$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer File: 1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer (raw, json) Hash identifier: w8B8iMqoQ4ilNLs9/G9Foud4hxkRvwXs2CS6YY2oGY4= Subject key identifier: 11:33:57:82:21:40:7D:A4:E6:D6:E1:F7:DD:BD:40:2A:D1:71:42:D1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 24F0A4B3FF411A7274EB5D647A61C7A7BA93ECD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:48:49 +0000 Certificate not after: Sun 02 May 2027 00:53:49 +0000 Subordinate resources: IP: 202.149.128.0/19 IP: 2404:600::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:f0:a4:b3:ff:41:1a:72:74:eb:5d:64:7a:61:c7:a7:ba:93:ec:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:48:49 2026 GMT Not After : May 2 00:53:49 2027 GMT Subject: CN=1133578221407DA4E6D6E1F7DDBD402AD17142D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4a:c5:d0:5e:ba:0c:77:98:a7:ad:62:b6:2a: a4:7c:17:19:4e:f4:a3:45:b4:ee:77:0d:f2:f3:4d: d5:9f:d6:ba:d4:e5:85:ac:1f:91:23:76:f2:56:51: b6:95:fe:7d:51:d1:84:12:06:3f:03:6c:c0:bd:20: bf:0c:a8:0a:62:9d:db:ea:18:77:32:94:0b:fa:24: 05:07:ec:9a:f2:6c:b0:2a:5c:53:d9:5c:c4:31:36: 39:72:da:0a:eb:96:44:80:0a:6f:5c:b6:4c:27:a1: ad:65:1c:91:da:8e:8d:d7:4d:75:34:10:7d:1e:52: 3f:2a:97:8d:ff:e3:11:77:ad:3c:93:33:91:db:c9: 57:b2:55:8b:9a:be:08:96:2d:4c:14:09:94:6f:c3: fc:89:06:46:db:8a:8d:e6:d9:0b:e1:27:73:e0:6b: cd:16:7d:3c:1a:bb:91:86:38:05:19:56:12:87:b9: a9:ad:27:d5:ab:c0:ea:5a:46:86:4b:1c:9e:33:03: 71:fe:20:53:a5:52:55:7c:4a:2a:a2:ec:c5:a3:c3: 7b:ee:05:5e:6d:ea:b5:6a:5f:be:7c:e8:a4:b5:be: 69:33:67:92:20:6c:93:7b:15:51:a8:d8:80:33:c4: 38:87:e1:46:33:82:b6:7b:26:1f:4c:9a:ce:fb:ed: 32:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 11:33:57:82:21:40:7D:A4:E6:D6:E1:F7:DD:BD:40:2A:D1:71:42:D1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.149.128.0/19 IPv6: 2404:600::/32 Signature Algorithm: sha256WithRSAEncryption 86:f2:05:b3:4e:b1:45:37:3a:0f:81:26:9a:c8:88:aa:44:c2: e8:59:fd:3d:56:e8:f6:cd:c2:31:05:45:fe:11:a3:bd:18:9e: dd:7c:8f:1a:77:00:31:06:ad:e8:af:69:bf:2b:8f:26:31:8b: 89:de:73:b0:43:f7:08:80:2f:d4:3a:04:8e:ca:72:09:29:ab: ed:e1:54:1b:8d:22:d4:c2:f8:9e:ab:84:04:6d:95:93:85:dc: ef:0e:d8:7c:88:b1:db:a1:7f:40:f8:df:9e:46:36:9d:23:16: 8a:31:cd:4b:68:94:80:7d:af:b8:d7:03:58:7f:1b:b4:72:32: 56:dc:53:96:d4:f6:48:30:5c:03:8c:29:b8:36:ef:76:a7:f4: 5a:15:4a:87:39:30:61:32:17:60:e4:82:8e:b6:d7:8c:79:ee: ef:dd:60:4a:d3:40:3e:e0:d6:bf:d7:27:aa:d0:35:56:bd:83: 7c:60:b1:8e:9a:e3:4e:36:bf:e0:bd:93:b3:00:22:4b:5a:ef: 9e:b0:31:28:db:5c:0f:4b:aa:ae:7b:94:b0:0b:f0:94:a6:b0: bd:d0:c6:0a:dc:ca:f5:21:a7:db:aa:13:0a:17:6c:0e:58:d3: 16:18:01:00:2c:40:54:3c:2d:7b:8b:db:3e:34:ac:bd:62:e7: c1:4d:f3:e0 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUJPCks/9BGnJ0611kemHHp7qT7NkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDg0OVoX DTI3MDUwMjAwNTM0OVowMzExMC8GA1UEAxMoMTEzMzU3ODIyMTQwN0RBNEU2RDZF MUY3RERCRDQwMkFEMTcxNDJEMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9KxdBeugx3mKetYrYqpHwXGU70o0W07ncN8vNN1Z/WutTlhawfkSN28lZR tpX+fVHRhBIGPwNswL0gvwyoCmKd2+oYdzKUC/okBQfsmvJssCpcU9lcxDE2OXLa CuuWRIAKb1y2TCehrWUckdqOjddNdTQQfR5SPyqXjf/jEXetPJMzkdvJV7JVi5q+ CJYtTBQJlG/D/IkGRtuKjebZC+Enc+BrzRZ9PBq7kYY4BRlWEoe5qa0n1avA6lpG hkscnjMDcf4gU6VSVXxKKqLsxaPDe+4FXm3qtWpfvnzopLW+aTNnkiBsk3sVUajY gDPEOIfhRjOCtnsmH0yazvvtMi8CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBEzV4IhQH2k5tbh9929QCrRcULRMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY2YzFmNTFhLTg2NDUtNGViMS1hMmZmLWUyN2MyNGM4ZTBjOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82NmMxZjUx YS04NjQ1LTRlYjEtYTJmZi1lMjdjMjRjOGUwYzgvMC8xMTMzNTc4MjIxNDA3REE0 RTZENkUxRjdEREJENDAyQUQxNzE0MkQxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQFypWAMA0EAgACMAcDBQAkBAYAMA0GCSqGSIb3DQEBCwUAA4IBAQCG8gWzTrFF NzoPgSaayIiqRMLoWf09Vuj2zcIxBUX+EaO9GJ7dfI8adwAxBq3or2m/K48mMYuJ 3nOwQ/cIgC/UOgSOynIJKavt4VQbjSLUwvieq4QEbZWThdzvDth8iLHboX9A+N+e RjadIxaKMc1LaJSAfa+41wNYfxu0cjJW3FOW1PZIMFwDjCm4Nu92p/RaFUqHOTBh Mhdg5IKOtteMee7v3WBK00A+4Na/1yeq0DVWvYN8YLGOmuNONr/gvZOzACJLWu+e sDEo21wPS6que5SwC/CUprC90MYK3Mr1IafbqhMKF2wOWNMWGAEALEBUPC17i9s+ NKy9YufBTfPg -----END CERTIFICATE-----Generated at Tue May 12 22:17:10 2026 by rpki-client