$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer File: 173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer (raw, json) Hash identifier: mUNf93a+AengWuLcGnyn1Q2Pg2iIZKs9eJqJE+dZsRQ= Subject key identifier: 17:3B:D9:57:DD:DD:B6:3E:DA:C5:83:3C:03:FB:F6:B0:2C:13:DE:CB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 49FA3BED9F5C304DA1C574A56481853FBD3A6CD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:17:48 +0000 Certificate not after: Sun 02 May 2027 02:22:48 +0000 Subordinate resources: IP: 103.142.60.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:fa:3b:ed:9f:5c:30:4d:a1:c5:74:a5:64:81:85:3f:bd:3a:6c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:17:48 2026 GMT Not After : May 2 02:22:48 2027 GMT Subject: CN=173BD957DDDDB63EDAC5833C03FBF6B02C13DECB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:27:84:ff:ab:24:04:e8:55:df:1a:32:3f:81: 7a:50:ac:7b:cb:1a:6a:d2:5c:e6:98:18:e4:a9:5e: ca:b7:27:d7:a6:47:5b:1f:0a:de:20:d4:ff:52:89: 8b:13:7e:0a:24:87:39:60:d9:f3:7e:22:3b:52:18: ed:86:f6:a9:b8:40:d0:6b:6d:62:47:b3:da:7c:bf: 9f:19:db:a0:b8:da:af:bf:f4:77:2c:e5:33:73:39: 51:eb:89:d9:10:4a:21:7b:0a:d7:5e:c2:61:c3:6c: 70:71:d8:cf:9b:27:68:ae:56:7b:15:dc:62:9d:78: 3d:39:bc:dd:84:08:b4:12:75:26:e1:7f:64:05:f4: 29:8a:b9:cb:1f:92:25:72:88:46:09:04:3a:20:d2: 3d:fa:fb:62:f3:01:3e:fe:ae:21:14:23:25:b6:46: 4d:b2:0a:77:5d:d0:a9:68:4e:da:35:6e:55:97:a7: bd:29:fe:f2:36:30:cc:a8:84:be:cc:ff:3e:e2:f2: a7:07:6f:8c:71:17:42:f0:8e:b9:bb:e6:8b:10:40: 20:ac:f6:36:ff:2a:ce:92:7b:cf:5b:96:49:62:3d: da:89:a5:0a:7c:6f:62:6a:96:a3:7d:69:7f:e9:5d: bb:b5:40:2e:dc:de:82:cb:fa:d3:a6:67:df:97:56: 25:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:3B:D9:57:DD:DD:B6:3E:DA:C5:83:3C:03:FB:F6:B0:2C:13:DE:CB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.60.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:11:df:d0:de:87:a9:03:d2:ef:e9:03:73:07:92:32:23:73: fb:65:89:8f:f6:64:7a:d4:34:cf:49:a0:01:eb:9a:90:fc:06: 0a:c5:de:a0:73:e9:b7:de:0f:6f:cf:d0:ef:1f:c3:28:c6:cb: 52:64:27:2c:87:c2:ca:e6:c0:50:53:d6:4d:86:58:86:10:a1: ff:f6:46:da:3f:ca:ca:c2:cb:d9:b0:f1:cb:6d:65:f4:66:05: 72:a4:80:b1:84:5b:21:5a:08:a6:ba:59:03:0c:fc:c1:23:6a: c2:ac:3f:e8:11:59:25:99:87:84:69:6f:9b:78:0b:a7:61:52: a1:c0:48:b7:6c:7b:2b:e0:b8:80:fa:5f:5d:97:1b:b9:f2:08: 85:67:91:29:d7:5f:ab:48:ea:1a:8d:e2:7c:19:d9:5c:5c:eb: ea:4a:10:e4:22:e5:d2:cf:f3:68:59:cd:b6:bc:d1:21:5c:c3: 1e:d3:4a:e5:8b:4b:bd:9f:19:a5:51:44:d7:01:08:b0:29:d6: a5:b5:26:84:be:c6:96:1c:fc:c9:c7:b3:26:b2:5c:32:b8:3f: 79:b2:56:14:b5:a4:3a:34:de:8d:52:78:bc:15:48:8d:7b:f5: bf:a0:0e:3c:18:20:04:83:c1:c0:c2:a2:71:e1:2f:7c:90:3e: 80:34:d6:ce -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUSfo77Z9cME2hxXSlZIGFP706bNEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTc0OFoX DTI3MDUwMjAyMjI0OFowMzExMC8GA1UEAxMoMTczQkQ5NTdEREREQjYzRURBQzU4 MzNDMDNGQkY2QjAyQzEzREVDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4nhP+rJAToVd8aMj+BelCse8saatJc5pgY5Kleyrcn16ZHWx8K3iDU/1KJ ixN+CiSHOWDZ834iO1IY7Yb2qbhA0GttYkez2ny/nxnboLjar7/0dyzlM3M5UeuJ 2RBKIXsK117CYcNscHHYz5snaK5WexXcYp14PTm83YQItBJ1JuF/ZAX0KYq5yx+S JXKIRgkEOiDSPfr7YvMBPv6uIRQjJbZGTbIKd13QqWhO2jVuVZenvSn+8jYwzKiE vsz/PuLypwdvjHEXQvCOubvmixBAIKz2Nv8qzpJ7z1uWSWI92omlCnxvYmqWo31p f+ldu7VALtzegsv606Zn35dWJasCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBc72Vfd3bY+2sWDPAP79rAsE97LMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2U3MWJmOTgwLTI0ZGEtNDg2NS1hOTg5LTJkNDQ4OWUzYTUwNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lNzFiZjk4 MC0yNGRhLTQ4NjUtYTk4OS0yZDQ0ODllM2E1MDUvMC8xNzNCRDk1N0RERERCNjNF REFDNTgzM0MwM0ZCRjZCMDJDMTNERUNCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ448MA0GCSqGSIb3DQEBCwUAA4IBAQAeEd/Q3oepA9Lv6QNzB5IyI3P7ZYmP 9mR61DTPSaAB65qQ/AYKxd6gc+m33g9vz9DvH8MoxstSZCcsh8LK5sBQU9ZNhliG EKH/9kbaP8rKwsvZsPHLbWX0ZgVypICxhFshWgimulkDDPzBI2rCrD/oEVklmYeE aW+beAunYVKhwEi3bHsr4LiA+l9dlxu58giFZ5Ep11+rSOoajeJ8GdlcXOvqShDk IuXSz/NoWc22vNEhXMMe00rli0u9nxmlUUTXAQiwKdaltSaEvsaWHPzJx7Mmslwy uD95slYUtaQ6NN6NUni8FUiNe/W/oA48GCAEg8HAwqJx4S98kD6ANNbO -----END CERTIFICATE-----Generated at Tue May 12 22:46:01 2026 by rpki-client