$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer File: 21A1AF13820FECAAC871E77BA706DF913EB6445B.cer (raw, json) Hash identifier: SPIBYGENP9hquwiX2o1zbxFAOmAze8xM9LRxTlauVKk= Subject key identifier: 21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 50BC4635E36CBF8D7445B3AD3FE59B6EF6213965 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:14:03 +0000 Certificate not after: Sun 02 May 2027 01:19:03 +0000 Subordinate resources: IP: 110.76.144.0/21 IP: 117.103.168.0/21 IP: 2406:9300::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:bc:46:35:e3:6c:bf:8d:74:45:b3:ad:3f:e5:9b:6e:f6:21:39:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:14:03 2026 GMT Not After : May 2 01:19:03 2027 GMT Subject: CN=21A1AF13820FECAAC871E77BA706DF913EB6445B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f0:51:3a:d6:62:38:8f:c9:ba:3f:8f:6f:ba: 7b:24:29:78:ad:af:d7:8d:ab:ab:62:15:d5:6b:48: 0c:a0:7d:3d:51:35:2b:52:90:40:b6:4c:ed:49:8d: aa:22:74:fd:60:f7:a9:e1:d1:17:48:cd:16:41:70: 3f:80:0b:5b:92:1f:c0:39:26:e2:fe:79:79:29:3b: 76:20:38:cf:e9:80:0d:e0:83:35:e1:2f:b4:0a:db: a4:ed:d9:12:c5:81:a2:64:5c:bf:e8:23:50:e9:65: aa:a2:6d:e7:08:84:d5:aa:ef:9c:b1:b0:68:6c:64: e0:b4:77:7a:fa:a1:82:68:a7:1e:14:db:ff:29:9f: 7e:d1:88:76:b8:29:7a:0c:67:65:f8:46:69:ce:99: 62:8e:16:e4:67:d9:86:46:bb:53:91:ab:3b:3d:4c: 69:2b:ec:7a:b3:0e:4a:43:cc:51:12:23:8c:07:be: a4:94:58:3f:51:88:6c:26:55:88:b3:a7:ab:54:7a: 86:30:0d:bf:a6:53:fb:f1:85:8d:ed:f2:0d:2c:95: 52:ce:0c:1d:c9:63:14:db:15:91:bc:41:24:d3:34: fa:ef:56:e0:48:b8:d4:99:79:aa:1b:08:24:f9:44: 9f:a0:54:30:f8:01:43:db:14:ae:77:31:d9:8a:f0: 93:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.76.144.0/21 117.103.168.0/21 IPv6: 2406:9300::/32 Signature Algorithm: sha256WithRSAEncryption 3b:6f:b4:cb:8d:10:d1:d2:6c:e6:6e:1f:1a:43:54:77:43:b2: 92:c7:08:cf:55:29:ab:db:50:1a:57:32:06:e4:d3:3f:ba:be: 87:1c:55:30:39:e7:c7:de:8b:7b:c2:d7:f2:5e:17:fa:cd:82: c9:31:ae:f1:77:24:95:61:3f:ee:7d:ce:de:86:8e:51:ae:0a: d6:70:ca:c5:a2:7f:20:aa:26:c9:d2:28:2a:d4:e2:a9:21:4d: 4e:b0:23:41:ea:e8:ba:07:f3:e0:3f:7b:44:f9:14:99:10:e7: c2:66:d0:0c:35:73:66:d9:21:14:57:53:07:6d:7c:99:0d:f7: 3c:fd:c4:58:30:9a:58:76:ee:c5:81:7f:d9:1e:43:81:2e:44: e0:6b:71:1a:21:5f:09:93:c9:d9:67:8c:e3:2f:43:0e:57:fc: ae:c2:d4:3b:fe:d5:50:47:a7:52:57:a5:d2:ea:b3:8c:f9:5c: 17:b1:8c:29:29:a6:21:5c:85:91:06:42:f5:1e:57:d7:21:1f: c6:6c:f7:2c:3f:43:5e:03:2d:40:69:57:30:e6:a8:60:33:4f: 17:69:a0:23:6a:18:ac:81:4b:ef:9e:64:57:be:aa:9e:b9:9e: cc:40:c4:59:bc:db:9c:5b:32:86:ec:ff:44:a9:cd:b3:84:15: 81:53:66:d3 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUULxGNeNsv410RbOtP+WbbvYhOWUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTQwM1oX DTI3MDUwMjAxMTkwM1owMzExMC8GA1UEAxMoMjFBMUFGMTM4MjBGRUNBQUM4NzFF NzdCQTcwNkRGOTEzRUI2NDQ1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANTwUTrWYjiPybo/j2+6eyQpeK2v142rq2IV1WtIDKB9PVE1K1KQQLZM7UmN qiJ0/WD3qeHRF0jNFkFwP4ALW5IfwDkm4v55eSk7diA4z+mADeCDNeEvtArbpO3Z EsWBomRcv+gjUOllqqJt5wiE1arvnLGwaGxk4LR3evqhgminHhTb/ymfftGIdrgp egxnZfhGac6ZYo4W5GfZhka7U5GrOz1MaSvserMOSkPMURIjjAe+pJRYP1GIbCZV iLOnq1R6hjANv6ZT+/GFje3yDSyVUs4MHcljFNsVkbxBJNM0+u9W4Ei41Jl5qhsI JPlEn6BUMPgBQ9sUrncx2Yrwkx8CAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCGhrxOCD+yqyHHne6cG35E+tkRbMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzhiNTQ4YmFkLTdmZWQtNDFmZC1iNDJlLTc4MDM3MmM0NTI1NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84YjU0OGJh ZC03ZmVkLTQxZmQtYjQyZS03ODAzNzJjNDUyNTUvMC8yMUExQUYxMzgyMEZFQ0FB Qzg3MUU3N0JBNzA2REY5MTNFQjY0NDVCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQDbkyQAwQDdWeoMA0EAgACMAcDBQAkBpMAMA0GCSqGSIb3DQEBCwUAA4IBAQA7 b7TLjRDR0mzmbh8aQ1R3Q7KSxwjPVSmr21AaVzIG5NM/ur6HHFUwOefH3ot7wtfy Xhf6zYLJMa7xdySVYT/ufc7eho5RrgrWcMrFon8gqibJ0igq1OKpIU1OsCNB6ui6 B/PgP3tE+RSZEOfCZtAMNXNm2SEUV1MHbXyZDfc8/cRYMJpYdu7FgX/ZHkOBLkTg a3EaIV8Jk8nZZ4zjL0MOV/yuwtQ7/tVQR6dSV6XS6rOM+VwXsYwpKaYhXIWRBkL1 HlfXIR/GbPcsP0NeAy1AaVcw5qhgM08XaaAjahisgUvvnmRXvqqeuZ7MQMRZvNuc WzKG7P9Eqc2zhBWBU2bT -----END CERTIFICATE-----Generated at Tue May 12 22:10:26 2026 by rpki-client