$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer File: 33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer (raw, json) Hash identifier: K85OPpHvUy/qmeIbFyHJ17tQsCnxLOWINj2I7WfayFs= Subject key identifier: 33:DC:D8:55:DE:6E:86:6A:83:A5:70:AB:A8:A1:DE:A5:A6:E3:0E:4D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 72259099D71F097D4662B78AC4B099C171F862FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:46:34 +0000 Certificate not after: Sun 02 May 2027 01:51:34 +0000 Subordinate resources: IP: 103.226.232.0/22 IP: 2400:b180::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:25:90:99:d7:1f:09:7d:46:62:b7:8a:c4:b0:99:c1:71:f8:62:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:46:34 2026 GMT Not After : May 2 01:51:34 2027 GMT Subject: CN=33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3f:5c:b7:ce:58:a1:37:d8:86:cc:56:ee:38: 4f:7b:7f:88:56:bc:1d:d9:b4:4d:5c:fa:bc:da:c6: ca:15:91:77:e4:03:1b:0b:ee:0f:1e:7e:d6:3f:01: f1:0d:b5:91:c2:7b:f9:4e:07:91:3f:92:ae:6e:a0: 20:c3:bb:7a:d2:03:20:7a:1a:0c:89:04:e5:67:d6: 84:5c:a8:da:47:c9:f1:a3:dc:43:db:3b:8f:1e:ee: 3b:f5:1e:8b:2e:28:27:71:41:c1:37:f8:bd:d6:84: aa:c6:5a:81:da:f9:60:03:a0:65:68:f2:cd:ac:f1: 31:6c:5c:fe:67:8f:fb:75:5a:8f:d8:e1:b9:53:5a: 8e:71:a2:68:aa:59:30:84:90:e9:7f:66:0d:ba:eb: 55:8c:64:48:71:76:59:fb:ab:11:f6:c7:56:d5:da: 2c:03:07:d1:7c:7a:a3:a5:44:97:58:b2:3e:41:27: 4d:7f:2e:10:4b:11:54:f0:22:ea:d8:3e:a8:04:20: 91:ea:f9:f0:5d:c5:c5:d9:1b:1e:11:9d:0a:8d:ee: c7:8b:54:17:19:12:7d:52:7d:34:39:81:f1:9c:b1: b5:46:2b:5d:59:07:85:66:fa:d7:b1:5a:be:ed:ab: 70:58:e8:18:e8:f8:f9:e4:55:3f:c7:37:a5:b1:48: f1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:DC:D8:55:DE:6E:86:6A:83:A5:70:AB:A8:A1:DE:A5:A6:E3:0E:4D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.226.232.0/22 IPv6: 2400:b180::/32 Signature Algorithm: sha256WithRSAEncryption 59:88:83:07:ca:6e:aa:9f:97:5f:9d:31:25:20:a9:3f:d2:25: ff:1c:b1:e8:76:f2:d5:f4:72:83:c7:4f:cf:d1:ef:a8:c0:ee: 73:4c:c1:fe:8d:ef:d0:05:f2:54:29:84:b5:9d:01:6a:c0:cf: d5:a7:9b:68:fa:0c:77:b6:83:3b:94:eb:6e:79:72:3f:2c:e4: c1:77:4d:77:0c:c5:84:e0:47:50:12:35:f5:17:a5:24:af:80: 1f:af:9c:0d:5f:cf:2d:74:5d:ba:c5:c9:d4:88:0a:ad:0d:e6: d8:1f:50:76:ab:a0:17:dd:5b:9b:b8:74:e5:b0:f7:08:bd:2f: b6:21:a2:10:68:e5:b9:ab:bd:bc:62:de:61:2f:fd:1b:bd:0f: 13:1a:b0:33:82:2f:d0:9b:8a:04:ab:91:a4:24:51:5f:46:da: 9e:c1:58:b1:77:fa:d2:76:12:9c:06:b6:58:cd:ca:2a:d1:06: 4c:d1:40:50:e4:16:c0:df:1d:2c:92:f2:d7:6d:6c:d1:d6:aa: 45:d3:17:2b:91:cb:e5:f7:3b:79:d3:49:fa:e7:29:08:7d:17: bc:da:3a:02:02:9c:d3:ee:92:a3:b8:86:b7:14:72:f7:71:76: f8:30:13:66:c4:b8:50:e6:fa:09:4a:87:85:b0:f5:60:b9:39: 14:e9:0d:72 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUciWQmdcfCX1GYreKxLCZwXH4YvowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDYzNFoX DTI3MDUwMjAxNTEzNFowMzExMC8GA1UEAxMoMzNEQ0Q4NTVERTZFODY2QTgzQTU3 MEFCQThBMURFQTVBNkUzMEU0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOI/XLfOWKE32IbMVu44T3t/iFa8Hdm0TVz6vNrGyhWRd+QDGwvuDx5+1j8B 8Q21kcJ7+U4HkT+Srm6gIMO7etIDIHoaDIkE5WfWhFyo2kfJ8aPcQ9s7jx7uO/Ue iy4oJ3FBwTf4vdaEqsZagdr5YAOgZWjyzazxMWxc/meP+3Vaj9jhuVNajnGiaKpZ MISQ6X9mDbrrVYxkSHF2WfurEfbHVtXaLAMH0Xx6o6VEl1iyPkEnTX8uEEsRVPAi 6tg+qAQgker58F3FxdkbHhGdCo3ux4tUFxkSfVJ9NDmB8ZyxtUYrXVkHhWb617Fa vu2rcFjoGOj4+eRVP8c3pbFI8bECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDPc2FXeboZqg6Vwq6ih3qWm4w5NMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2JmNTQyYmM0LTc0ZGMtNDVkZC1iNjU5LTc0NWNhMmFjYTMzMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iZjU0MmJj NC03NGRjLTQ1ZGQtYjY1OS03NDVjYTJhY2EzMzMvMC8zM0RDRDg1NURFNkU4NjZB ODNBNTcwQUJBOEExREVBNUE2RTMwRTRELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ+LoMA0EAgACMAcDBQAkALGAMA0GCSqGSIb3DQEBCwUAA4IBAQBZiIMHym6q n5dfnTElIKk/0iX/HLHodvLV9HKDx0/P0e+owO5zTMH+je/QBfJUKYS1nQFqwM/V p5to+gx3toM7lOtueXI/LOTBd013DMWE4EdQEjX1F6Ukr4Afr5wNX88tdF26xcnU iAqtDebYH1B2q6AX3VubuHTlsPcIvS+2IaIQaOW5q728Yt5hL/0bvQ8TGrAzgi/Q m4oEq5GkJFFfRtqewVixd/rSdhKcBrZYzcoq0QZM0UBQ5BbA3x0skvLXbWzR1qpF 0xcrkcvl9zt500n65ykIfRe82joCApzT7pKjuIa3FHL3cXb4MBNmxLhQ5voJSoeF sPVguTkU6Q1y -----END CERTIFICATE-----Generated at Wed May 13 01:36:16 2026 by rpki-client