$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.cer File: 17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.cer (raw, json) Hash identifier: b5z6xQ9dbUzKfbC2yUPS3zCek4Tezs7vYwMS434JqEU= Subject key identifier: 17:F1:2F:4C:F1:6D:C1:B1:8D:B7:69:4C:B3:44:1C:8B:80:E0:AC:27 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 115F3050126998173F9311E016F6E50AE4A0628C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:39:42 +0000 Certificate not after: Sun 02 May 2027 01:44:42 +0000 Subordinate resources: IP: 103.149.116.0/24 IP: 2001:df3:2280::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:5f:30:50:12:69:98:17:3f:93:11:e0:16:f6:e5:0a:e4:a0:62:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:39:42 2026 GMT Not After : May 2 01:44:42 2027 GMT Subject: CN=17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:72:4c:af:0e:7c:cc:ab:ea:77:e2:b7:02:99: f2:a6:bf:27:4d:ae:d4:cb:3d:3b:a7:65:e0:22:1f: e4:18:4e:f2:d4:bc:44:cc:4b:9b:02:08:b3:2e:16: 6e:2a:99:ec:00:5e:f4:45:af:09:4b:74:f8:b6:d1: 8b:11:36:1d:3e:79:c2:03:3a:b9:c4:e4:ef:93:16: 05:2c:ee:88:1a:97:22:9b:ac:90:e5:58:4f:53:21: 30:e7:6e:76:65:52:08:e1:2d:05:9b:0b:ce:25:84: 43:8d:8a:e0:17:87:05:f1:b7:dd:13:02:6a:65:2b: d7:b3:69:fe:b0:41:4d:c2:6b:a1:8f:07:e3:b8:19: b6:4f:14:6a:92:60:4d:99:0a:23:f6:83:a9:93:03: 95:61:4c:50:90:d3:7e:08:db:5e:ae:e1:27:69:84: 1b:1d:5b:26:23:93:4a:74:05:d9:65:f6:20:1e:04: 9e:4d:b8:a1:30:f3:60:07:42:84:b4:58:76:dc:e5: 7e:28:2e:4a:b0:c4:a5:f5:31:56:5f:21:26:f1:b6: fd:a9:bf:47:75:c0:13:97:77:af:c3:af:71:ae:61: d4:d2:e7:32:54:3b:01:b5:e1:fc:7c:32:89:3e:34: 60:16:44:75:81:ce:af:0d:04:71:69:37:d5:36:d2: c9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:F1:2F:4C:F1:6D:C1:B1:8D:B7:69:4C:B3:44:1C:8B:80:E0:AC:27 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.116.0/24 IPv6: 2001:df3:2280::/48 Signature Algorithm: sha256WithRSAEncryption 8c:6e:f8:4c:c1:7c:54:8a:a6:30:d2:7c:75:5c:31:4f:fd:da: fa:ef:7f:81:e5:78:5b:88:c1:fd:f0:48:c3:d0:f7:6a:22:02: 61:cb:c5:cb:89:05:c2:fb:ac:d0:5c:29:12:c6:cd:12:72:73: 5d:7f:86:a2:c7:f5:11:72:13:1d:53:99:05:ec:15:b1:50:11: c9:bc:a4:c0:71:7a:2e:ea:ab:d1:c5:6c:47:f8:51:09:23:1e: a0:00:cf:89:8c:e3:29:62:19:73:ef:68:58:02:61:cd:bf:54: 5d:69:c2:e4:1f:4a:b8:02:30:93:38:26:6d:73:b4:57:17:57: 44:71:d4:c0:8e:2d:46:9b:8d:2c:69:0b:83:f4:59:cc:6a:34: 72:9e:8b:26:35:6e:81:c1:a8:0d:da:d9:69:8c:3b:e4:64:62: e5:41:d1:34:2b:e5:01:2e:1c:20:84:3e:61:b6:cf:9f:54:bb: 80:a2:a5:25:f4:81:f4:b6:d9:6a:3e:4d:8b:ad:e5:6c:3b:c9: 9b:a9:e3:15:4c:7d:0f:c2:82:c0:79:51:e7:5f:89:2d:e4:98: a5:08:bb:1a:3c:a6:b6:54:b9:66:02:f6:94:42:35:aa:9f:1a: cd:9d:10:fa:97:46:0c:b6:58:05:f0:99:fc:16:57:cb:3a:62: 45:4a:5a:04 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUEV8wUBJpmBc/kxHgFvblCuSgYowwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzk0MloX DTI3MDUwMjAxNDQ0MlowMzExMC8GA1UEAxMoMTdGMTJGNENGMTZEQzFCMThEQjc2 OTRDQjM0NDFDOEI4MEUwQUMyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZyTK8OfMyr6nfitwKZ8qa/J02u1Ms9O6dl4CIf5BhO8tS8RMxLmwIIsy4W biqZ7ABe9EWvCUt0+LbRixE2HT55wgM6ucTk75MWBSzuiBqXIpuskOVYT1MhMOdu dmVSCOEtBZsLziWEQ42K4BeHBfG33RMCamUr17Np/rBBTcJroY8H47gZtk8UapJg TZkKI/aDqZMDlWFMUJDTfgjbXq7hJ2mEGx1bJiOTSnQF2WX2IB4Enk24oTDzYAdC hLRYdtzlfiguSrDEpfUxVl8hJvG2/am/R3XAE5d3r8Ovca5h1NLnMlQ7AbXh/Hwy iT40YBZEdYHOrw0EcWk31TbSyckCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBfxL0zxbcGxjbdpTLNEHIuA4KwnMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2IzMmQ3NjI3LTQ3ZDctNGZkMC1hZTBmLTYzYjg3M2ZlMmM4OC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iMzJkNzYy Ny00N2Q3LTRmZDAtYWUwZi02M2I4NzNmZTJjODgvMC8xN0YxMkY0Q0YxNkRDMUIx OERCNzY5NENCMzQ0MUM4QjgwRTBBQzI3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ5V0MA8EAgACMAkDBwAgAQ3zIoAwDQYJKoZIhvcNAQELBQADggEBAIxu+EzB fFSKpjDSfHVcMU/92vrvf4HleFuIwf3wSMPQ92oiAmHLxcuJBcL7rNBcKRLGzRJy c11/hqLH9RFyEx1TmQXsFbFQEcm8pMBxei7qq9HFbEf4UQkjHqAAz4mM4yliGXPv aFgCYc2/VF1pwuQfSrgCMJM4Jm1ztFcXV0Rx1MCOLUabjSxpC4P0WcxqNHKeiyY1 boHBqA3a2WmMO+RkYuVB0TQr5QEuHCCEPmG2z59Uu4CipSX0gfS22Wo+TYut5Ww7 yZup4xVMfQ/CgsB5UedfiS3kmKUIuxo8prZUuWYC9pRCNaqfGs2dEPqXRgy2WAXw mfwWV8s6YkVKWgQ= -----END CERTIFICATE-----Generated at Wed May 13 01:07:00 2026 by rpki-client