$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer File: 33280920734014336A0249C909A38E7BC1B49F29.cer (raw, json) Hash identifier: dxH4Wp+UmKTb9jXr+A93hzMUe9oeEwkAE5xWt2dy4xs= Subject key identifier: 33:28:09:20:73:40:14:33:6A:02:49:C9:09:A3:8E:7B:C1:B4:9F:29 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2E672803DD2DD22911510CA413FBAB48568BC5C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft caRepository: rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:56:27 +0000 Certificate not after: Sun 02 May 2027 01:01:27 +0000 Subordinate resources: IP: 103.139.25.0/24 IP: 2001:df0:6780::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:67:28:03:dd:2d:d2:29:11:51:0c:a4:13:fb:ab:48:56:8b:c5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:56:27 2026 GMT Not After : May 2 01:01:27 2027 GMT Subject: CN=33280920734014336A0249C909A38E7BC1B49F29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b4:4a:e4:a0:44:c5:14:fc:05:61:43:72:48: 0b:18:74:59:d8:d8:3c:5f:3f:e8:69:b0:7b:77:b3: 8d:64:f1:91:55:cd:ed:bf:74:62:ea:c3:d8:ce:44: 65:ab:c8:f1:aa:17:1e:4e:01:c9:68:43:18:a0:85: f0:a6:45:ec:68:d5:16:65:5c:bd:aa:5c:30:b0:97: 29:f5:36:38:e2:40:9d:a2:a8:47:dc:27:c3:c1:0c: 91:46:53:d7:c3:93:74:ad:6a:88:0b:7a:a0:3b:61: d3:f0:86:db:f8:50:dc:96:63:91:a2:82:9b:ae:e8: 92:28:b6:1e:4d:bb:5a:2b:02:f3:2e:6b:99:fc:e1: 11:c9:5e:7b:6b:9a:9f:26:6e:3b:b3:08:0c:62:7a: ae:19:55:69:c3:52:e6:b5:49:1f:70:ed:26:54:db: 1c:50:10:de:99:eb:d4:3e:a7:7b:68:05:4f:a6:da: 3d:a8:54:66:8f:68:06:90:1a:a5:b0:b7:4d:04:50: 5a:1a:e3:ff:f9:c0:88:44:22:87:1c:ad:53:2f:8d: 67:aa:e7:95:37:5b:38:80:4b:b7:84:88:f5:9c:5b: 47:61:87:68:bc:50:68:ec:04:21:f1:32:35:4e:a1: d2:7c:bb:52:b8:54:47:a3:20:bd:ec:9b:2a:c2:32: b5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:28:09:20:73:40:14:33:6A:02:49:C9:09:A3:8E:7B:C1:B4:9F:29 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.25.0/24 IPv6: 2001:df0:6780::/48 Signature Algorithm: sha256WithRSAEncryption 56:6f:86:31:5d:d2:f0:7b:99:e3:8f:be:bf:8e:4f:a7:a3:de: 9d:b6:c9:89:c2:55:f0:f9:26:ff:ca:d4:28:74:86:75:22:f2: 13:d9:e2:63:7c:70:0a:95:e8:db:ef:f6:45:0c:5e:b8:fd:6c: cc:f6:2c:b1:f1:20:1d:2b:f7:23:ed:28:97:bf:6a:bd:21:cb: 39:f9:7d:45:9a:56:e8:48:03:89:26:7f:1d:7b:87:6b:7f:d7: 32:38:7c:34:1a:a4:a2:95:fa:e9:61:4c:2b:3e:a7:a3:5f:c9: e7:a1:10:93:db:f7:62:96:74:0f:5f:ae:ae:08:2c:aa:97:25: d5:8a:f1:88:b7:b3:7c:a7:2e:f1:04:a2:e9:db:5b:d6:f3:43: 60:3c:65:38:97:4c:a2:6a:9c:3b:73:e7:23:1d:31:91:76:40: ba:26:f9:2b:c8:6a:f5:77:23:a1:83:68:03:1e:db:13:ec:04: 1b:7e:69:8f:cf:47:09:93:c5:74:74:b5:f4:4e:7a:92:11:de: 36:9c:ea:ba:f1:3b:bb:a6:71:4f:a0:85:15:2e:d3:43:5a:4e: a2:e8:7a:6b:43:02:82:03:f9:8d:e0:5c:37:69:6e:56:b3:43: 84:85:ee:2e:64:4c:29:a2:cf:ad:18:9e:2c:bc:eb:9d:4b:a2: ae:f1:60:fe -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIULmcoA90t0ikRUQykE/urSFaLxcUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTYyN1oX DTI3MDUwMjAxMDEyN1owMzExMC8GA1UEAxMoMzMyODA5MjA3MzQwMTQzMzZBMDI0 OUM5MDlBMzhFN0JDMUI0OUYyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMK0SuSgRMUU/AVhQ3JICxh0WdjYPF8/6Gmwe3ezjWTxkVXN7b90YurD2M5E ZavI8aoXHk4ByWhDGKCF8KZF7GjVFmVcvapcMLCXKfU2OOJAnaKoR9wnw8EMkUZT 18OTdK1qiAt6oDth0/CG2/hQ3JZjkaKCm67okii2Hk27WisC8y5rmfzhEclee2ua nyZuO7MIDGJ6rhlVacNS5rVJH3DtJlTbHFAQ3pnr1D6ne2gFT6baPahUZo9oBpAa pbC3TQRQWhrj//nAiEQihxytUy+NZ6rnlTdbOIBLt4SI9ZxbR2GHaLxQaOwEIfEy NU6h0ny7UrhUR6MgveybKsIytX0CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDMoCSBzQBQzagJJyQmjjnvBtJ8pMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzczZmU0MjU1LTFkOTEtNGZjYy1iY2U0LThhNDJhZGZlM2MyOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83M2ZlNDI1 NS0xZDkxLTRmY2MtYmNlNC04YTQyYWRmZTNjMjkvMC8zMzI4MDkyMDczNDAxNDMz NkEwMjQ5QzkwOUEzOEU3QkMxQjQ5RjI5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ4sZMA8EAgACMAkDBwAgAQ3wZ4AwDQYJKoZIhvcNAQELBQADggEBAFZvhjFd 0vB7meOPvr+OT6ej3p22yYnCVfD5Jv/K1Ch0hnUi8hPZ4mN8cAqV6Nvv9kUMXrj9 bMz2LLHxIB0r9yPtKJe/ar0hyzn5fUWaVuhIA4kmfx17h2t/1zI4fDQapKKV+ulh TCs+p6NfyeehEJPb92KWdA9frq4ILKqXJdWK8Yi3s3ynLvEEounbW9bzQ2A8ZTiX TKJqnDtz5yMdMZF2QLom+SvIavV3I6GDaAMe2xPsBBt+aY/PRwmTxXR0tfROepIR 3jac6rrxO7umcU+ghRUu00NaTqLoemtDAoID+Y3gXDdpblazQ4SF7i5kTCmiz60Y niy8651Loq7xYP4= -----END CERTIFICATE-----Generated at Tue May 12 22:32:57 2026 by rpki-client