$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B17A330780AFD953D1D3338525F941E14E1FC919.cer File: B17A330780AFD953D1D3338525F941E14E1FC919.cer (raw, json) Hash identifier: GWZy8sJd6a1RhIYxipwRiHph9C7GL8TJ5jzrgJupmQM= Subject key identifier: B1:7A:33:07:80:AF:D9:53:D1:D3:33:85:25:F9:41:E1:4E:1F:C9:19 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 227309F5CE4E316F821D7F9E5297DC17D144C4C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.mft caRepository: rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:46:29 +0000 Certificate not after: Sun 02 May 2027 01:51:29 +0000 Subordinate resources: IP: 103.174.24.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:73:09:f5:ce:4e:31:6f:82:1d:7f:9e:52:97:dc:17:d1:44:c4:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:46:29 2026 GMT Not After : May 2 01:51:29 2027 GMT Subject: CN=B17A330780AFD953D1D3338525F941E14E1FC919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:65:e5:43:bf:3f:37:a2:0c:bc:fe:ed:60:ec: d4:94:1e:b9:aa:ab:70:63:4e:ad:c8:da:7f:14:93: de:88:8b:ca:0b:cc:a2:6c:eb:1b:34:c4:63:33:a0: a1:26:c2:8a:c0:ea:c4:c1:63:12:ef:5d:b7:17:a1: d8:3c:89:25:eb:81:98:21:55:41:97:17:71:ce:77: 3e:5d:13:8d:d8:ae:9c:fa:25:54:f5:05:c8:3d:73: 51:3b:0d:40:cc:37:14:8c:0b:05:e6:b2:89:da:62: 2d:bd:b6:11:87:22:33:25:33:91:50:fa:4b:63:e5: 19:e9:40:53:b1:8b:b2:1a:13:91:39:58:b4:96:3a: 04:06:e0:c0:b9:3b:4f:84:d4:dc:58:ea:f7:6d:a5: f7:97:89:27:38:4c:89:fb:60:50:81:b2:fd:a9:b9: aa:6c:6c:9c:39:ad:c6:f2:4d:84:9f:7c:11:60:21: 8d:18:28:da:ef:36:5c:da:20:27:cb:f2:70:7d:e8: e1:e7:6c:d4:0b:53:3a:2c:2a:22:1b:5f:19:d0:e7: 55:a1:3d:30:bb:11:61:ca:5f:a8:00:0c:fd:83:66: f7:7d:f0:75:27:55:0b:19:4c:5c:d5:79:19:ca:73: 8d:fc:4d:12:6c:ff:4f:2a:be:c9:f2:27:e0:1a:9c: b3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:7A:33:07:80:AF:D9:53:D1:D3:33:85:25:F9:41:E1:4E:1F:C9:19 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.24.0/23 Signature Algorithm: sha256WithRSAEncryption 66:74:4c:5a:13:d9:b9:fb:13:6d:90:1f:34:7d:8b:16:99:ca: 3e:e6:c3:0f:2f:68:ff:7c:29:18:19:82:89:d4:60:46:14:f3: a0:8d:3d:26:0f:bd:9a:56:cf:26:d6:46:5e:a4:50:48:04:3c: 02:20:63:38:22:e8:a6:c0:ee:f3:f0:06:51:10:f8:35:87:36: f5:d0:f5:b1:c8:76:53:e0:70:a6:e7:2e:ae:17:c1:57:45:03: 9e:8a:48:89:c7:e4:62:48:90:5b:ad:70:c5:83:3e:58:d5:07: 09:f5:46:65:d2:4a:19:95:4e:a5:0d:05:5b:53:bd:3f:fd:60: 16:7c:91:9a:41:69:68:a7:08:e6:9d:bb:ec:fb:c2:d2:e5:86: 47:ad:09:68:68:d4:81:31:25:27:93:7a:6d:75:f3:60:39:de: 37:fd:ae:cd:01:71:44:b2:b3:88:fe:df:b2:de:1a:c9:87:4d: 3f:72:de:5c:e2:c1:3f:ff:f7:44:25:5b:9c:ae:5e:50:98:10: a8:8f:d9:13:af:a0:72:79:b6:f7:e2:22:ae:d8:3c:c3:d2:14: 6a:ec:22:8c:15:1a:a5:86:27:47:1e:55:fb:74:37:49:a3:2c: 91:f1:ca:a5:4f:ee:f1:bf:7d:38:6f:00:7d:5c:5b:87:fe:69: 98:a8:21:68 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUInMJ9c5OMW+CHX+eUpfcF9FExMcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDYyOVoX DTI3MDUwMjAxNTEyOVowMzExMC8GA1UEAxMoQjE3QTMzMDc4MEFGRDk1M0QxRDMz Mzg1MjVGOTQxRTE0RTFGQzkxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJhl5UO/PzeiDLz+7WDs1JQeuaqrcGNOrcjafxST3oiLygvMomzrGzTEYzOg oSbCisDqxMFjEu9dtxeh2DyJJeuBmCFVQZcXcc53Pl0TjdiunPolVPUFyD1zUTsN QMw3FIwLBeayidpiLb22EYciMyUzkVD6S2PlGelAU7GLshoTkTlYtJY6BAbgwLk7 T4TU3Fjq922l95eJJzhMiftgUIGy/am5qmxsnDmtxvJNhJ98EWAhjRgo2u82XNog J8vycH3o4eds1AtTOiwqIhtfGdDnVaE9MLsRYcpfqAAM/YNm933wdSdVCxlMXNV5 GcpzjfxNEmz/Tyq+yfIn4Bqcs08CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLF6MweAr9lT0dMzhSX5QeFOH8kZMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2JmMjViOTY4LTA5MjctNDU5NC04ODdlLTY3ZjUzZjk2N2IxMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iZjI1Yjk2 OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMC9CMTdBMzMwNzgwQUZEOTUz RDFEMzMzODUyNUY5NDFFMTRFMUZDOTE5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ64YMA0GCSqGSIb3DQEBCwUAA4IBAQBmdExaE9m5+xNtkB80fYsWmco+5sMP L2j/fCkYGYKJ1GBGFPOgjT0mD72aVs8m1kZepFBIBDwCIGM4IuimwO7z8AZREPg1 hzb10PWxyHZT4HCm5y6uF8FXRQOeikiJx+RiSJBbrXDFgz5Y1QcJ9UZl0koZlU6l DQVbU70//WAWfJGaQWlopwjmnbvs+8LS5YZHrQloaNSBMSUnk3ptdfNgOd43/a7N AXFEsrOI/t+y3hrJh00/ct5c4sE///dEJVucrl5QmBCoj9kTr6Byebb34iKu2DzD 0hRq7CKMFRqlhidHHlX7dDdJoyyR8cqlT+7xv304bwB9XFuH/mmYqCFo -----END CERTIFICATE-----Generated at Tue May 12 22:03:17 2026 by rpki-client