$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer File: 0171EAA218774432ABC9A9D090D868F4943C2BC9.cer (raw, json) Hash identifier: YsKx9T92XoiiNiWJZYa9IZ3RpCh5DhhVd1YBeUp90Zc= Subject key identifier: 01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 62203D43F0C930A1E25BF6D9D7242047755CFE41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:14:26 +0000 Certificate not after: Sun 02 May 2027 00:19:26 +0000 Subordinate resources: IP: 203.145.62.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:20:3d:43:f0:c9:30:a1:e2:5b:f6:d9:d7:24:20:47:75:5c:fe:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:14:26 2026 GMT Not After : May 2 00:19:26 2027 GMT Subject: CN=0171EAA218774432ABC9A9D090D868F4943C2BC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a0:e3:16:7b:84:c1:79:c3:d8:f0:24:98:68: 2c:30:b8:19:f0:05:b5:cc:7d:67:11:03:e0:29:76: e0:5f:f5:b0:97:94:bd:79:f7:d1:f5:c9:64:76:87: b0:d7:bd:c4:1e:2b:7f:69:18:ea:10:e5:e9:fc:43: 8e:cb:9c:cd:96:a4:72:e5:60:fd:0d:b7:c7:ac:e0: 11:a8:ff:cd:e4:3c:07:b2:d4:23:1c:72:97:61:40: 11:e2:95:97:9f:8f:a4:5f:3a:d5:51:c8:ce:e8:84: 1e:be:1e:9c:f2:ee:43:5d:40:61:71:fe:7b:26:45: 06:57:14:83:ca:a3:7f:9b:69:c5:41:57:05:2c:10: da:93:a4:01:0b:ec:c1:d2:33:a9:fa:75:a0:60:86: 33:c5:94:fb:81:46:d3:5f:05:f7:9b:7d:3e:3f:fb: 8a:ec:a4:2f:8a:54:d6:b3:e3:51:88:15:e7:51:90: 6b:93:da:42:57:d6:ac:91:71:55:88:c1:0c:11:f0: 83:26:f9:1e:a1:71:12:8b:69:3e:ce:57:b0:ee:98: 5e:f6:99:91:c8:30:f2:d8:cd:08:c9:71:bd:39:de: 54:d4:be:fb:21:48:20:1e:4a:07:af:54:50:70:75: 30:d6:8a:d1:87:8e:3a:e7:9c:ba:31:91:16:00:0d: 45:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.145.62.0/23 Signature Algorithm: sha256WithRSAEncryption 05:8d:bc:d5:db:08:c6:be:95:58:9e:f6:7f:d2:5d:01:08:c8: 93:88:22:6f:57:b7:39:b1:8b:8c:77:62:1e:5c:b6:20:e1:21: 4b:bf:b8:93:f9:68:0c:49:61:7a:21:dd:ec:21:46:34:13:10: c0:8d:56:ee:97:2c:e3:dc:7c:98:6a:32:5d:27:70:a0:b7:2b: 45:c3:fa:ff:9d:07:94:51:f0:a5:8e:76:ac:47:f0:30:e1:d1: ec:ff:d0:5a:a2:44:16:c9:31:56:a7:21:36:f1:a4:d4:76:64: 49:b5:4a:d7:d8:77:75:3d:26:f8:77:78:b1:95:eb:7b:a4:da: fc:6d:ee:9b:57:f9:73:01:7f:f4:b2:c6:19:c7:e9:ae:cf:b9: 83:9a:cd:c9:a0:89:04:e6:75:db:97:c6:02:2d:a2:c3:cc:19: 57:90:fc:9b:f9:19:12:fb:ff:f4:92:5d:0d:48:59:3c:9f:8b: d2:d4:2a:9c:5b:86:0a:64:67:9f:55:93:c1:51:90:e3:02:39: 2c:dc:54:74:6d:d0:56:b8:b0:d8:86:a6:08:0f:df:51:14:54: 72:a1:a1:3b:cb:cc:aa:77:1f:f2:09:0b:ac:7c:8a:7e:50:cf: 0b:5d:05:47:06:18:f2:63:00:27:5d:24:d5:9b:c2:de:1f:41: 8a:cb:28:d7 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYiA9Q/DJMKHiW/bZ1yQgR3Vc/kEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTQyNloX DTI3MDUwMjAwMTkyNlowMzExMC8GA1UEAxMoMDE3MUVBQTIxODc3NDQzMkFCQzlB OUQwOTBEODY4RjQ5NDNDMkJDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOg4xZ7hMF5w9jwJJhoLDC4GfAFtcx9ZxED4Cl24F/1sJeUvXn30fXJZHaH sNe9xB4rf2kY6hDl6fxDjsuczZakcuVg/Q23x6zgEaj/zeQ8B7LUIxxyl2FAEeKV l5+PpF861VHIzuiEHr4enPLuQ11AYXH+eyZFBlcUg8qjf5tpxUFXBSwQ2pOkAQvs wdIzqfp1oGCGM8WU+4FG018F95t9Pj/7iuykL4pU1rPjUYgV51GQa5PaQlfWrJFx VYjBDBHwgyb5HqFxEotpPs5XsO6YXvaZkcgw8tjNCMlxvTneVNS++yFIIB5KB69U UHB1MNaK0YeOOuecujGRFgANRdcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAFx6qIYd0Qyq8mp0JDYaPSUPCvJMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzMzZGRhOTIzLWVhMzYtNDU2Yi1iYWZlLTQwZTZiNjJmNTBjNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zM2RkYTky My1lYTM2LTQ1NmItYmFmZS00MGU2YjYyZjUwYzUvMC8wMTcxRUFBMjE4Nzc0NDMy QUJDOUE5RDA5MEQ4NjhGNDk0M0MyQkM5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBy5E+MA0GCSqGSIb3DQEBCwUAA4IBAQAFjbzV2wjGvpVYnvZ/0l0BCMiTiCJv V7c5sYuMd2IeXLYg4SFLv7iT+WgMSWF6Id3sIUY0ExDAjVbulyzj3HyYajJdJ3Cg tytFw/r/nQeUUfCljnasR/Aw4dHs/9BaokQWyTFWpyE28aTUdmRJtUrX2Hd1PSb4 d3ixlet7pNr8be6bV/lzAX/0ssYZx+muz7mDms3JoIkE5nXbl8YCLaLDzBlXkPyb +RkS+//0kl0NSFk8n4vS1CqcW4YKZGefVZPBUZDjAjks3FR0bdBWuLDYhqYID99R FFRyoaE7y8yqdx/yCQusfIp+UM8LXQVHBhjyYwAnXSTVm8LeH0GKyyjX -----END CERTIFICATE-----Generated at Tue May 12 22:09:56 2026 by rpki-client