$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2817CA07C241F9335DFE7BF74F08903016146551.cer File: 2817CA07C241F9335DFE7BF74F08903016146551.cer (raw, json) Hash identifier: 8brWukHZMXMGgCcT8fAOSj2FZgSXn/ZFHp6FLGTdUTg= Subject key identifier: 28:17:CA:07:C2:41:F9:33:5D:FE:7B:F7:4F:08:90:30:16:14:65:51 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 575F3998CF06784BAA1BB43D5CF3BB73F4EC99F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft caRepository: rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:00:17 +0000 Certificate not after: Sun 02 May 2027 01:05:17 +0000 Subordinate resources: IP: 103.184.12.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:5f:39:98:cf:06:78:4b:aa:1b:b4:3d:5c:f3:bb:73:f4:ec:99:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:00:17 2026 GMT Not After : May 2 01:05:17 2027 GMT Subject: CN=2817CA07C241F9335DFE7BF74F08903016146551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a4:b2:67:a7:d0:d8:57:8a:48:e6:b3:1f:de: f1:84:7f:78:33:6c:d7:22:96:98:c3:5e:dc:3d:5d: 1d:cc:2a:5f:8b:16:9e:5b:9a:79:e6:40:66:a3:5e: 28:65:2b:50:61:ce:e3:ee:55:a6:f7:49:5e:45:25: ee:f8:37:1d:50:d2:09:b2:12:7d:1c:c7:c9:fd:25: c6:05:fe:14:0e:6e:45:83:e3:3b:5d:99:be:c8:8d: 54:26:12:46:b2:a7:1d:12:b4:1c:67:a6:ec:d2:df: 15:86:15:13:9f:3c:02:fa:55:1a:69:a8:f4:67:11: 30:ca:71:95:dc:a3:6e:19:c6:8a:e0:33:e6:e8:28: aa:63:01:d8:45:6f:09:a7:33:67:67:b1:25:ad:f3: 0e:63:0a:8a:a7:50:fb:ad:ee:68:a8:e8:51:c1:3a: d9:13:6d:8f:a1:21:e1:ac:18:51:dc:64:5c:14:7c: e9:3e:62:82:98:4b:83:03:3a:f4:5a:61:09:a8:5e: 06:cf:c5:3a:64:8d:fb:7a:be:4e:9b:cc:8a:3f:54: c6:6e:35:ed:73:ae:f9:b6:7e:3d:69:b6:ed:d7:e4: 7c:55:e8:98:e1:29:8f:d9:09:fa:15:41:42:2e:4f: 74:92:ab:7d:15:07:e5:c6:ba:e4:de:ef:a0:c8:b6: bc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:17:CA:07:C2:41:F9:33:5D:FE:7B:F7:4F:08:90:30:16:14:65:51 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.12.0/23 Signature Algorithm: sha256WithRSAEncryption 98:3c:29:49:28:6f:f7:6c:3e:dd:13:ee:c9:0f:30:97:10:51: 02:a8:a5:3b:97:5a:3b:b3:8a:e9:23:ad:29:01:7f:6d:ee:4c: af:9b:0b:2f:25:fe:85:a6:87:03:2b:d9:72:4f:96:49:7c:26: be:bd:0c:5b:50:b8:b2:7f:bd:79:75:4e:8b:e1:cd:2a:71:22: 02:8b:52:fe:d9:f5:e5:89:a6:73:1a:1d:69:4f:52:63:92:f4: b5:70:00:e7:8e:d2:56:9f:c7:50:0b:3e:13:95:e6:a0:f3:6a: 4a:f8:76:7d:2c:cd:eb:92:c4:e1:37:c7:ad:25:ee:06:ad:50: 48:8d:46:4d:f0:32:22:d1:ba:34:ce:54:5e:0f:3d:a1:e5:0c: 16:cd:d0:14:fb:7c:0d:d7:cd:7b:0c:54:41:a4:e5:db:3f:2a: 0c:56:94:2f:51:c2:47:dd:8c:7d:2b:bb:21:c2:52:a3:37:ba: 64:85:0c:e8:51:2c:d2:98:01:d8:81:c4:da:ae:2e:41:ef:90: d3:1d:99:6b:50:54:01:6e:96:d4:46:51:51:91:4d:c7:5c:71: 1d:e7:fc:4c:c9:69:21:b0:44:27:c9:e9:e4:7b:43:31:5f:80: 5e:6b:12:4b:1c:bb:61:e2:f5:0f:7c:ac:91:0a:53:2e:4b:ee: 0c:bb:f2:b4 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUV185mM8GeEuqG7Q9XPO7c/TsmfIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDAxN1oX DTI3MDUwMjAxMDUxN1owMzExMC8GA1UEAxMoMjgxN0NBMDdDMjQxRjkzMzVERkU3 QkY3NEYwODkwMzAxNjE0NjU1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+ksmen0NhXikjmsx/e8YR/eDNs1yKWmMNe3D1dHcwqX4sWnluaeeZAZqNe KGUrUGHO4+5VpvdJXkUl7vg3HVDSCbISfRzHyf0lxgX+FA5uRYPjO12ZvsiNVCYS RrKnHRK0HGem7NLfFYYVE588AvpVGmmo9GcRMMpxldyjbhnGiuAz5ugoqmMB2EVv CaczZ2exJa3zDmMKiqdQ+63uaKjoUcE62RNtj6Eh4awYUdxkXBR86T5igphLgwM6 9FphCaheBs/FOmSN+3q+TpvMij9Uxm417XOu+bZ+PWm27dfkfFXomOEpj9kJ+hVB Qi5PdJKrfRUH5ca65N7voMi2vE8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCgXygfCQfkzXf57908IkDAWFGVRMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc5NWMxYWU4LWQ5N2QtNDA0OC05YTdlLTZiNzFiODU3Nzc0MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83OTVjMWFl OC1kOTdkLTQwNDgtOWE3ZS02YjcxYjg1Nzc3NDAvMC8yODE3Q0EwN0MyNDFGOTMz NURGRTdCRjc0RjA4OTAzMDE2MTQ2NTUxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7gMMA0GCSqGSIb3DQEBCwUAA4IBAQCYPClJKG/3bD7dE+7JDzCXEFECqKU7 l1o7s4rpI60pAX9t7kyvmwsvJf6FpocDK9lyT5ZJfCa+vQxbULiyf715dU6L4c0q cSICi1L+2fXliaZzGh1pT1JjkvS1cADnjtJWn8dQCz4Tleag82pK+HZ9LM3rksTh N8etJe4GrVBIjUZN8DIi0bo0zlReDz2h5QwWzdAU+3wN1817DFRBpOXbPyoMVpQv UcJH3Yx9K7shwlKjN7pkhQzoUSzSmAHYgcTari5B75DTHZlrUFQBbpbURlFRkU3H XHEd5/xMyWkhsEQnyenke0MxX4BeaxJLHLth4vUPfKyRClMuS+4Mu/K0 -----END CERTIFICATE-----Generated at Tue May 12 22:03:54 2026 by rpki-client