$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer File: 33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer (raw, json) Hash identifier: PHpd6EjaHrHFK5T9A+goLCTchHPSQWy9dS1TCuZry8g= Subject key identifier: 33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0F22C27F0B2508459287BC5B1A3535C4850FC36C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:37:28 +0000 Certificate not after: Sun 02 May 2027 00:42:28 +0000 Subordinate resources: IP: 103.144.54.0/23 IP: 2405:6740::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:22:c2:7f:0b:25:08:45:92:87:bc:5b:1a:35:35:c4:85:0f:c3:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:37:28 2026 GMT Not After : May 2 00:42:28 2027 GMT Subject: CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6f:11:38:40:84:78:a9:ed:b6:bf:47:d9:41: d8:ba:d0:58:82:27:f8:68:ce:98:3d:3b:2c:2b:40: 78:05:b5:07:c1:3c:b1:2f:16:0f:6d:64:52:9b:ff: a6:ea:92:32:67:f7:16:f1:3f:59:a6:7b:c6:a1:e3: 07:bf:cb:6b:9e:08:3c:4a:b0:49:ff:db:3b:68:e8: c1:e6:1c:19:62:c4:7c:eb:a9:21:c3:c8:ba:54:5e: fe:51:ea:55:f7:aa:6a:1a:27:07:22:4e:06:fc:b9: f9:7f:f5:f8:c4:2a:ae:53:ab:e0:ed:df:f5:6c:09: 76:98:d5:6b:b6:4b:46:a5:f8:a7:8e:52:fe:06:1d: d7:3c:33:6e:5d:7f:8a:6c:5b:d3:ed:22:2d:22:04: 54:7e:5c:91:e7:82:ae:df:41:b1:73:2a:8c:bc:76: fe:15:fe:c6:cc:16:51:62:d9:1b:dc:9e:5e:b0:9f: c3:28:28:d5:7a:a4:c9:98:8c:60:dd:21:42:8e:6f: 1d:9c:a8:5b:9d:de:96:38:5f:69:dd:fb:e4:22:59: a4:af:2e:eb:fc:0f:42:2c:4e:9c:bd:f6:f8:4c:48: f6:7b:6b:2e:3e:9e:ff:43:5a:51:ba:77:65:bf:f4: f8:ca:1f:15:a8:77:ee:b1:25:a8:9c:0b:f8:a1:6e: d8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.54.0/23 IPv6: 2405:6740::/32 Signature Algorithm: sha256WithRSAEncryption 71:00:57:db:eb:8a:04:ad:46:d1:2e:36:c5:64:b7:e2:ca:ab: 90:32:1d:1d:95:34:9f:67:89:8d:ff:25:4d:2e:36:b4:20:d8: e2:b5:86:8d:08:69:d9:f4:46:37:10:01:29:31:67:cd:3f:47: a9:3f:67:ec:e5:89:75:58:01:35:e5:6e:dd:5b:cf:0e:16:71: d1:7b:3f:f0:19:26:ca:9e:2f:5f:84:57:61:a7:34:b0:f2:1c: 39:63:29:64:63:57:63:26:1a:b5:69:d4:31:8b:ae:cf:a5:49: 35:5d:b7:4e:70:07:2f:16:3a:39:e6:c4:ee:9f:52:14:41:7e: 2b:3f:11:fd:9d:59:d6:89:7b:61:f3:ea:9b:ab:fc:a4:60:c6: c7:54:f2:df:9c:e0:2a:b6:1d:3a:88:f1:c9:0e:0d:4f:2c:78: 8d:e8:2f:51:fc:15:77:b5:37:69:b2:77:4c:29:f6:8c:1f:af: 1d:d6:6d:24:3b:ee:06:8d:94:c0:1b:b4:1c:18:fa:19:6b:f2: 66:cb:72:bb:98:82:91:f1:51:00:ff:05:d4:01:3b:c3:3a:17: 5b:50:8a:0b:e8:01:7b:1a:ec:b7:4e:68:a1:97:82:6d:05:75: 11:d8:39:2d:93:d8:35:63:3e:98:b2:23:87:14:3a:49:8c:f9: fc:3c:c5:e9 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUDyLCfwslCEWSh7xbGjU1xIUPw2wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzcyOFoX DTI3MDUwMjAwNDIyOFowMzExMC8GA1UEAxMoMzNBNzAxMzNFRTE1QTkyRjk4QzQz QkU2NDJEMUNDRjdDMkIwN0U2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM5vEThAhHip7ba/R9lB2LrQWIIn+GjOmD07LCtAeAW1B8E8sS8WD21kUpv/ puqSMmf3FvE/WaZ7xqHjB7/La54IPEqwSf/bO2joweYcGWLEfOupIcPIulRe/lHq VfeqahonByJOBvy5+X/1+MQqrlOr4O3f9WwJdpjVa7ZLRqX4p45S/gYd1zwzbl1/ imxb0+0iLSIEVH5ckeeCrt9BsXMqjLx2/hX+xswWUWLZG9yeXrCfwygo1XqkyZiM YN0hQo5vHZyoW53eljhfad375CJZpK8u6/wPQixOnL32+ExI9ntrLj6e/0NaUbp3 Zb/0+MofFah37rElqJwL+KFu2GsCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDOnATPuFakvmMQ75kLRzPfCsH5vMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzU3MTNmYzE3LTU3ZjEtNDY3MS04YTE2LWY4NThkZGQ3ZGE0My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81NzEzZmMx Ny01N2YxLTQ2NzEtOGExNi1mODU4ZGRkN2RhNDMvMC8zM0E3MDEzM0VFMTVBOTJG OThDNDNCRTY0MkQxQ0NGN0MyQjA3RTZGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5A2MA0EAgACMAcDBQAkBWdAMA0GCSqGSIb3DQEBCwUAA4IBAQBxAFfb64oE rUbRLjbFZLfiyquQMh0dlTSfZ4mN/yVNLja0INjitYaNCGnZ9EY3EAEpMWfNP0ep P2fs5Yl1WAE15W7dW88OFnHRez/wGSbKni9fhFdhpzSw8hw5YylkY1djJhq1adQx i67PpUk1XbdOcAcvFjo55sTun1IUQX4rPxH9nVnWiXth8+qbq/ykYMbHVPLfnOAq th06iPHJDg1PLHiN6C9R/BV3tTdpsndMKfaMH68d1m0kO+4GjZTAG7QcGPoZa/Jm y3K7mIKR8VEA/wXUATvDOhdbUIoL6AF7Guy3Tmihl4JtBXUR2Dktk9g1Yz6YsiOH FDpJjPn8PMXp -----END CERTIFICATE-----Generated at Tue May 12 22:47:47 2026 by rpki-client