$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F22D335E58FE4480C630028AFDA089DDD4F51B2E.cer File: F22D335E58FE4480C630028AFDA089DDD4F51B2E.cer (raw, json) Hash identifier: RHKbeK14os6v9BDwhktnSZnCV8TgeJuetJjjTY+thsU= Subject key identifier: F2:2D:33:5E:58:FE:44:80:C6:30:02:8A:FD:A0:89:DD:D4:F5:1B:2E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 21E97716CA686750128319B6E93AEF9299E72175 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:07:47 +0000 Certificate not after: Sun 02 May 2027 01:12:47 +0000 Subordinate resources: IP: 45.120.244.0/22 IP: 103.66.55.0/24 IP: 2001:df2:be00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e9:77:16:ca:68:67:50:12:83:19:b6:e9:3a:ef:92:99:e7:21:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:07:47 2026 GMT Not After : May 2 01:12:47 2027 GMT Subject: CN=F22D335E58FE4480C630028AFDA089DDD4F51B2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3e:72:2a:da:f1:09:99:a7:53:97:50:91:5d: 20:dc:2d:b0:c6:9f:17:55:37:8a:f2:f7:77:41:71: ab:2d:1a:b5:3b:4c:9e:5e:7e:8b:77:11:02:3e:cf: 17:db:76:9c:81:bd:af:6a:b9:f5:4b:95:7c:57:b3: 14:e0:ce:8a:97:bb:71:af:5e:e5:c8:7f:be:08:cd: d5:ca:eb:06:65:aa:2c:ed:7a:c1:31:1a:43:0c:48: 09:b7:86:5c:82:c3:ed:52:1b:8f:86:cb:1d:6f:47: c9:4f:c7:d5:a3:b5:33:ca:b5:0c:e3:3f:d0:f0:cc: 87:7b:43:52:ae:ca:dc:83:9c:5a:6f:64:f5:14:f7: 6d:41:e9:e2:ba:50:52:10:cc:f0:87:73:4d:75:42: ff:20:b6:66:43:b1:8b:cc:b0:c3:f3:b8:5f:3b:9e: 16:9a:bf:40:f5:48:87:69:43:0f:00:4e:59:b2:48: 4c:f2:9d:b7:66:86:9f:06:72:32:81:15:6c:7b:7d: d1:a4:d6:4b:ac:b7:25:fc:33:41:ac:9b:0d:e7:3b: d0:e3:c8:de:f9:09:8e:f7:ea:9b:e8:c3:40:b2:5f: e7:77:9c:99:77:3f:38:47:21:cc:7e:b0:d6:9c:35: 76:93:19:7e:42:a6:8f:a2:05:74:c1:62:4b:c1:8d: 06:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:2D:33:5E:58:FE:44:80:C6:30:02:8A:FD:A0:89:DD:D4:F5:1B:2E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.120.244.0/22 103.66.55.0/24 IPv6: 2001:df2:be00::/48 Signature Algorithm: sha256WithRSAEncryption 0f:92:75:bd:1d:ad:ce:dd:7c:ff:34:9a:b8:a1:d1:f7:69:62: 18:64:09:e5:4e:90:cd:6b:30:b1:f3:b7:67:87:a6:4b:ab:7a: ee:08:85:d4:da:c7:66:89:08:ec:80:29:ca:ef:97:09:4a:ee: aa:91:5e:bc:06:56:ea:1c:92:bd:d7:d3:7f:a9:20:30:0e:e8: f6:5a:c5:e4:66:6e:5a:df:c6:58:46:12:06:9f:07:0f:db:02: 88:57:4b:d7:74:4b:2a:64:a7:c1:ce:30:c1:fc:e8:09:f0:34: df:37:ae:60:c1:dc:f6:d1:1b:66:39:9c:6a:6d:8f:30:dd:45: fb:dd:a3:65:ac:f8:fc:80:64:6d:00:2a:96:0d:44:5a:95:5d: 4f:9f:a1:40:94:aa:12:c8:00:1e:68:70:ed:7a:00:0e:3d:76: 4f:c7:86:26:f5:61:a6:8c:57:08:76:c3:24:b0:c3:22:85:b4: 25:0c:f1:58:0b:d2:3a:f7:d9:6a:43:75:32:ba:ee:07:27:3c: 1b:d7:12:de:15:cb:a8:2f:1b:a1:25:45:8c:c5:18:f1:09:ee: 02:4e:36:99:79:cd:97:f0:bb:26:7a:98:a4:40:0b:b6:2a:4e: e8:6d:47:78:08:3e:e7:6a:ed:24:2d:77:a8:16:5a:85:03:0e: a8:12:ca:ac -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUIel3FspoZ1ASgxm26TrvkpnnIXUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDc0N1oX DTI3MDUwMjAxMTI0N1owMzExMC8GA1UEAxMoRjIyRDMzNUU1OEZFNDQ4MEM2MzAw MjhBRkRBMDg5RERENEY1MUIyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKA+cira8QmZp1OXUJFdINwtsMafF1U3ivL3d0Fxqy0atTtMnl5+i3cRAj7P F9t2nIG9r2q59UuVfFezFODOipe7ca9e5ch/vgjN1crrBmWqLO16wTEaQwxICbeG XILD7VIbj4bLHW9HyU/H1aO1M8q1DOM/0PDMh3tDUq7K3IOcWm9k9RT3bUHp4rpQ UhDM8IdzTXVC/yC2ZkOxi8yww/O4XzueFpq/QPVIh2lDDwBOWbJITPKdt2aGnwZy MoEVbHt90aTWS6y3JfwzQaybDec70OPI3vkJjvfqm+jDQLJf53ecmXc/OEchzH6w 1pw1dpMZfkKmj6IFdMFiS8GNBvUCAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPItM15Y/kSAxjACiv2gid3U9RsuMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzgyNzgwZjg1LWVmMmYtNGNmOC1hNGI4LTUyMjVjNDViOTZhMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84Mjc4MGY4 NS1lZjJmLTRjZjgtYTRiOC01MjI1YzQ1Yjk2YTEvMC9GMjJEMzM1RTU4RkU0NDgw QzYzMDAyOEFGREEwODlEREQ0RjUxQjJFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQCLXj0AwQAZ0I3MA8EAgACMAkDBwAgAQ3yvgAwDQYJKoZIhvcNAQELBQADggEB AA+Sdb0drc7dfP80mrih0fdpYhhkCeVOkM1rMLHzt2eHpkureu4IhdTax2aJCOyA KcrvlwlK7qqRXrwGVuockr3X03+pIDAO6PZaxeRmblrfxlhGEgafBw/bAohXS9d0 Sypkp8HOMMH86AnwNN83rmDB3PbRG2Y5nGptjzDdRfvdo2Ws+PyAZG0AKpYNRFqV XU+foUCUqhLIAB5ocO16AA49dk/Hhib1YaaMVwh2wySwwyKFtCUM8VgL0jr32WpD dTK67gcnPBvXEt4Vy6gvG6ElRYzFGPEJ7gJONpl5zZfwuyZ6mKRAC7YqTuhtR3gI Pudq7SQtd6gWWoUDDqgSyqw= -----END CERTIFICATE-----Generated at Tue May 12 22:10:03 2026 by rpki-client