$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer File: 633520AD134E7E67CBB832AE9339B6F7EB07D358.cer (raw, json) Hash identifier: ft7tX3keJXcS/iLtRnUiPrs1HiGXyoBJYiVMOdYwlFg= Subject key identifier: 63:35:20:AD:13:4E:7E:67:CB:B8:32:AE:93:39:B6:F7:EB:07:D3:58 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 42223A3709DA1BA5CBEED8CDE59D90A89878AB78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:29:36 +0000 Certificate not after: Sun 02 May 2027 02:34:36 +0000 Subordinate resources: IP: 103.108.191.0/24 IP: 2001:df4:1f00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:22:3a:37:09:da:1b:a5:cb:ee:d8:cd:e5:9d:90:a8:98:78:ab:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:29:36 2026 GMT Not After : May 2 02:34:36 2027 GMT Subject: CN=633520AD134E7E67CBB832AE9339B6F7EB07D358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:e1:60:f0:f3:78:11:de:c8:1a:bc:21:f3: c3:62:f5:5a:12:3e:c6:e1:e3:da:c8:64:0a:d5:82: 02:8a:76:58:70:bb:e8:d8:6f:3b:0a:08:e9:01:6a: af:19:85:28:2a:60:c5:43:c9:d9:b8:ee:b5:32:b6: c9:08:0e:51:fc:ba:16:89:50:81:b9:00:5b:ce:ce: 23:a6:7b:bc:92:a2:e3:99:09:81:5f:a9:71:ae:fd: 5e:89:6b:b5:90:56:e4:f1:62:50:29:cd:ea:37:68: 90:31:df:09:ae:f7:53:4c:f6:eb:8a:c1:e7:e4:74: fb:64:c9:e0:74:53:a1:cf:f6:23:af:44:90:e4:83: 01:6b:c4:2c:5e:a9:04:1a:75:03:d2:27:f0:fe:e5: 8a:ae:ef:d2:06:58:29:92:b1:fa:97:6d:9a:5f:0e: 51:63:9e:0f:70:76:a3:96:c4:bf:20:6d:78:1e:8e: 8f:ab:f4:b7:6a:e2:55:25:0c:61:75:56:95:ec:09: 26:00:66:f2:f8:bb:8b:a8:40:1e:21:65:5c:ad:99: 31:73:7b:c5:96:59:33:d4:37:e2:1e:1d:21:ad:01: 6f:c4:d9:44:51:89:1b:b4:7a:93:57:f7:24:6b:30: 6a:16:f9:83:fd:97:1e:c8:1d:0f:8c:39:fe:12:d2: dd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 63:35:20:AD:13:4E:7E:67:CB:B8:32:AE:93:39:B6:F7:EB:07:D3:58 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.108.191.0/24 IPv6: 2001:df4:1f00::/48 Signature Algorithm: sha256WithRSAEncryption 92:02:7f:32:d9:1c:2d:ad:9f:d9:f0:a6:76:66:14:f1:a8:4f: d2:56:a6:cd:b4:fc:3a:4c:e7:8c:ad:bf:fb:f6:d6:77:a3:e6: 01:43:66:29:40:9a:a1:c9:cd:20:57:b6:1e:fa:fe:0e:02:01: f9:70:65:25:d3:c8:1b:84:ad:de:76:0b:bc:c1:e8:17:67:7a: bc:cb:9b:14:3a:70:b0:a0:3b:b9:a4:eb:32:dd:59:ce:69:1f: ee:88:b9:88:ba:5d:1c:ae:78:2d:a1:5b:8b:83:85:a5:5d:f1: e2:d9:02:e9:a5:5a:0b:09:1e:04:5d:47:ce:ad:ee:7a:17:02: 94:b9:5c:0e:ce:83:46:1c:92:04:82:21:b8:af:91:a5:cc:56: 41:21:8e:b5:6c:8d:a2:7c:06:c0:fb:e1:34:58:0c:d2:52:e2: 02:4b:65:1d:fc:f2:08:c7:d6:db:27:89:4c:0e:59:4c:11:97: 59:98:01:5c:d9:4d:91:b7:fc:c9:f0:1a:b8:d6:9f:22:6e:75: cf:42:62:c1:38:30:3f:7f:65:9a:d2:8b:ed:f7:d2:a1:e2:85: a9:e4:7e:f4:d3:12:ae:9a:ef:12:0b:8e:d3:8c:f4:26:f8:80: e6:17:20:88:31:5e:c0:6a:3e:2d:33:64:d7:c6:9e:cf:b8:2e: 73:0c:be:cd -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUQiI6NwnaG6XL7tjN5Z2QqJh4q3gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjkzNloX DTI3MDUwMjAyMzQzNlowMzExMC8GA1UEAxMoNjMzNTIwQUQxMzRFN0U2N0NCQjgz MkFFOTMzOUI2RjdFQjA3RDM1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM2B4WDw83gR3sgavCHzw2L1WhI+xuHj2shkCtWCAop2WHC76NhvOwoI6QFq rxmFKCpgxUPJ2bjutTK2yQgOUfy6FolQgbkAW87OI6Z7vJKi45kJgV+pca79Xolr tZBW5PFiUCnN6jdokDHfCa73U0z264rB5+R0+2TJ4HRToc/2I69EkOSDAWvELF6p BBp1A9In8P7liq7v0gZYKZKx+pdtml8OUWOeD3B2o5bEvyBteB6Oj6v0t2riVSUM YXVWlewJJgBm8vi7i6hAHiFlXK2ZMXN7xZZZM9Q34h4dIa0Bb8TZRFGJG7R6k1f3 JGswahb5g/2XHsgdD4w5/hLS3e0CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGM1IK0TTn5ny7gyrpM5tvfrB9NYMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2YxOTBjMzdlLTI2NTUtNDJiMS1iYWY3LTQyZWMxY2YxOTJhYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mMTkwYzM3 ZS0yNjU1LTQyYjEtYmFmNy00MmVjMWNmMTkyYWEvMC82MzM1MjBBRDEzNEU3RTY3 Q0JCODMyQUU5MzM5QjZGN0VCMDdEMzU4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ2y/MA8EAgACMAkDBwAgAQ30HwAwDQYJKoZIhvcNAQELBQADggEBAJICfzLZ HC2tn9nwpnZmFPGoT9JWps20/DpM54ytv/v21nej5gFDZilAmqHJzSBXth76/g4C AflwZSXTyBuErd52C7zB6BdnerzLmxQ6cLCgO7mk6zLdWc5pH+6IuYi6XRyueC2h W4uDhaVd8eLZAumlWgsJHgRdR86t7noXApS5XA7Og0YckgSCIbivkaXMVkEhjrVs jaJ8BsD74TRYDNJS4gJLZR388gjH1tsniUwOWUwRl1mYAVzZTZG3/MnwGrjWnyJu dc9CYsE4MD9/ZZrSi+330qHihankfvTTEq6a7xILjtOM9Cb4gOYXIIgxXsBqPi0z ZNfGns+4LnMMvs0= -----END CERTIFICATE-----Generated at Tue May 12 22:03:32 2026 by rpki-client