$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/01D21CF844B21F1A9486A445F946566129AD4A58.cer File: 01D21CF844B21F1A9486A445F946566129AD4A58.cer (raw, json) Hash identifier: W1aL7xYHm/sR+FBjW8ZyJ/tI793TsrCECGfzCTRJBrw= Subject key identifier: 01:D2:1C:F8:44:B2:1F:1A:94:86:A4:45:F9:46:56:61:29:AD:4A:58 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2CDA2BEB2E52BAC624BD8A6A9C154DCE6E9B66E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft caRepository: rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:51:35 +0000 Certificate not after: Sat 01 May 2027 23:56:35 +0000 Subordinate resources: IP: 103.181.80.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:da:2b:eb:2e:52:ba:c6:24:bd:8a:6a:9c:15:4d:ce:6e:9b:66:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:51:35 2026 GMT Not After : May 1 23:56:35 2027 GMT Subject: CN=01D21CF844B21F1A9486A445F946566129AD4A58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8a:3b:02:59:d0:80:3f:17:cb:89:4b:67:a3: 2c:7c:f0:84:18:67:b4:c7:0b:f3:a3:59:f1:78:53: df:21:3f:90:d7:36:3f:43:28:7d:c6:4d:c4:4c:d8: 5a:b7:38:41:df:df:04:33:c9:11:02:6f:5b:26:ea: fb:68:94:6c:9a:52:29:b1:33:99:3b:20:01:ac:5c: 23:7b:6e:9a:1d:f5:0f:70:0d:1d:1a:e1:04:66:bd: 6b:cc:93:a2:37:eb:5a:03:96:55:80:82:cd:e4:c0: f9:77:ef:91:20:19:46:fe:46:f2:e3:bb:52:49:73: 20:7e:37:50:de:28:b2:6b:90:ab:c1:f3:34:6c:4d: 16:5c:de:0c:a6:3d:88:93:ee:3a:8a:ed:8f:49:1f: cb:ae:85:51:ee:fa:fa:5d:b8:38:0b:0a:6b:35:9e: ae:9d:22:ba:b0:d9:ca:c0:d1:27:f9:e5:5a:cc:40: 70:29:70:1f:2f:81:dc:39:12:08:70:2f:34:fb:cf: cf:79:d2:25:3e:81:f9:75:09:18:f3:2a:21:02:da: dc:78:38:00:32:c0:fc:61:74:5b:94:d3:95:c2:c4: 92:15:53:89:df:95:34:69:0d:b8:d7:29:7f:5d:e0: e6:84:74:c5:6f:2e:69:52:e6:b9:45:22:74:31:59: 83:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:D2:1C:F8:44:B2:1F:1A:94:86:A4:45:F9:46:56:61:29:AD:4A:58 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.80.0/24 Signature Algorithm: sha256WithRSAEncryption 24:50:45:4e:77:8f:89:de:ba:a6:d3:df:57:7b:21:c6:b6:1c: dc:42:23:7c:01:7c:99:5a:cb:ed:41:ec:4d:e5:8c:f7:86:e0: 00:75:a5:3a:06:b4:f8:31:95:4a:a4:07:79:fd:96:3b:c5:06: d7:02:83:5f:9b:d3:a8:27:85:ae:f5:51:6a:0f:8e:b9:6d:82: da:3a:0e:d1:8e:dc:17:9a:22:6f:8a:4c:ad:32:11:91:c8:f1: 58:aa:c1:e1:de:c8:f9:eb:fb:fa:40:3b:61:a8:67:7b:11:b0: 42:f1:b0:6a:ac:50:18:9b:06:3c:cf:3c:86:58:61:f1:00:93: c3:b1:19:4a:d0:f8:52:4c:d3:70:8f:f4:36:5a:1d:af:6e:82: e0:d9:92:98:fe:c4:fe:67:13:83:62:33:40:be:89:44:04:0e: 6f:2a:c0:70:10:7a:b4:54:98:86:3b:ff:b3:40:3e:b8:ad:7c: 36:7d:6c:5f:fc:8d:83:7c:d4:60:2b:92:a7:46:53:9e:5d:1d: 17:89:aa:5f:1f:51:26:66:82:e3:db:05:96:d0:b1:2b:01:cb: d8:ae:90:a4:f2:f8:07:b2:d0:f9:c5:2f:f2:33:cd:e0:fd:9b: 01:38:17:75:1f:f2:6a:57:c1:a5:36:22:fe:a3:1a:ec:74:b7: 9a:95:a4:54 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIULNor6y5SusYkvYpqnBVNzm6bZuUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTEzNVoX DTI3MDUwMTIzNTYzNVowMzExMC8GA1UEAxMoMDFEMjFDRjg0NEIyMUYxQTk0ODZB NDQ1Rjk0NjU2NjEyOUFENEE1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJGKOwJZ0IA/F8uJS2ejLHzwhBhntMcL86NZ8XhT3yE/kNc2P0MofcZNxEzY Wrc4Qd/fBDPJEQJvWybq+2iUbJpSKbEzmTsgAaxcI3tumh31D3ANHRrhBGa9a8yT ojfrWgOWVYCCzeTA+XfvkSAZRv5G8uO7UklzIH43UN4osmuQq8HzNGxNFlzeDKY9 iJPuOortj0kfy66FUe76+l24OAsKazWerp0iurDZysDRJ/nlWsxAcClwHy+B3DkS CHAvNPvPz3nSJT6B+XUJGPMqIQLa3Hg4ADLA/GF0W5TTlcLEkhVTid+VNGkNuNcp f13g5oR0xW8uaVLmuUUidDFZgzMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAHSHPhEsh8alIakRflGVmEprUpYMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzEzNGQ4Mjc3LTI5MTAtNDA3NS1iOTM3LTY2Zjk0MzUxOGUyOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xMzRkODI3 Ny0yOTEwLTQwNzUtYjkzNy02NmY5NDM1MThlMjkvMC8wMUQyMUNGODQ0QjIxRjFB OTQ4NkE0NDVGOTQ2NTY2MTI5QUQ0QTU4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ7VQMA0GCSqGSIb3DQEBCwUAA4IBAQAkUEVOd4+J3rqm099XeyHGthzcQiN8 AXyZWsvtQexN5Yz3huAAdaU6BrT4MZVKpAd5/ZY7xQbXAoNfm9OoJ4Wu9VFqD465 bYLaOg7RjtwXmiJvikytMhGRyPFYqsHh3sj56/v6QDthqGd7EbBC8bBqrFAYmwY8 zzyGWGHxAJPDsRlK0PhSTNNwj/Q2Wh2vboLg2ZKY/sT+ZxODYjNAvolEBA5vKsBw EHq0VJiGO/+zQD64rXw2fWxf/I2DfNRgK5KnRlOeXR0XiapfH1EmZoLj2wWW0LEr AcvYrpCk8vgHstD5xS/yM83g/ZsBOBd1H/JqV8GlNiL+oxrsdLealaRU -----END CERTIFICATE-----Generated at Tue May 12 22:02:42 2026 by rpki-client