$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer File: 22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer (raw, json) Hash identifier: 4SNNUvx9nDkNi4eq0/W2XhB9/Vk8tTfDfIpuBtTnGQs= Subject key identifier: 22:DD:84:01:AC:6B:88:A5:97:E9:03:CF:D7:60:44:17:E9:CF:AF:BE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 294839B9302D63066EAC79289465C2AA155B0C7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:31:50 +0000 Certificate not after: Sun 02 May 2027 00:36:50 +0000 Subordinate resources: IP: 103.136.170.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:48:39:b9:30:2d:63:06:6e:ac:79:28:94:65:c2:aa:15:5b:0c:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:31:50 2026 GMT Not After : May 2 00:36:50 2027 GMT Subject: CN=22DD8401AC6B88A597E903CFD7604417E9CFAFBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ae:9d:bc:22:42:54:6d:35:ea:6e:d4:25:76: d3:09:36:2a:74:49:7e:d9:b3:c0:a5:87:29:25:bc: 36:c9:7d:8d:6e:39:28:f7:25:57:44:77:13:1c:0c: 52:1c:a4:f3:b4:fb:dc:39:69:83:0e:0b:02:3c:2e: 97:a2:cc:60:98:a1:f4:8f:51:f2:04:7a:b2:6a:ab: 31:c4:28:6a:0d:8d:49:ba:0f:42:fb:03:44:79:67: 80:17:b2:ed:9e:75:d7:c1:d2:f8:28:a8:4d:23:e9: 1c:8e:6f:e9:a7:ba:fb:2f:ec:49:24:70:e2:6b:01: 77:31:5f:4a:89:e4:78:82:68:f2:0a:fe:13:58:5a: 52:9c:88:35:cc:37:20:4e:8c:45:36:fb:d5:ff:b0: ee:88:67:66:98:11:39:fc:59:e0:01:c4:56:6e:b7: 22:f4:e0:88:9e:8e:36:fb:2b:f0:ff:ad:e1:f4:e4: 4a:cf:99:82:b1:cf:7a:a3:48:1b:39:f8:bd:13:7c: 10:e2:f3:33:09:e7:20:44:12:ed:f4:bf:5d:5a:4d: 2f:0f:21:44:e7:06:d7:da:f3:19:45:5c:63:c9:19: 02:e0:e9:95:a6:5d:c7:dd:54:03:04:80:3a:a6:72: de:51:0b:c1:29:6b:03:31:40:5b:76:1d:67:1f:67: a8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:DD:84:01:AC:6B:88:A5:97:E9:03:CF:D7:60:44:17:E9:CF:AF:BE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.170.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:df:a0:0f:15:2f:e3:1d:29:88:51:91:5c:22:74:7e:77:1f: ae:e0:7d:b5:e3:3d:96:b9:d3:17:71:96:8c:66:35:9f:d3:37: e8:f7:e5:e4:53:79:fd:e1:3d:33:1b:57:56:3f:93:12:20:ba: 54:d2:93:11:65:72:7c:ca:c4:1e:a8:33:09:cb:c0:8f:19:4e: 22:c8:e0:05:4b:7c:bf:4f:e7:f7:0b:29:0e:39:ce:30:0b:db: 6c:f0:85:bd:14:35:3e:9d:c5:a4:dd:f3:79:6f:df:11:4c:30: 3a:1c:27:62:d8:cb:75:ea:c2:32:a5:a9:a2:38:d1:cc:26:a2: 00:a5:69:3b:1f:ec:f9:c5:95:63:9c:dc:21:86:b8:e4:42:c6: ad:c2:24:c0:ce:ea:43:0f:30:38:c7:af:1d:7b:42:ff:67:cd: a8:08:1a:89:ed:54:a8:16:2f:d8:1c:86:71:f3:24:0b:94:c8: bf:88:de:7a:77:30:b6:bc:0e:b3:d0:39:90:89:b6:8d:1d:51: dc:5e:f1:c8:7d:36:6f:56:d0:52:5d:22:6a:02:b4:59:3e:15: e6:c3:c6:17:56:09:63:3c:aa:90:50:8e:bb:d1:93:8d:29:20: 6e:30:3d:42:f3:c8:c7:90:f5:7b:60:98:7e:8f:54:6f:bb:92: 9c:0c:68:fc -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUKUg5uTAtYwZurHkolGXCqhVbDHswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzE1MFoX DTI3MDUwMjAwMzY1MFowMzExMC8GA1UEAxMoMjJERDg0MDFBQzZCODhBNTk3RTkw M0NGRDc2MDQ0MTdFOUNGQUZCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMaunbwiQlRtNepu1CV20wk2KnRJftmzwKWHKSW8Nsl9jW45KPclV0R3ExwM Uhyk87T73Dlpgw4LAjwul6LMYJih9I9R8gR6smqrMcQoag2NSboPQvsDRHlngBey 7Z5118HS+CioTSPpHI5v6ae6+y/sSSRw4msBdzFfSonkeIJo8gr+E1haUpyINcw3 IE6MRTb71f+w7ohnZpgROfxZ4AHEVm63IvTgiJ6ONvsr8P+t4fTkSs+ZgrHPeqNI Gzn4vRN8EOLzMwnnIEQS7fS/XVpNLw8hROcG19rzGUVcY8kZAuDplaZdx91UAwSA OqZy3lELwSlrAzFAW3YdZx9nqBsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCLdhAGsa4ill+kDz9dgRBfpz6++MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzRmNjFmMDRkLTE4ZTctNDJmZi1hZTgyLWQ1NjU1NGY5MjY0Yy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80ZjYxZjA0 ZC0xOGU3LTQyZmYtYWU4Mi1kNTY1NTRmOTI2NGMvMC8yMkREODQwMUFDNkI4OEE1 OTdFOTAzQ0ZENzYwNDQxN0U5Q0ZBRkJFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ4iqMA0GCSqGSIb3DQEBCwUAA4IBAQAb36APFS/jHSmIUZFcInR+dx+u4H21 4z2WudMXcZaMZjWf0zfo9+XkU3n94T0zG1dWP5MSILpU0pMRZXJ8ysQeqDMJy8CP GU4iyOAFS3y/T+f3CykOOc4wC9ts8IW9FDU+ncWk3fN5b98RTDA6HCdi2Mt16sIy pamiONHMJqIApWk7H+z5xZVjnNwhhrjkQsatwiTAzupDDzA4x68de0L/Z82oCBqJ 7VSoFi/YHIZx8yQLlMi/iN56dzC2vA6z0DmQibaNHVHcXvHIfTZvVtBSXSJqArRZ PhXmw8YXVgljPKqQUI670ZONKSBuMD1C88jHkPV7YJh+j1Rvu5KcDGj8 -----END CERTIFICATE-----Generated at Wed May 13 00:34:21 2026 by rpki-client