$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer File: 218F42D6775F39C04AD2042E61C557053D4A69FE.cer (raw, json) Hash identifier: bxlEB2tLBM+B7u70IbScHLqSHEMEXtEx7e2oGRPe+B8= Subject key identifier: 21:8F:42:D6:77:5F:39:C0:4A:D2:04:2E:61:C5:57:05:3D:4A:69:FE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1A6DC197F71E2DD3832E4F962FC0427BD48606AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft caRepository: rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:16:13 +0000 Certificate not after: Sun 02 May 2027 00:21:13 +0000 Subordinate resources: IP: 103.181.77.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:6d:c1:97:f7:1e:2d:d3:83:2e:4f:96:2f:c0:42:7b:d4:86:06:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:16:13 2026 GMT Not After : May 2 00:21:13 2027 GMT Subject: CN=218F42D6775F39C04AD2042E61C557053D4A69FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cf:e4:1f:ef:94:e7:7f:d8:a0:18:1c:83:e4: 2c:a6:cc:98:c7:02:c5:61:4f:09:ab:1a:a0:b1:02: 94:a6:88:6a:f5:1a:80:99:e7:bf:d0:55:33:25:0c: c7:0c:58:d2:64:52:61:1b:68:74:76:6e:6a:d4:93: b1:a8:76:b6:27:36:2a:13:7e:f9:5a:a4:e4:c8:25: 17:cd:d8:f6:6c:b4:58:73:1a:ee:d1:1b:ba:e7:c2: c0:cc:40:ca:d3:40:d8:fe:d1:15:01:6a:1e:c7:df: 1a:bc:b4:62:73:a5:a9:5b:85:b5:71:3c:3f:24:dd: 0c:50:f8:c2:bd:c7:7a:d9:55:36:04:b1:76:c0:2d: 2f:27:05:66:77:e6:f1:44:95:c5:c3:0a:3b:bf:19: 9e:20:17:21:ed:c2:90:a1:2c:28:6e:0d:a5:56:06: f6:86:c3:fe:52:a9:2e:c5:ce:9a:4c:62:f4:ca:b9: 60:47:e3:db:70:98:1f:96:49:1e:46:8c:63:03:b6: 4c:b8:93:34:d8:eb:d1:ae:cb:37:c9:bc:85:71:18: 0b:9b:d9:39:6e:5b:ca:f4:46:9a:de:b0:8c:51:0e: 4f:0f:af:18:6f:92:3b:3b:8a:e4:5c:3e:f3:59:2b: 48:af:88:18:81:fc:c3:81:1d:00:a4:ec:5e:6d:67: 35:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:8F:42:D6:77:5F:39:C0:4A:D2:04:2E:61:C5:57:05:3D:4A:69:FE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.77.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:30:c6:33:9d:6b:2a:45:df:e6:e4:cb:62:98:ce:b0:fd:f0: dd:31:d0:17:28:a3:0b:a5:e8:4f:21:c5:58:f2:ab:cf:ab:bf: c6:ed:5c:02:b2:b4:00:5a:ca:c8:ca:9c:ca:2c:a5:0d:3c:63: 52:0f:6e:91:3c:ad:2d:c2:b9:65:12:c5:5b:d5:31:f1:5c:da: d4:d1:3c:58:7c:16:23:86:f6:2a:0e:5c:dc:dc:20:a8:1b:a0: b0:e9:e4:03:f1:13:3d:43:da:54:60:c6:e0:fc:4a:d4:c3:dc: fc:38:a9:12:b2:29:cf:3f:83:72:64:4a:2f:9b:ba:d1:81:93: 63:a7:e1:2d:14:aa:fb:5e:77:7a:8b:08:25:75:f1:7b:c4:92: f7:60:fc:4e:cf:d0:1f:fa:3e:e0:64:99:38:18:a9:11:ea:d6: 6f:25:04:9e:77:a6:36:84:16:1f:de:a2:f5:0c:c7:65:4a:af: 13:57:f1:50:55:db:a0:e5:9c:d8:18:3d:3b:fe:6e:4e:e4:29: 09:b1:37:cb:86:20:ae:60:ea:94:1d:d5:2e:1b:9b:45:25:a6: f4:46:e7:1d:63:61:b1:00:af:44:5c:46:e1:db:5b:6c:70:37: bb:bc:72:92:8e:fc:d9:ee:3d:fe:b4:14:c9:d7:fd:7c:0e:66: f6:c2:ee:65 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUGm3Bl/ceLdODLk+WL8BCe9SGBq0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTYxM1oX DTI3MDUwMjAwMjExM1owMzExMC8GA1UEAxMoMjE4RjQyRDY3NzVGMzlDMDRBRDIw NDJFNjFDNTU3MDUzRDRBNjlGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIrP5B/vlOd/2KAYHIPkLKbMmMcCxWFPCasaoLEClKaIavUagJnnv9BVMyUM xwxY0mRSYRtodHZuatSTsah2tic2KhN++Vqk5MglF83Y9my0WHMa7tEbuufCwMxA ytNA2P7RFQFqHsffGry0YnOlqVuFtXE8PyTdDFD4wr3HetlVNgSxdsAtLycFZnfm 8USVxcMKO78ZniAXIe3CkKEsKG4NpVYG9obD/lKpLsXOmkxi9Mq5YEfj23CYH5ZJ HkaMYwO2TLiTNNjr0a7LN8m8hXEYC5vZOW5byvRGmt6wjFEOTw+vGG+SOzuK5Fw+ 81krSK+IGIH8w4EdAKTsXm1nNWUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCGPQtZ3XznAStIELmHFVwU9Smn+MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM2Y2M0NzM0LWJlYjYtNGUzMy05YjFjLTQ2ZGNkMTY0MjVhMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zNmNjNDcz NC1iZWI2LTRlMzMtOWIxYy00NmRjZDE2NDI1YTEvMC8yMThGNDJENjc3NUYzOUMw NEFEMjA0MkU2MUM1NTcwNTNENEE2OUZFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ7VNMA0GCSqGSIb3DQEBCwUAA4IBAQAcMMYznWsqRd/m5MtimM6w/fDdMdAX KKMLpehPIcVY8qvPq7/G7VwCsrQAWsrIypzKLKUNPGNSD26RPK0twrllEsVb1THx XNrU0TxYfBYjhvYqDlzc3CCoG6Cw6eQD8RM9Q9pUYMbg/ErUw9z8OKkSsinPP4Ny ZEovm7rRgZNjp+EtFKr7Xnd6iwgldfF7xJL3YPxOz9Af+j7gZJk4GKkR6tZvJQSe d6Y2hBYf3qL1DMdlSq8TV/FQVdug5ZzYGD07/m5O5CkJsTfLhiCuYOqUHdUuG5tF Jab0RucdY2GxAK9EXEbh21tscDe7vHKSjvzZ7j3+tBTJ1/18Dmb2wu5l -----END CERTIFICATE-----Generated at Tue May 12 22:03:36 2026 by rpki-client