$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer File: C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer (raw, json) Hash identifier: v5pQrmaHk7WJwFV91u/1G4zlvYPzbWttJCbyA+IrDVQ= Subject key identifier: C2:16:49:B0:E9:28:31:8C:35:61:8E:E1:97:DD:5D:CD:B1:FA:7A:31 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2973180AE2790D8FEBFAA5257022A4B9E386962F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:31:35 +0000 Certificate not after: Sun 02 May 2027 01:36:35 +0000 Subordinate resources: IP: 103.21.195.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:73:18:0a:e2:79:0d:8f:eb:fa:a5:25:70:22:a4:b9:e3:86:96:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:31:35 2026 GMT Not After : May 2 01:36:35 2027 GMT Subject: CN=C21649B0E928318C35618EE197DD5DCDB1FA7A31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6e:17:d3:4e:1c:8f:c5:53:01:e7:be:df:25: 2e:b7:07:30:80:74:2e:d4:37:fa:ad:dc:9b:2e:1a: bd:58:07:7c:99:72:ee:5b:34:e9:a5:0c:42:e3:ee: 05:48:1d:7e:f2:6d:11:0c:52:a3:c7:f9:23:74:2e: c7:fe:11:7c:d5:73:86:17:9c:c8:4a:0a:89:7b:20: 8a:a6:49:3a:ae:de:e8:1d:11:0b:3f:57:0a:55:d4: 91:3d:23:ca:59:98:c6:4f:fb:96:cf:99:f6:6c:f1: 0e:e6:a8:c9:62:7a:82:06:bc:bd:1c:de:cc:9e:b9: 8b:7b:6f:90:dd:ce:d2:47:fc:49:cf:71:78:ec:22: 97:4f:2a:6e:5e:a7:ad:7a:b2:55:4d:73:e0:7a:1b: 59:28:7b:ee:60:2c:84:d2:1c:f0:f4:bc:e8:79:bb: e0:1f:2f:40:b8:83:a3:28:8c:17:7d:e4:4e:61:d5: 69:72:20:2a:fa:48:90:b0:01:2b:0f:39:eb:f1:ed: 19:af:69:21:c4:fe:7a:83:2c:81:c9:c2:86:cf:d0: 01:af:09:51:28:a0:dd:78:f5:32:e7:11:03:0d:a3: 08:9c:a5:4e:23:27:dc:d7:4d:2f:b9:71:d9:c7:11: da:1f:bb:9b:ca:68:9e:13:c3:bf:43:33:65:cb:88: 48:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:16:49:B0:E9:28:31:8C:35:61:8E:E1:97:DD:5D:CD:B1:FA:7A:31 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.21.195.0/24 Signature Algorithm: sha256WithRSAEncryption 74:c0:89:e9:38:16:63:5f:d0:bf:36:91:f2:c7:8b:e0:45:90: db:4e:8f:f3:f3:69:70:8e:c8:c8:e2:a5:35:47:6b:04:72:7b: a2:18:12:0f:be:65:30:a1:24:26:37:92:98:b4:10:d2:27:72: 90:c1:ae:1b:30:49:34:57:22:b9:5e:3c:f9:d2:a2:a9:2f:7e: c8:4b:2f:0b:f8:e4:b6:4b:79:e4:8e:b4:e6:92:ad:f3:a9:f4: b8:1d:8e:7d:f9:3d:09:2d:ee:1b:b1:ae:67:f9:92:25:32:32: 70:79:73:c4:a4:a7:5c:a1:21:f8:64:4d:1a:00:6d:9f:95:8a: 7c:44:a3:5c:70:47:e8:20:e1:8c:3e:a1:2b:4b:8c:31:3a:a9: 7f:e0:7a:54:51:8b:e6:e9:c0:4a:35:b1:49:31:58:54:12:81: f6:15:0b:c3:16:74:59:87:69:b5:a5:da:d2:b1:a8:71:fd:a5: 07:d8:d9:da:35:c5:bb:fb:3d:90:13:ce:4f:7e:e1:e5:d4:aa: 1d:51:d6:de:d0:46:7b:37:7c:27:84:00:a0:55:df:24:23:4a: 86:85:e8:a1:68:a2:2c:91:ad:42:97:1b:2a:32:79:93:35:c2: d6:2a:44:59:e9:a7:29:cd:fa:a8:f4:8a:f9:91:c7:e4:0d:ba: 28:42:93:a7 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUKXMYCuJ5DY/r+qUlcCKkueOGli8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzEzNVoX DTI3MDUwMjAxMzYzNVowMzExMC8GA1UEAxMoQzIxNjQ5QjBFOTI4MzE4QzM1NjE4 RUUxOTdERDVEQ0RCMUZBN0EzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ5uF9NOHI/FUwHnvt8lLrcHMIB0LtQ3+q3cmy4avVgHfJly7ls06aUMQuPu BUgdfvJtEQxSo8f5I3Qux/4RfNVzhhecyEoKiXsgiqZJOq7e6B0RCz9XClXUkT0j ylmYxk/7ls+Z9mzxDuaoyWJ6gga8vRzezJ65i3tvkN3O0kf8Sc9xeOwil08qbl6n rXqyVU1z4HobWSh77mAshNIc8PS86Hm74B8vQLiDoyiMF33kTmHVaXIgKvpIkLAB Kw856/HtGa9pIcT+eoMsgcnChs/QAa8JUSig3Xj1MucRAw2jCJylTiMn3NdNL7lx 2ccR2h+7m8ponhPDv0MzZcuISN8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMIWSbDpKDGMNWGO4ZfdXc2x+noxMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E2ODNiMjdjLWE3MzAtNDAwMi05MWI4LWQwMzY2ZGZhYzc3ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hNjgzYjI3 Yy1hNzMwLTQwMDItOTFiOC1kMDM2NmRmYWM3N2UvMC9DMjE2NDlCMEU5MjgzMThD MzU2MThFRTE5N0RENURDREIxRkE3QTMxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZxXDMA0GCSqGSIb3DQEBCwUAA4IBAQB0wInpOBZjX9C/NpHyx4vgRZDbTo/z 82lwjsjI4qU1R2sEcnuiGBIPvmUwoSQmN5KYtBDSJ3KQwa4bMEk0VyK5Xjz50qKp L37ISy8L+OS2S3nkjrTmkq3zqfS4HY59+T0JLe4bsa5n+ZIlMjJweXPEpKdcoSH4 ZE0aAG2flYp8RKNccEfoIOGMPqErS4wxOql/4HpUUYvm6cBKNbFJMVhUEoH2FQvD FnRZh2m1pdrSsahx/aUH2NnaNcW7+z2QE85PfuHl1KodUdbe0EZ7N3wnhACgVd8k I0qGheihaKIska1ClxsqMnmTNcLWKkRZ6acpzfqo9Ir5kcfkDbooQpOn -----END CERTIFICATE-----Generated at Tue May 12 22:16:50 2026 by rpki-client