$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer File: 33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer (raw, json) Hash identifier: JU56h16k/AynKIiCnBipDTAGPkJM7dq2MI5gCRORxHo= Subject key identifier: 33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 211060DAC8A26AF0EC9AE17F4EFF4A29B63047E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:15:41 +0000 Certificate not after: Sun 02 May 2027 00:20:41 +0000 Subordinate resources: IP: 103.162.220.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:10:60:da:c8:a2:6a:f0:ec:9a:e1:7f:4e:ff:4a:29:b6:30:47:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:15:41 2026 GMT Not After : May 2 00:20:41 2027 GMT Subject: CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:89:67:88:52:b0:a8:70:a6:51:9e:db:68:92: 89:0d:56:17:35:c0:57:e2:22:61:5c:45:de:09:20: 3d:3b:e5:dd:ce:df:72:b8:47:13:50:c0:76:62:26: bd:a2:06:78:c3:f2:5e:28:bb:4b:91:65:88:58:e4: f4:d3:10:cf:93:71:47:ae:e6:b6:b4:ab:da:be:16: 00:77:7c:d3:3b:5d:fc:26:29:21:0e:8a:a1:30:f1: 58:74:2c:c4:d5:3f:3e:d8:fc:70:5f:ab:5c:a8:a4: 80:21:29:be:11:a1:af:02:a6:1a:63:72:82:8c:c5: 40:68:d9:01:1a:32:0a:96:23:ab:86:ea:ba:cf:2f: d7:8b:86:ca:92:40:5f:67:f0:3a:69:be:83:46:59: 37:1e:9d:14:30:e9:39:30:ab:18:dd:53:b3:cd:90: e8:0c:44:3d:5a:bf:98:36:cf:aa:1d:db:97:78:9f: 25:f8:64:0d:92:59:af:72:f5:8c:83:b3:bc:45:5c: c4:cc:28:e7:21:bb:0e:7a:fa:6a:3a:29:43:57:04: b4:26:ed:3d:1f:cf:19:ff:63:ca:3c:f7:6f:e6:1b: d4:9a:5e:34:73:3f:d7:ae:b0:83:92:f3:53:e4:53: 78:7c:32:d8:23:a1:0e:6e:55:b0:b8:95:d3:fa:a6: e1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.220.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:43:fa:d1:6a:1d:66:6d:3b:22:4b:12:b9:70:53:23:cb:1e: 90:61:7b:0c:43:36:bc:b1:b2:42:ea:6a:71:01:e2:73:3c:d4: 09:bb:43:82:ed:43:ab:e1:3f:ee:3d:36:48:d5:57:e9:d5:c2: 26:b6:12:01:f0:36:51:0c:45:cb:e9:20:df:6e:59:00:3d:67: 47:80:0c:32:34:d5:04:37:60:7e:57:5e:28:07:c9:07:7a:87: 57:cf:8f:50:ce:68:ec:ed:e9:d4:5c:63:e4:da:72:d8:64:30: 77:74:ed:1e:98:f0:97:6f:bc:de:4b:00:0f:2a:ab:62:56:1d: 04:86:88:3e:0c:73:73:15:68:7a:b3:06:65:bf:42:b9:9c:c6: bb:d9:bd:e7:41:de:a4:6a:5f:6f:c2:7a:a2:7c:2f:d6:9e:02: 24:4a:76:b2:66:e9:85:d9:1a:62:26:77:b1:36:aa:03:60:aa: a0:d8:e0:0b:d5:ec:25:b9:4f:90:12:15:26:4a:73:ef:32:84: 31:e3:c8:99:fe:1a:51:c5:fe:3f:7f:94:5d:58:5d:d5:ec:9a: 55:81:e2:c0:f4:7d:c5:96:ab:9a:45:90:a6:c0:c2:d8:c2:ed: 6c:22:61:51:71:fb:66:83:69:cf:4c:c9:0e:1f:15:21:c3:1b: 0d:f7:4b:7c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUIRBg2siiavDsmuF/Tv9KKbYwR+EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTU0MVoX DTI3MDUwMjAwMjA0MVowMzExMC8GA1UEAxMoMzNFQUVGMjcxNUJBRjdFN0UyQjRD RTMwNTEwNTI3OUQ3OThGNEEwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMaJZ4hSsKhwplGe22iSiQ1WFzXAV+IiYVxF3gkgPTvl3c7fcrhHE1DAdmIm vaIGeMPyXii7S5FliFjk9NMQz5NxR67mtrSr2r4WAHd80ztd/CYpIQ6KoTDxWHQs xNU/Ptj8cF+rXKikgCEpvhGhrwKmGmNygozFQGjZARoyCpYjq4bqus8v14uGypJA X2fwOmm+g0ZZNx6dFDDpOTCrGN1Ts82Q6AxEPVq/mDbPqh3bl3ifJfhkDZJZr3L1 jIOzvEVcxMwo5yG7Dnr6ajopQ1cEtCbtPR/PGf9jyjz3b+Yb1JpeNHM/166wg5Lz U+RTeHwy2COhDm5VsLiV0/qm4TUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDPq7ycVuvfn4rTOMFEFJ515j0oOMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM1OGM4ZjlmLTQyMTMtNGEyYS04NWMzLWIyNGIwZDBiNTEwNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zNThjOGY5 Zi00MjEzLTRhMmEtODVjMy1iMjRiMGQwYjUxMDcvMC8zM0VBRUYyNzE1QkFGN0U3 RTJCNENFMzA1MTA1Mjc5RDc5OEY0QTBFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6LcMA0GCSqGSIb3DQEBCwUAA4IBAQB/Q/rRah1mbTsiSxK5cFMjyx6QYXsM Qza8sbJC6mpxAeJzPNQJu0OC7UOr4T/uPTZI1Vfp1cImthIB8DZRDEXL6SDfblkA PWdHgAwyNNUEN2B+V14oB8kHeodXz49Qzmjs7enUXGPk2nLYZDB3dO0emPCXb7ze SwAPKqtiVh0Ehog+DHNzFWh6swZlv0K5nMa72b3nQd6kal9vwnqifC/WngIkSnay ZumF2RpiJnexNqoDYKqg2OAL1ewluU+QEhUmSnPvMoQx48iZ/hpRxf4/f5RdWF3V 7JpVgeLA9H3FlquaRZCmwMLYwu1sImFRcftmg2nPTMkOHxUhwxsN90t8 -----END CERTIFICATE-----Generated at Tue May 12 22:16:42 2026 by rpki-client