$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer File: 33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer (raw, json) Hash identifier: D6CoUCHweZxKbVBjZSXRqAJPLnZ4nUPsr3XosGUKAio= Subject key identifier: 33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3F1B78AD56ACBFE66E2DEF51E48FA4D4D0DAB86B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:18:22 +0000 Certificate not after: Sun 02 May 2027 01:23:22 +0000 Subordinate resources: IP: 103.108.128.0/22 IP: 103.247.40.0/22 IP: 2402:69c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:1b:78:ad:56:ac:bf:e6:6e:2d:ef:51:e4:8f:a4:d4:d0:da:b8:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:18:22 2026 GMT Not After : May 2 01:23:22 2027 GMT Subject: CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9a:a6:7b:6b:ed:34:82:43:68:e6:c1:44:fb: ca:68:b1:75:d3:62:8c:9a:b8:83:dc:59:28:eb:87: a2:88:17:f6:36:e8:5f:20:85:ac:e0:ac:21:8c:d4: cb:d4:e2:21:50:f0:c2:47:95:e1:6c:58:3c:80:3d: 87:0e:43:6b:aa:f5:55:22:22:c7:ff:20:0b:3e:55: 62:df:26:da:1e:fa:d5:b4:51:15:5d:2a:00:5d:49: 2e:59:58:4f:ef:25:35:9d:30:18:a3:38:e8:a2:37: 50:fd:b7:07:4b:f6:cf:31:dc:23:89:a6:b8:26:df: 87:ef:d9:a5:a0:00:3d:4a:4c:77:19:5b:60:a7:10: a7:92:82:cf:42:f1:7b:20:ca:59:1a:fe:70:b3:fa: 6c:06:43:7b:3e:ac:bd:e3:11:45:a2:31:71:c4:5f: 89:a5:64:04:7a:b8:99:f8:a7:94:ba:30:25:65:7e: f8:cd:d2:95:99:18:24:c5:64:8c:27:9a:71:10:43: d7:0d:6e:23:83:a2:4c:09:1c:ec:28:b7:d5:1d:c8: 82:d7:aa:de:0f:25:8b:52:74:3f:49:17:cf:dc:03: 56:7a:48:92:37:34:36:4b:cc:6d:d3:0b:0c:c4:ef: d4:3b:2f:5a:30:7c:ba:93:8d:63:e6:28:fa:f7:fd: 8e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.108.128.0/22 103.247.40.0/22 IPv6: 2402:69c0::/32 Signature Algorithm: sha256WithRSAEncryption 62:20:d2:65:cc:a5:8d:7a:9a:42:92:30:68:33:ad:80:e8:0d: ae:90:17:94:7b:8e:5e:db:54:0a:65:e7:d0:5f:c5:6a:e0:40: 44:ce:68:3c:b0:30:c0:5c:d1:84:ad:43:da:01:1c:87:e7:87: ca:bc:31:f5:b8:59:41:ff:dc:04:57:b9:8d:ea:76:00:91:17: e3:7f:9e:92:f0:91:33:f1:67:4b:14:e6:ce:fc:37:6a:18:92: 07:47:2e:63:01:fa:41:d2:ec:bb:74:16:f8:9f:b2:e1:0c:4b: a2:c1:b1:f6:c0:5f:d7:f6:46:6a:7b:d7:14:dd:54:c5:b8:c7: 5e:5b:f0:3c:75:46:64:e7:17:b7:9a:50:f5:2e:13:0c:77:4c: 0a:61:57:a1:99:cd:9e:24:89:a9:e4:9e:04:f9:89:4a:51:3c: 3b:78:9e:72:ef:c8:ac:0d:25:a0:d0:a6:94:5b:ed:b2:9f:c1: 80:e3:f5:0f:74:f4:a0:88:f5:41:ca:c4:73:6b:7e:8f:8f:e3: 05:b3:5d:b8:34:f7:6c:46:3e:3f:dc:dd:f4:f9:97:0a:dd:28: 55:bf:c0:c2:77:1c:ba:81:d6:d0:22:50:81:2d:88:c6:b7:dd: 3e:ea:cf:15:28:7f:b2:06:b9:96:f7:39:b0:0a:29:ce:80:eb: bb:a0:9a:83 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUPxt4rVasv+ZuLe9R5I+k1NDauGswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTgyMloX DTI3MDUwMjAxMjMyMlowMzExMC8GA1UEAxMoMzNDQUIzMzA1RTM2NDNFODNFNjcz RjA5ODIwOUI5QkNGNkIxQTFGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOapntr7TSCQ2jmwUT7ymixddNijJq4g9xZKOuHoogX9jboXyCFrOCsIYzU y9TiIVDwwkeV4WxYPIA9hw5Da6r1VSIix/8gCz5VYt8m2h761bRRFV0qAF1JLllY T+8lNZ0wGKM46KI3UP23B0v2zzHcI4mmuCbfh+/ZpaAAPUpMdxlbYKcQp5KCz0Lx eyDKWRr+cLP6bAZDez6sveMRRaIxccRfiaVkBHq4mfinlLowJWV++M3SlZkYJMVk jCeacRBD1w1uI4OiTAkc7Ci31R3Igteq3g8li1J0P0kXz9wDVnpIkjc0NkvMbdML DMTv1DsvWjB8upONY+Yo+vf9jkECAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDPKszBeNkPoPmc/CYIJubz2saH7MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzkyODA4OWE3LTBhNjgtNGQ2Ny1hZGFiLTc2ZDdkOTI3MWZkZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85MjgwODlh Ny0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zM0NBQjMzMDVFMzY0M0U4 M0U2NzNGMDk4MjA5QjlCQ0Y2QjFBMUZCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQCZ2yAAwQCZ/coMA0EAgACMAcDBQAkAmnAMA0GCSqGSIb3DQEBCwUAA4IBAQBi INJlzKWNeppCkjBoM62A6A2ukBeUe45e21QKZefQX8Vq4EBEzmg8sDDAXNGErUPa ARyH54fKvDH1uFlB/9wEV7mN6nYAkRfjf56S8JEz8WdLFObO/DdqGJIHRy5jAfpB 0uy7dBb4n7LhDEuiwbH2wF/X9kZqe9cU3VTFuMdeW/A8dUZk5xe3mlD1LhMMd0wK YVehmc2eJImp5J4E+YlKUTw7eJ5y78isDSWg0KaUW+2yn8GA4/UPdPSgiPVBysRz a36Pj+MFs124NPdsRj4/3N30+ZcK3ShVv8DCdxy6gdbQIlCBLYjGt90+6s8VKH+y BrmW9zmwCinOgOu7oJqD -----END CERTIFICATE-----Generated at Tue May 12 22:29:06 2026 by rpki-client