1a:84:17:e6:e0:be:c0: 97:35:9e:07:a0:ba:72:28:3d:84:6c:3b:05:90:90: b7:32:10:76:44:30:bc:01:71:9d:93:71:2e:f1:e3: f2:cd:6c:e3:86:6f:d5:4a:bc:8a:f8:18:08:cd:5c: f9:0e:05:71:55:88:9e:7d:15:25:b9:6e:ae:9f:cb: 86:1c:98:ed:be:8a:b8:54:a6:67:99:e7:29:2f:40: a6:ee:13:22:53:2d:4e:2b:21:8a:47:4d:fc:d3:f2: 25:81:76:07:c8:f5:71:fe:cb:d9:98:c4:67:9a:1b: 2a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.62.0/23 Signature Algorithm: sha256WithRSAEncryption 36:ef:4a:a8:a5:0a:e8:ac:9c:70:df:19:8e:43:64:8f:20:78: 1f:89:a2:2a:c4:ad:74:76:18:b5:86:8d:7e:75:ea:9f:68:08: 67:51:89:9f:9b:d1:f8:f4:05:6a:6b:af:0b:c6:b0:66:c1:50: 52:9e:40:fc:1b:17:54:3a:50:9c:7c:db:68:71:a0:24:bd:9c: 1c:9f:95:0a:72:87:46:db:e0:1e:8a:af:c8:16:a3:21:01:3b: 7a:34:10:a4:ae:39:09:f2:af:30:4b:97:55:e6:96:81:9d:06: d6:fd:40:e1:d8:ff:bb:f9:3b:74:d6:bb:81:1a:15:60:e7:11: 4c:d1:11:d4:02:a2:79:59:60:ca:23:02:21:07:65:06:fa:2d: 87:12:be:ee:fb:c8:65:d1:62:c2:9f:0d:f7:e6:bb:d7:dc:01: ed:1a:8a:e6:3c:fb:4c:d5:25:d8:1d:8e:15:d4:40:4c:e3:22: a3:c9:b7:10:97:ed:43:a8:9b:94:0a:7e:1d:9a:a5:83:3b:c9: c7:10:3a:d1:72:ee:d8:65:dd:d2:61:27:d8:e9:c3:98:e8:cb: 4a:31:83:d1:9a:8b:4a:8d:ff:30:05:8e:60:da:16:fc:10:3f: c8:e4:dc:19:e9:97:79:6e:43:e6:2a:93:a0:75:c6:fa:95:f3: 1c:fb:67:14 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIURU5gFUutYfMvxmAyojv5ktSdPUMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjIzNDg1MFoX DTI3MDUwMTIzNTM1MFowMzExMC8GA1UEAxMoNkE4OTYzMDZDMTJGODhDMEY4M0Y3 MEFGQ0M3QzZCRjlDNEY0MjEwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIcr0FPq/mwLAUgTYHJB0n1OPKIRfYF1WCUFMpny3qK+CNa+fkn1kMmCKZj F41fiacHyFZp2HUYog8yhsc2bXyw/sHuZWpKHma/ED2Xuey+reG++25611Nd0E6v U56KcOjII1MdFEvFTogP3peQ+NexKyrC6NXCVv+SXB7vNyWcdS6egWnLpkGNrcVt M9QahBfm4L7AlzWeB6C6cig9hGw7BZCQtzIQdkQwvAFxnZNxLvHj8s1s44Zv1Uq8 ivgYCM1c+Q4FcVWInn0VJblurp/LhhyY7b6KuFSmZ5nnKS9Apu4TIlMtTishikdN /NPyJYF2B8j1cf7L2ZjEZ5obKmMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGqJYwbBL4jA+D9wr8x8a/nE9CEJMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBlYzY3N2ZkLWQ1NjktNGNjNS1hNTYzLTliMGYyNDhiMWFmMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wZWM2Nzdm ZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMC82QTg5NjMwNkMxMkY4OEMw RjgzRjcwQUZDQzdDNkJGOUM0RjQyMTA5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBY+MA0GCSqGSIb3DQEBCwUAA4IBAQA270qopQrorJxw3xmOQ2SPIHgfiaIq xK10dhi1ho1+deqfaAhnUYmfm9H49AVqa68LxrBmwVBSnkD8GxdUOlCcfNtocaAk vZwcn5UKcodG2+Aeiq/IFqMhATt6NBCkrjkJ8q8wS5dV5paBnQbW/UDh2P+7+Tt0 1ruBGhVg5xFM0RHUAqJ5WWDKIwIhB2UG+i2HEr7u+8hl0WLCnw335rvX3AHtGorm PPtM1SXYHY4V1EBM4yKjybcQl+1DqJuUCn4dmqWDO8nHEDrRcu7YZd3SYSfY6cOY 6MtKMYPRmotKjf8wBY5g2hb8ED/I5NwZ6Zd5bkPmKpOgdcb6lfMc+2cU -----END CERTIFICATE-----Generated at Tue May 5 14:19:36 2026 by rpki-client