$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer File: 221D17C6CE30682D7329C49D1F803292269A742A.cer (raw, json) Hash identifier: GZPmapvwRStWcZf+PK0sG5DSL+E5oG6BpMoDvMidwUA= Subject key identifier: 22:1D:17:C6:CE:30:68:2D:73:29:C4:9D:1F:80:32:92:26:9A:74:2A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 56DD481A89AA51C6FA1E2425DB492BF57BCADA43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:43:55 +0000 Certificate not after: Sun 02 May 2027 02:48:55 +0000 Subordinate resources: IP: 103.177.14.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:dd:48:1a:89:aa:51:c6:fa:1e:24:25:db:49:2b:f5:7b:ca:da:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:43:55 2026 GMT Not After : May 2 02:48:55 2027 GMT Subject: CN=221D17C6CE30682D7329C49D1F803292269A742A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:29:2f:c6:d9:d5:8e:ca:71:15:72:42:e1:e2: 7d:c5:64:bd:d7:a3:77:e4:f6:04:16:96:8f:c9:f2: 6f:f3:a1:2d:c3:a4:e2:cf:c7:15:6a:1d:fa:9a:88: 51:da:22:ee:9c:9f:fb:c3:8e:b8:34:3f:95:c5:29: a1:f9:35:c5:0a:c4:ea:d4:ad:a4:ca:63:b7:08:e2: f3:41:93:80:09:5a:bf:92:ec:fc:d5:75:ac:e2:6b: 8d:11:3f:3c:59:a7:81:c5:aa:4d:72:5f:f8:ce:a9: 94:ba:bc:ba:b4:05:d7:63:d7:c4:02:cb:5a:47:b0: b0:e8:20:71:65:8e:57:af:7f:8a:74:1d:9b:e2:58: c8:d5:3a:9a:7f:dd:af:4a:a4:7e:b0:d9:9c:09:c4: 75:d0:a7:10:77:ff:4a:64:b8:cc:ce:0f:eb:76:25: f3:58:a6:f9:b5:73:cb:84:a9:34:10:e1:86:99:83: 43:1d:bd:b8:d6:21:e7:f4:40:08:86:ca:d1:7e:31: 30:68:44:0d:6c:9c:d1:b3:28:ab:3f:db:de:ba:f6: 04:67:b6:cb:0c:7c:05:14:7b:fc:f6:9d:22:a7:03: 9f:76:c7:1e:d5:9d:cd:d6:3a:07:db:ad:76:ce:b1: c1:1d:e9:bd:e3:ca:f3:ec:cc:95:32:65:fb:39:ef: 26:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:1D:17:C6:CE:30:68:2D:73:29:C4:9D:1F:80:32:92:26:9A:74:2A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.14.0/23 Signature Algorithm: sha256WithRSAEncryption 19:8f:92:fb:38:6c:85:3e:77:a6:0a:cf:15:79:d2:a2:2e:d2: c1:50:a9:79:77:35:c7:f7:19:80:cb:2a:94:d9:03:a1:64:68: 5f:c9:03:21:a8:8f:16:d0:6d:25:f0:b3:ca:a6:da:c5:d9:31: 77:f1:6a:5e:e6:65:29:dc:7c:82:1e:16:ee:3a:12:25:c1:68: 53:6f:a6:53:00:ec:c4:2c:c8:d1:86:db:fa:df:b2:c4:c8:30: 19:86:11:29:9c:67:37:6b:ee:58:83:37:e9:a9:f5:47:2a:bb: 49:c6:40:41:f1:46:78:6f:60:22:c5:58:b9:22:2a:7a:91:f7: e8:6d:7e:73:3d:e9:f9:09:64:ae:c0:59:bc:0e:a7:f3:d2:74: f1:aa:44:2b:bc:af:aa:b3:0c:7d:26:5d:82:9c:8e:13:7f:6f: 56:5b:a7:cf:f7:69:7c:b2:65:0a:52:85:23:31:ad:ac:e4:b6: 3e:dd:99:33:ae:b1:e6:3d:50:dd:aa:c1:7f:87:04:8b:a1:af: 71:cf:2e:6f:2b:5f:7e:16:af:9e:30:2d:e7:85:46:4e:31:e8: 7e:8c:5c:fa:e6:c8:4e:4e:80:75:4f:46:b1:cd:ba:0e:55:0d: dc:e4:3f:cd:97:18:8e:c2:53:e0:6f:09:f3:cd:8d:59:05:93: 53:87:f7:4b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUVt1IGomqUcb6HiQl20kr9XvK2kMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDM1NVoX DTI3MDUwMjAyNDg1NVowMzExMC8GA1UEAxMoMjIxRDE3QzZDRTMwNjgyRDczMjlD NDlEMUY4MDMyOTIyNjlBNzQyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALopL8bZ1Y7KcRVyQuHifcVkvdejd+T2BBaWj8nyb/OhLcOk4s/HFWod+pqI Udoi7pyf+8OOuDQ/lcUpofk1xQrE6tStpMpjtwji80GTgAlav5Ls/NV1rOJrjRE/ PFmngcWqTXJf+M6plLq8urQF12PXxALLWkewsOggcWWOV69/inQdm+JYyNU6mn/d r0qkfrDZnAnEddCnEHf/SmS4zM4P63Yl81im+bVzy4SpNBDhhpmDQx29uNYh5/RA CIbK0X4xMGhEDWyc0bMoqz/b3rr2BGe2ywx8BRR7/PadIqcDn3bHHtWdzdY6B9ut ds6xwR3pvePK8+zMlTJl+znvJv8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCIdF8bOMGgtcynEnR+AMpImmnQqMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ZiZTA0MDM4LWExYjYtNDMyYy04NTRiLWNjNmU4Y2YzMmUwNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mYmUwNDAz OC1hMWI2LTQzMmMtODU0Yi1jYzZlOGNmMzJlMDYvMC8yMjFEMTdDNkNFMzA2ODJE NzMyOUM0OUQxRjgwMzI5MjI2OUE3NDJBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7EOMA0GCSqGSIb3DQEBCwUAA4IBAQAZj5L7OGyFPnemCs8VedKiLtLBUKl5 dzXH9xmAyyqU2QOhZGhfyQMhqI8W0G0l8LPKptrF2TF38Wpe5mUp3HyCHhbuOhIl wWhTb6ZTAOzELMjRhtv637LEyDAZhhEpnGc3a+5YgzfpqfVHKrtJxkBB8UZ4b2Ai xVi5Iip6kffobX5zPen5CWSuwFm8Dqfz0nTxqkQrvK+qswx9Jl2CnI4Tf29WW6fP 92l8smUKUoUjMa2s5LY+3ZkzrrHmPVDdqsF/hwSLoa9xzy5vK19+Fq+eMC3nhUZO Meh+jFz65shOToB1T0axzboOVQ3c5D/NlxiOwlPgbwnzzY1ZBZNTh/dL -----END CERTIFICATE-----Generated at Tue May 12 22:33:22 2026 by rpki-client