$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer File: 333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer (raw, json) Hash identifier: m9X8am2hXDfTtJLELq/4eQPMv8Ye8eOPjXocAN0sVFc= Subject key identifier: 33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 67A0C98C86195D144B462E80DB529CFF637E039A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:44:29 +0000 Certificate not after: Sun 02 May 2027 02:49:29 +0000 Subordinate resources: IP: 103.153.190.0/23 IP: 2406:4940::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:a0:c9:8c:86:19:5d:14:4b:46:2e:80:db:52:9c:ff:63:7e:03:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:44:29 2026 GMT Not After : May 2 02:49:29 2027 GMT Subject: CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:80:bf:cc:2b:ac:2c:a6:8a:7b:72:69:e9:d2: 48:c0:76:13:be:5a:1d:4e:f5:d0:6f:62:e2:4d:57: 35:bf:24:c5:cf:12:5d:f6:88:e9:6b:81:d1:38:ef: 80:56:4c:70:ce:92:59:0d:d5:53:8a:7f:0d:9b:44: 06:e9:0d:79:b9:51:aa:c0:a7:4e:30:04:dc:27:eb: 81:b5:d2:c0:99:39:3e:61:91:72:68:60:e6:bb:8f: 5e:bd:c5:59:4e:57:5e:58:a0:9a:2e:3d:40:b2:b6: 10:4e:5a:0d:21:29:cd:c0:ae:46:a5:16:4a:0c:c7: 16:06:4a:76:fc:88:70:28:02:54:01:6c:9f:0c:4e: f7:9a:70:42:0c:8f:5d:88:b4:25:fd:17:c3:83:96: 92:7a:62:5f:01:80:50:ce:a8:53:4b:2c:66:6c:b6: 01:a0:f4:07:72:4f:01:e9:7e:95:08:d3:b8:e1:8e: 83:9d:a6:b0:4f:94:3b:9a:86:49:7a:61:32:3c:63: 50:69:13:71:87:64:20:90:e7:66:47:d2:d9:99:b7: 36:d7:a8:ab:36:ea:45:27:5c:4e:a8:30:9a:83:59: c9:bd:c7:7a:2f:43:95:b8:90:9a:e1:12:97:57:30: 6c:2b:a4:0c:b1:a9:41:44:4f:ea:e8:ac:1f:da:32: 4b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.190.0/23 IPv6: 2406:4940::/32 Signature Algorithm: sha256WithRSAEncryption 38:5f:58:32:41:a8:18:12:ac:03:80:61:b2:ca:31:76:5a:0d: 4a:2d:20:17:a0:9b:63:03:e5:da:e2:d1:71:d7:17:85:bc:d2: d8:cd:10:fa:82:ed:0c:c4:55:33:5d:0c:fa:8d:bd:6b:7a:6a: 98:84:40:97:7c:7f:56:05:d8:d3:c1:b5:08:73:61:53:54:c4: 4a:9e:99:89:7f:b1:b1:68:d0:a0:9d:ad:78:9a:d3:66:95:8d: 6c:cb:86:6d:fc:88:7b:98:03:91:db:5f:90:d3:3f:d0:a7:39: 2a:c1:7e:5f:6d:95:d4:4b:f2:b6:a7:a6:1a:2b:7c:62:b8:be: 0b:d7:ab:07:98:63:bf:52:5d:28:e7:d8:d1:20:07:e8:74:0b: d3:7c:b9:6f:d8:76:31:35:10:e3:ea:5b:d1:8a:a1:ee:55:fb: b9:9f:20:52:78:1e:32:81:03:ce:6a:49:c7:d6:9b:03:59:65: 13:27:e1:d2:09:15:9c:8b:94:1c:1f:ed:eb:34:82:4d:74:91: b7:d7:1f:51:5e:6b:4c:89:17:74:2b:d2:6f:60:1d:fc:02:d0: 86:65:0d:11:c3:48:4e:9b:bd:24:92:9a:99:42:4c:42:f8:7f: 97:cb:f5:b9:c4:cd:76:a7:04:88:17:c7:47:5b:8c:82:75:45: c6:33:30:15 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUZ6DJjIYZXRRLRi6A21Kc/2N+A5owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDQyOVoX DTI3MDUwMjAyNDkyOVowMzExMC8GA1UEAxMoMzMzQzEyREQyODgxMDRCNkIzQzVB MkNBQjYwNkJGNTUwOEY0RERERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPGAv8wrrCymintyaenSSMB2E75aHU710G9i4k1XNb8kxc8SXfaI6WuB0Tjv gFZMcM6SWQ3VU4p/DZtEBukNeblRqsCnTjAE3CfrgbXSwJk5PmGRcmhg5ruPXr3F WU5XXligmi49QLK2EE5aDSEpzcCuRqUWSgzHFgZKdvyIcCgCVAFsnwxO95pwQgyP XYi0Jf0Xw4OWknpiXwGAUM6oU0ssZmy2AaD0B3JPAel+lQjTuOGOg52msE+UO5qG SXphMjxjUGkTcYdkIJDnZkfS2Zm3NteoqzbqRSdcTqgwmoNZyb3Hei9DlbiQmuES l1cwbCukDLGpQURP6uisH9oyS2ECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDM8Et0ogQS2s8WiyrYGv1UI9N3fMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ZjNTY4YjViLWI2YWUtNDUzZS04ZTE2LWQ1NWRkNjM1NDYwYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mYzU2OGI1 Yi1iNmFlLTQ1M2UtOGUxNi1kNTVkZDYzNTQ2MGIvMC8zMzNDMTJERDI4ODEwNEI2 QjNDNUEyQ0FCNjA2QkY1NTA4RjRERERGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5m+MA0EAgACMAcDBQAkBklAMA0GCSqGSIb3DQEBCwUAA4IBAQA4X1gyQagY EqwDgGGyyjF2Wg1KLSAXoJtjA+Xa4tFx1xeFvNLYzRD6gu0MxFUzXQz6jb1remqY hECXfH9WBdjTwbUIc2FTVMRKnpmJf7GxaNCgna14mtNmlY1sy4Zt/Ih7mAOR21+Q 0z/QpzkqwX5fbZXUS/K2p6YaK3xiuL4L16sHmGO/Ul0o59jRIAfodAvTfLlv2HYx NRDj6lvRiqHuVfu5nyBSeB4ygQPOaknH1psDWWUTJ+HSCRWci5QcH+3rNIJNdJG3 1x9RXmtMiRd0K9JvYB38AtCGZQ0Rw0hOm70kkpqZQkxC+H+Xy/W5xM12pwSIF8dH W4yCdUXGMzAV -----END CERTIFICATE-----Generated at Tue May 12 22:04:06 2026 by rpki-client