$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.cer File: 6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.cer (raw, json) Hash identifier: 6XQfdaLUc1dTNyl4cb5FZwpu+zT5/ebtcz0CdXmj7hY= Subject key identifier: 6D:31:A5:73:DD:CC:9E:2C:71:AA:B2:61:4A:E7:15:DB:44:45:3E:C6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3705581F1609CA426FB193690E51E38209CF93DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:47:54 +0000 Certificate not after: Sun 02 May 2027 02:52:54 +0000 Subordinate resources: IP: 103.31.42.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:05:58:1f:16:09:ca:42:6f:b1:93:69:0e:51:e3:82:09:cf:93:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:47:54 2026 GMT Not After : May 2 02:52:54 2027 GMT Subject: CN=6D31A573DDCC9E2C71AAB2614AE715DB44453EC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d1:5d:04:4c:87:07:a2:19:2e:13:c2:c8:98: c6:b4:45:a2:25:01:d9:6e:f9:31:db:19:8e:3b:e1: c7:57:e7:1d:7e:0d:0a:03:57:0b:50:8d:fa:01:c1: a1:5d:8b:2f:ce:ca:d1:0e:6f:5b:6c:d8:d5:82:07: b6:8e:7c:58:80:75:bd:40:48:da:5f:e6:2d:48:bc: 0c:6e:b0:4e:66:2b:47:54:90:5f:5a:a6:48:77:bf: fb:2f:f2:cc:88:7b:b7:67:b8:48:6d:d2:65:7e:16: ee:0c:b6:e2:4c:03:7d:b4:de:14:28:14:32:5f:51: 5a:0c:2a:2b:34:9f:06:25:b5:41:80:8d:e1:41:29: 02:0f:1b:ae:52:27:3d:75:d0:ab:3a:d4:91:5b:17: 61:4b:a4:81:e2:c4:c3:b6:be:dd:8c:85:89:5a:f0: ec:aa:e4:b8:01:17:c2:bb:bc:02:5c:41:ed:d5:b0: a3:41:54:db:58:8e:04:b3:e0:fb:8c:8b:31:68:ae: 1d:b4:86:f5:9c:ea:a0:81:78:2b:08:0d:fa:77:f8: 1e:ed:62:b5:42:31:63:35:ec:4a:5f:80:fe:a0:22: fe:72:f9:9c:cd:8c:1c:50:0d:dd:6c:3a:7d:da:ec: 2c:a6:72:db:2c:c6:a7:c5:7c:c8:0e:9f:4b:63:8e: 1f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6D:31:A5:73:DD:CC:9E:2C:71:AA:B2:61:4A:E7:15:DB:44:45:3E:C6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.42.0/23 Signature Algorithm: sha256WithRSAEncryption 44:38:a3:ee:f2:ca:d8:e3:38:5d:48:2e:d9:5a:87:4b:ec:44: e5:51:81:45:b4:5d:66:36:d0:7a:fc:ca:43:28:d6:d7:ed:fc: db:2a:12:84:cb:4b:d8:0f:00:d6:d2:05:a4:d4:8d:34:e2:46: d3:29:0d:10:03:50:90:2a:f0:b5:ef:21:13:74:54:b8:bc:69: 09:a4:f5:86:88:d2:49:57:96:4d:bb:5b:7b:28:d2:b7:72:84: d4:28:ea:bb:14:09:c5:74:51:6e:1c:5b:fd:14:5b:a8:ad:9c: 09:3c:fc:27:04:e7:00:ef:28:c8:d9:94:70:06:0a:b8:e2:38: 9d:4f:73:18:f3:6f:8a:89:a0:6d:fb:e9:86:38:5d:cc:39:d6: 7f:6d:92:e9:ae:1e:56:7e:79:a2:26:28:39:0f:d1:1d:ed:40: 6c:55:c4:ea:51:73:a2:5e:2a:13:77:2f:c3:8b:e8:cc:37:cd: 55:bc:c4:2f:ef:6d:a0:16:ea:46:f7:1d:f8:d9:a1:49:47:81: 1f:be:e8:0f:eb:ad:d4:2a:bf:04:bb:43:7e:b6:cc:dd:f8:cc: 31:10:61:46:78:72:2d:6a:66:f6:ac:f0:96:a3:53:85:24:15: 33:9b:3a:5d:3c:5d:a6:c4:7c:f9:f1:31:e1:d6:a4:0e:95:74: 64:b4:14:61 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUNwVYHxYJykJvsZNpDlHjggnPk9wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDc1NFoX DTI3MDUwMjAyNTI1NFowMzExMC8GA1UEAxMoNkQzMUE1NzNERENDOUUyQzcxQUFC MjYxNEFFNzE1REI0NDQ1M0VDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALnRXQRMhweiGS4TwsiYxrRFoiUB2W75MdsZjjvhx1fnHX4NCgNXC1CN+gHB oV2LL87K0Q5vW2zY1YIHto58WIB1vUBI2l/mLUi8DG6wTmYrR1SQX1qmSHe/+y/y zIh7t2e4SG3SZX4W7gy24kwDfbTeFCgUMl9RWgwqKzSfBiW1QYCN4UEpAg8brlIn PXXQqzrUkVsXYUukgeLEw7a+3YyFiVrw7KrkuAEXwru8AlxB7dWwo0FU21iOBLPg +4yLMWiuHbSG9ZzqoIF4KwgN+nf4Hu1itUIxYzXsSl+A/qAi/nL5nM2MHFAN3Ww6 fdrsLKZy2yzGp8V8yA6fS2OOH/cCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG0xpXPdzJ4scaqyYUrnFdtERT7GMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ZlNGFjZTExLTkxMzktNDQ4NS1hYmE5LTA0YmVkZGM1YmMyNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mZTRhY2Ux MS05MTM5LTQ0ODUtYWJhOS0wNGJlZGRjNWJjMjYvMC82RDMxQTU3M0REQ0M5RTJD NzFBQUIyNjE0QUU3MTVEQjQ0NDUzRUM2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZx8qMA0GCSqGSIb3DQEBCwUAA4IBAQBEOKPu8srY4zhdSC7ZWodL7ETlUYFF tF1mNtB6/MpDKNbX7fzbKhKEy0vYDwDW0gWk1I004kbTKQ0QA1CQKvC17yETdFS4 vGkJpPWGiNJJV5ZNu1t7KNK3coTUKOq7FAnFdFFuHFv9FFuorZwJPPwnBOcA7yjI 2ZRwBgq44jidT3MY82+KiaBt++mGOF3MOdZ/bZLprh5WfnmiJig5D9Ed7UBsVcTq UXOiXioTdy/Di+jMN81VvMQv722gFupG9x342aFJR4EfvugP663UKr8Eu0N+tszd +MwxEGFGeHItamb2rPCWo1OFJBUzmzpdPF2mxHz58THh1qQOlXRktBRh -----END CERTIFICATE-----Generated at Tue May 5 14:17:06 2026 by rpki-client