$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer File: AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer (raw, json) Hash identifier: vkDsDUw/rDkFvyS7RsSkFVvcxYAkWou2D0k4TJQDrz0= Subject key identifier: AD:6B:0A:2D:06:A8:57:71:D2:A2:F1:AF:69:B2:9A:53:51:A6:FE:2A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6A098613E2519A961B8FCC933FF6B6A2165B102E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:07:04 +0000 Certificate not after: Sun 02 May 2027 02:12:04 +0000 Subordinate resources: IP: 103.141.108.0/23 IP: 2405:1640::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:09:86:13:e2:51:9a:96:1b:8f:cc:93:3f:f6:b6:a2:16:5b:10:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:07:04 2026 GMT Not After : May 2 02:12:04 2027 GMT Subject: CN=AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d2:a5:0e:fe:80:ba:72:3d:37:a1:eb:57:33: dc:38:fa:2c:a2:2e:90:cc:43:99:c3:d9:68:c6:cd: cd:41:7e:d6:68:8c:ca:ba:94:72:ed:16:83:98:40: 14:a6:e7:0b:73:77:66:b1:cc:9e:b4:0f:2c:33:f3: aa:3f:40:f0:7f:db:34:de:10:26:26:37:0e:43:4c: fe:0c:93:b1:18:49:0e:bc:45:a8:e8:e3:c5:90:9a: 90:ce:31:be:ab:29:87:16:d7:4d:41:07:24:fb:d4: 1e:45:81:c8:fd:d2:81:1d:ee:cc:4f:af:75:91:76: a9:9e:92:68:1a:d5:de:05:96:d2:f7:34:1b:8a:83: 8c:39:b9:f5:1c:86:bb:3d:c0:1b:9e:99:51:e6:d6: bf:ba:15:87:b4:aa:56:df:18:7f:f0:cb:2a:61:55: 9c:78:96:39:72:43:c5:82:e1:f0:bc:ac:fc:10:ef: 08:cd:ea:ce:21:fb:f8:a4:88:2a:ab:27:ce:f7:b6: 5b:c4:eb:62:68:71:b2:00:bf:fa:d3:28:0c:f4:71: 69:71:d4:7d:c8:d5:c7:7e:15:03:d0:f2:86:b6:36: c3:94:d6:69:b9:81:24:4a:03:57:19:f4:02:32:6b: 4c:b1:25:f7:25:b0:42:ce:f6:8c:a1:71:71:f1:dd: 5a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AD:6B:0A:2D:06:A8:57:71:D2:A2:F1:AF:69:B2:9A:53:51:A6:FE:2A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.141.108.0/23 IPv6: 2405:1640::/32 Signature Algorithm: sha256WithRSAEncryption 33:d7:72:e8:b3:d5:da:e1:26:87:fb:e9:9a:77:f2:3e:e3:10: d6:f0:3d:fe:de:e4:b7:60:1f:a8:33:0e:bb:a9:44:ca:6c:f3: 9e:fd:48:b4:eb:14:4e:b9:f9:99:af:32:6e:c1:a1:3b:de:1b: ae:08:06:ba:d2:fc:98:d6:ab:fe:47:b8:26:b8:f0:59:a3:6d: 5c:ee:5f:c3:f1:41:76:03:d2:54:f2:19:94:30:f7:b8:65:2e: 71:33:09:9d:b9:39:d2:77:3c:39:e1:b8:4d:c6:85:82:2e:25: 4b:9e:90:f7:1a:e6:56:39:0f:99:7c:97:c5:24:f7:72:aa:fb: 11:3f:7f:c4:ab:aa:c9:01:c1:99:cf:d5:33:fa:45:68:df:ab: e8:35:bf:3d:d2:48:e6:11:f9:7e:81:d3:ea:9c:d6:89:b3:49: 5d:cb:1e:86:40:49:22:60:53:2f:a0:c8:ab:35:58:4b:50:14: fe:31:ad:8c:92:09:ea:81:64:03:a5:6d:f7:93:ac:48:3e:d5: 8e:c4:ac:81:59:09:b8:a2:3f:37:c5:3a:8c:0c:25:c5:78:93: 7e:95:d2:5f:7c:65:52:68:c4:46:15:d1:ff:a1:89:a4:db:7b: f2:b7:79:62:04:f9:1e:ac:2f:58:5a:38:07:cd:73:40:a3:15: 82:2b:2a:eb -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUagmGE+JRmpYbj8yTP/a2ohZbEC4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDcwNFoX DTI3MDUwMjAyMTIwNFowMzExMC8GA1UEAxMoQUQ2QjBBMkQwNkE4NTc3MUQyQTJG MUFGNjlCMjlBNTM1MUE2RkUyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALjSpQ7+gLpyPTeh61cz3Dj6LKIukMxDmcPZaMbNzUF+1miMyrqUcu0Wg5hA FKbnC3N3ZrHMnrQPLDPzqj9A8H/bNN4QJiY3DkNM/gyTsRhJDrxFqOjjxZCakM4x vqsphxbXTUEHJPvUHkWByP3SgR3uzE+vdZF2qZ6SaBrV3gWW0vc0G4qDjDm59RyG uz3AG56ZUebWv7oVh7SqVt8Yf/DLKmFVnHiWOXJDxYLh8Lys/BDvCM3qziH7+KSI Kqsnzve2W8TrYmhxsgC/+tMoDPRxaXHUfcjVx34VA9DyhrY2w5TWabmBJEoDVxn0 AjJrTLEl9yWwQs72jKFxcfHdWoMCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK1rCi0GqFdx0qLxr2mymlNRpv4qMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RmNTUxYWI5LTgwNDEtNGE5YS05YjUwLWM3YzZkZWMyMTY2Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kZjU1MWFi OS04MDQxLTRhOWEtOWI1MC1jN2M2ZGVjMjE2NmYvMC9BRDZCMEEyRDA2QTg1Nzcx RDJBMkYxQUY2OUIyOUE1MzUxQTZGRTJBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ41sMA0EAgACMAcDBQAkBRZAMA0GCSqGSIb3DQEBCwUAA4IBAQAz13Los9Xa 4SaH++mad/I+4xDW8D3+3uS3YB+oMw67qUTKbPOe/Ui06xROufmZrzJuwaE73huu CAa60vyY1qv+R7gmuPBZo21c7l/D8UF2A9JU8hmUMPe4ZS5xMwmduTnSdzw54bhN xoWCLiVLnpD3GuZWOQ+ZfJfFJPdyqvsRP3/Eq6rJAcGZz9Uz+kVo36voNb890kjm Efl+gdPqnNaJs0ldyx6GQEkiYFMvoMirNVhLUBT+Ma2MkgnqgWQDpW33k6xIPtWO xKyBWQm4oj83xTqMDCXFeJN+ldJffGVSaMRGFdH/oYmk23vyt3liBPkerC9YWjgH zXNAoxWCKyrr -----END CERTIFICATE-----Generated at Tue May 5 17:51:11 2026 by rpki-client