$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer File: 330092B238160780852731102A871D6304465F70.cer (raw, json) Hash identifier: zq0/+1Gt8IhAIBbLh9DyH28GQvPa23KyIGLblNhg0+c= Subject key identifier: 33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2ADC8BC3594355157B7204F57BAA1930F8519BEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:21:34 +0000 Certificate not after: Sun 02 May 2027 00:26:34 +0000 Subordinate resources: IP: 103.155.116.0/23 IP: 2406:6d40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:dc:8b:c3:59:43:55:15:7b:72:04:f5:7b:aa:19:30:f8:51:9b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:21:34 2026 GMT Not After : May 2 00:26:34 2027 GMT Subject: CN=330092B238160780852731102A871D6304465F70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:71:dd:50:ff:9a:27:ac:f6:09:ae:4b:53:c8: d3:ea:5a:bf:b5:97:bd:98:b8:b7:b6:bf:b0:80:4b: 50:7a:bd:33:2e:de:b6:0a:59:7b:fe:cd:f1:ff:14: 30:90:7f:31:b8:22:5e:39:3d:4e:97:f5:4d:49:8e: 9b:fd:47:1f:d2:48:20:51:9e:65:b5:89:08:85:c1: 07:a7:31:12:d9:09:80:b2:f6:46:1f:f1:5e:33:6b: 60:fe:0e:9f:f3:46:0c:cf:03:bd:12:06:66:c3:49: 32:75:3f:3c:e9:5d:a1:03:1c:ca:56:54:78:40:49: 16:e5:45:c0:d3:48:61:a4:d4:5f:44:7f:a9:09:e2: 59:8c:ba:88:47:e4:0d:a2:74:dd:c5:3a:19:4a:b5: 9f:db:81:bc:28:51:30:31:a5:2d:7b:bd:74:bd:7c: b7:ba:cd:2a:bb:54:c7:29:f1:3d:b9:15:30:14:1c: 5b:c1:09:05:37:0d:52:6a:51:91:2b:7c:43:90:2a: f1:35:ee:c0:7d:4a:e9:3a:83:68:d5:a7:50:d5:a4: ec:68:d7:2c:4e:ca:4c:d4:c7:48:0d:cd:19:25:c1: cd:26:c2:0f:aa:f0:ae:ec:ff:f3:19:04:0b:63:20: 37:55:25:42:63:59:fe:f8:92:5c:07:32:e7:43:85: 03:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.116.0/23 IPv6: 2406:6d40::/32 Signature Algorithm: sha256WithRSAEncryption 5e:d3:35:32:9a:a8:a7:de:55:7b:5c:7b:73:c9:22:01:1e:93: 56:29:9d:95:a1:e8:cd:b8:fa:d4:c1:6b:04:e6:c0:c7:d2:83: 8d:5c:8f:48:59:55:b9:f1:49:fb:85:99:4b:72:c6:41:5b:8e: 14:8c:8c:c3:27:53:df:dd:83:71:dd:cf:01:fb:5e:3d:66:f9: 73:b2:1e:81:77:33:29:19:77:96:6e:a7:1a:a3:bf:28:aa:fe: 65:59:88:b2:9f:1f:56:75:d9:3d:cb:2f:e3:1a:67:f2:c6:c6: f2:05:e6:47:83:c4:9c:87:da:ba:d4:fa:79:74:ec:1c:73:96: 91:fd:36:24:85:14:d0:00:d3:44:76:c9:5c:65:54:1a:a7:39: 31:87:cd:a5:83:18:03:60:59:17:05:8b:a2:f7:dc:33:94:57: 74:0b:4b:9b:3d:dd:d0:2e:4b:8a:38:e0:3d:20:f2:96:63:00: f1:3a:44:23:f8:ef:db:f2:78:25:19:85:0c:3a:cf:3c:30:e5: be:45:1a:cd:2e:8c:9e:0e:97:dc:b9:56:9a:65:15:66:cc:08: a6:1d:44:59:8a:20:4d:7c:61:73:8e:ae:9a:9d:ba:b4:0e:8e: 1d:34:c2:0b:c5:be:6e:91:7a:55:6b:22:15:0f:5a:17:51:2c: fa:d5:44:a1 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUKtyLw1lDVRV7cgT1e6oZMPhRm+wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjEzNFoX DTI3MDUwMjAwMjYzNFowMzExMC8GA1UEAxMoMzMwMDkyQjIzODE2MDc4MDg1Mjcz MTEwMkE4NzFENjMwNDQ2NUY3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRx3VD/mies9gmuS1PI0+pav7WXvZi4t7a/sIBLUHq9My7etgpZe/7N8f8U MJB/MbgiXjk9Tpf1TUmOm/1HH9JIIFGeZbWJCIXBB6cxEtkJgLL2Rh/xXjNrYP4O n/NGDM8DvRIGZsNJMnU/POldoQMcylZUeEBJFuVFwNNIYaTUX0R/qQniWYy6iEfk DaJ03cU6GUq1n9uBvChRMDGlLXu9dL18t7rNKrtUxynxPbkVMBQcW8EJBTcNUmpR kSt8Q5Aq8TXuwH1K6TqDaNWnUNWk7GjXLE7KTNTHSA3NGSXBzSbCD6rwruz/8xkE C2MgN1UlQmNZ/viSXAcy50OFA58CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDMAkrI4FgeAhScxECqHHWMERl9wMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNlMmM0ODE1LWIyZGEtNGMyMC1iYzMxLTUwM2FkZjQ5YjQ5MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zZTJjNDgx NS1iMmRhLTRjMjAtYmMzMS01MDNhZGY0OWI0OTAvMC8zMzAwOTJCMjM4MTYwNzgw ODUyNzMxMTAyQTg3MUQ2MzA0NDY1RjcwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5t0MA0EAgACMAcDBQAkBm1AMA0GCSqGSIb3DQEBCwUAA4IBAQBe0zUymqin 3lV7XHtzySIBHpNWKZ2VoejNuPrUwWsE5sDH0oONXI9IWVW58Un7hZlLcsZBW44U jIzDJ1Pf3YNx3c8B+149Zvlzsh6BdzMpGXeWbqcao78oqv5lWYiynx9Wddk9yy/j GmfyxsbyBeZHg8Sch9q61Pp5dOwcc5aR/TYkhRTQANNEdslcZVQapzkxh82lgxgD YFkXBYui99wzlFd0C0ubPd3QLkuKOOA9IPKWYwDxOkQj+O/b8nglGYUMOs88MOW+ RRrNLoyeDpfcuVaaZRVmzAimHURZiiBNfGFzjq6anbq0Do4dNMILxb5ukXpVayIV D1oXUSz61USh -----END CERTIFICATE-----Generated at Wed May 13 02:59:15 2026 by rpki-client