$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.cer (raw, json) Hash identifier: yCnRTO1lz2n3TDzksoMeLBDCrQzpz/SMNC2vfGPry80= Subject key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3886FBC27EF172EB25E539DE4C66F07258AAB8A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft caRepository: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 08 Apr 2026 21:38:43 +0000 Certificate not after: Wed 07 Apr 2027 21:43:43 +0000 Subordinate resources: IP: 103.188.168.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:86:fb:c2:7e:f1:72:eb:25:e5:39:de:4c:66:f0:72:58:aa:b8:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 8 21:38:43 2026 GMT Not After : Apr 7 21:43:43 2027 GMT Subject: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:70:93:f3:58:00:93:f3:b3:7e:11:32:dd: 9a:e5:5b:6a:26:99:3a:2c:de:a3:33:ef:b7:c4:c8: 74:f9:6b:c9:9d:18:94:e4:d6:a1:94:c1:70:b1:4e: 6b:53:95:92:2c:dd:da:8c:c0:9f:6e:42:d4:27:d1: c0:7e:cf:8e:68:6d:27:a2:16:bc:02:fb:cf:45:96: f9:9a:fa:5c:8c:9e:0d:ff:6b:64:06:6f:7a:79:e4: 67:7c:07:74:ee:c2:da:49:83:4d:3b:08:67:51:f9: be:4f:1e:3a:10:25:16:7a:02:c1:f8:99:7a:d2:a0: 43:a4:91:cd:25:e8:9b:e7:21:b2:72:a0:fd:4a:aa: 63:42:de:16:7e:c3:af:de:08:e1:a3:b7:52:27:db: d0:3e:8d:22:f1:88:92:40:1b:7c:3b:4c:45:5e:d4: be:a8:b6:cc:c9:f0:15:e0:6d:4e:f0:ba:80:6f:14: 92:90:29:71:0f:cc:3d:b0:c7:6e:9e:be:36:a4:7a: 2b:08:80:49:36:6b:bd:af:e9:db:b5:72:ab:52:1b: b8:47:e5:ca:b8:1a:1f:f4:27:ef:b5:32:dc:52:53: 93:2f:b7:40:b8:c5:6c:1b:03:e4:44:50:2f:be:8a: da:f2:6f:3c:c0:54:70:2c:74:07:d8:ce:dc:01:9f: 53:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.188.168.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:c2:0d:f9:e3:35:94:1d:b2:ff:fd:08:82:b3:b5:1d:af:f3: d8:eb:11:db:d0:70:97:5b:65:e1:ce:80:5b:29:ff:f6:23:64: 09:6a:1b:77:54:cf:b3:74:29:26:aa:d4:d6:52:25:f5:e5:70: 83:8a:bf:16:98:07:7e:f0:35:90:0f:6b:f2:f6:d3:61:5c:f1: 6c:f7:a8:45:19:4a:f7:61:93:c7:7f:57:10:3a:19:93:b5:81: d6:80:22:8c:10:03:ae:a5:e0:7e:a5:54:58:27:d5:4f:5f:1e: 67:88:31:ee:12:a8:77:9d:c7:d0:01:9e:ec:1b:06:43:9a:d5: d5:5a:cb:05:ae:96:ff:bd:c2:14:f5:0f:68:0a:93:22:0e:f4: 8e:c8:05:0c:f6:c2:26:d1:76:13:a2:39:30:90:8e:92:14:80: 3d:cf:6b:29:5a:dd:72:62:28:b7:86:19:6c:86:b6:a2:ec:f8: d6:93:bc:fd:b5:23:c0:52:a5:90:de:cc:26:91:31:0e:a2:19: 83:dc:98:dd:a3:fa:9b:92:4e:e3:94:b2:29:8c:be:fa:ca:ff: 1e:a9:15:b2:f6:5f:f5:ea:5f:7b:c1:41:6c:d2:97:b2:66:f1: 9c:a4:c1:df:05:bd:2f:ab:ce:50:8a:c9:07:48:ae:05:cb:e0: e3:4a:76:fb -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUOIb7wn7xcusl5TneTGbwcliquKgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwODIxMzg0M1oX DTI3MDQwNzIxNDM0M1owMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0 NzMyNUQ4RkRBNzZDQzQ5NzA0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8acJPzWACT87N+ETLdmuVbaiaZOizeozPvt8TIdPlryZ0YlOTWoZTBcLFO a1OVkizd2ozAn25C1CfRwH7PjmhtJ6IWvAL7z0WW+Zr6XIyeDf9rZAZvennkZ3wH dO7C2kmDTTsIZ1H5vk8eOhAlFnoCwfiZetKgQ6SRzSXom+chsnKg/UqqY0LeFn7D r94I4aO3Uifb0D6NIvGIkkAbfDtMRV7Uvqi2zMnwFeBtTvC6gG8UkpApcQ/MPbDH bp6+NqR6KwiASTZrva/p27Vyq1IbuEflyrgaH/Qn77Uy3FJTky+3QLjFbBsD5ERQ L76K2vJvPMBUcCx0B9jO3AGfU6kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDPvjtgeEqOeMl1HMl2P2nbMSXBAMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wM2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAzYWRlOWMw LWNkZTEtNDdmMC05Y2QyLTRhNTdiZGRlMTRlOC8wLzMzRUY4RUQ4MUUxMkEzOUUz MjVENDczMjVEOEZEQTc2Q0M0OTcwNDAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvKgwDQYJKoZIhvcNAQELBQADggEBAI/CDfnjNZQdsv/9CIKztR2v89jrEdvQ cJdbZeHOgFsp//YjZAlqG3dUz7N0KSaq1NZSJfXlcIOKvxaYB37wNZAPa/L202Fc 8Wz3qEUZSvdhk8d/VxA6GZO1gdaAIowQA66l4H6lVFgn1U9fHmeIMe4SqHedx9AB nuwbBkOa1dVaywWulv+9whT1D2gKkyIO9I7IBQz2wibRdhOiOTCQjpIUgD3Payla 3XJiKLeGGWyGtqLs+NaTvP21I8BSpZDezCaRMQ6iGYPcmN2j+puSTuOUsimMvvrK /x6pFbL2X/XqX3vBQWzSl7Jm8Zykwd8FvS+rzlCKyQdIrgXL4ONKdvs= -----END CERTIFICATE-----Generated at Sun Apr 19 08:22:39 2026 by rpki-client