$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/378918D305E0BE46A36AC59393759E41074DA43B.cer File: 378918D305E0BE46A36AC59393759E41074DA43B.cer (raw, json) Hash identifier: 28VAkpXWZRFRvJs2cQhahuvqz3n3QwYGTOsk1V3KoqY= Subject key identifier: 37:89:18:D3:05:E0:BE:46:A3:6A:C5:93:93:75:9E:41:07:4D:A4:3B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 72CB5C802F9AFE5208AA80E8B4752ED89A881E98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/378918D305E0BE46A36AC59393759E41074DA43B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:17:15 +0000 Certificate not after: Sun 02 May 2027 01:22:15 +0000 Subordinate resources: IP: 103.170.196.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 05:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:cb:5c:80:2f:9a:fe:52:08:aa:80:e8:b4:75:2e:d8:9a:88:1e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:17:15 2026 GMT Not After : May 2 01:22:15 2027 GMT Subject: CN=378918D305E0BE46A36AC59393759E41074DA43B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d8:f3:53:2e:24:67:15:f1:6a:55:dd:b9:33: 61:37:1e:6c:bb:88:76:f6:f2:3c:ef:31:ba:f2:d4: 27:58:5e:20:43:8d:0f:42:b3:11:e8:4b:d5:4d:a1: e8:35:65:72:27:4e:15:e2:54:e1:df:ea:5f:80:df: 07:83:8e:fd:a5:ff:a7:89:f9:a7:d0:29:d9:aa:1a: b0:57:72:06:0b:c2:db:f0:77:c8:42:34:90:f0:f9: 41:60:81:b4:94:73:e1:64:9f:57:89:3e:0d:af:a9: 0c:03:25:09:e2:53:bf:22:41:4e:4f:c5:ff:53:f6: c6:0c:c0:7b:f5:9d:e7:00:5e:3a:49:08:b0:c6:78: b0:1d:2e:79:12:5d:80:36:05:47:6b:02:dc:11:2e: 00:c3:15:61:28:72:5b:20:4a:6f:19:d6:56:9b:ce: c0:97:e8:eb:39:91:c5:72:c8:2e:fb:f4:af:15:08: d7:32:c4:a6:c1:09:3e:b5:a8:38:25:dc:d3:d0:f8: 62:95:f7:df:ba:d5:89:35:1d:0d:19:c2:e5:24:02: fb:12:7f:95:8b:60:59:20:58:5e:33:ec:0e:c2:ac: 8e:f0:cf:f3:83:c9:0a:c0:06:3c:08:ac:52:8c:87: ee:a9:c3:8f:84:42:56:ac:a3:b8:5b:35:7b:94:9f: 37:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:89:18:D3:05:E0:BE:46:A3:6A:C5:93:93:75:9E:41:07:4D:A4:3B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/378918D305E0BE46A36AC59393759E41074DA43B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.196.0/23 Signature Algorithm: sha256WithRSAEncryption 30:68:10:0d:6e:e4:71:d7:71:a5:7d:9a:7f:e6:94:85:e1:3f: 78:fa:77:87:3a:3c:d2:73:69:a1:ba:75:f7:e3:d8:16:7f:e4: 83:71:db:bf:3a:33:3f:bc:2f:c0:7f:78:e9:e0:50:aa:80:e5: 28:80:01:4f:cb:7a:5e:98:d9:c6:b4:85:72:9b:5b:72:b3:45: 1a:8d:1b:7c:d4:c0:c0:26:1d:2e:fe:6d:95:12:cf:98:18:b8: 8e:6e:92:97:34:8a:fa:cb:9d:72:bf:d3:94:4b:49:28:d7:13: 36:8b:82:d0:de:de:71:a4:4c:ac:dd:89:3d:7a:f5:f0:7b:83: ec:16:e9:34:12:65:df:2d:09:28:f5:ed:80:a7:42:31:7b:9a: 39:97:7e:e9:cb:0c:19:4e:df:64:e8:7f:67:67:14:c8:39:6c: e4:f6:4c:40:fc:4c:7b:e9:7d:28:43:37:74:1a:d1:79:35:10: a9:df:61:8a:42:8e:87:2e:d7:d0:de:b8:69:35:9f:92:96:95: 10:1c:af:41:43:24:e2:b8:69:47:b2:cd:f7:9c:20:6f:69:38: b3:06:81:a0:39:c8:e3:03:18:dc:27:0f:03:44:42:c3:4e:78: c9:f9:e2:8a:a4:27:db:9a:97:48:03:bc:7a:23:cb:82:49:46: e2:16:e3:96 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUcstcgC+a/lIIqoDotHUu2JqIHpgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTcxNVoX DTI3MDUwMjAxMjIxNVowMzExMC8GA1UEAxMoMzc4OTE4RDMwNUUwQkU0NkEzNkFD NTkzOTM3NTlFNDEwNzREQTQzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKbY81MuJGcV8WpV3bkzYTcebLuIdvbyPO8xuvLUJ1heIEOND0KzEehL1U2h 6DVlcidOFeJU4d/qX4DfB4OO/aX/p4n5p9Ap2aoasFdyBgvC2/B3yEI0kPD5QWCB tJRz4WSfV4k+Da+pDAMlCeJTvyJBTk/F/1P2xgzAe/Wd5wBeOkkIsMZ4sB0ueRJd gDYFR2sC3BEuAMMVYShyWyBKbxnWVpvOwJfo6zmRxXLILvv0rxUI1zLEpsEJPrWo OCXc09D4YpX337rViTUdDRnC5SQC+xJ/lYtgWSBYXjPsDsKsjvDP84PJCsAGPAis UoyH7qnDj4RCVqyjuFs1e5SfN8MCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDeJGNMF4L5Go2rFk5N1nkEHTaQ7MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzkxMWE3NDZlLTUzZTMtNGMyMy1iOWU1LWY2NGYzZWYzZDEzNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85MTFhNzQ2 ZS01M2UzLTRjMjMtYjllNS1mNjRmM2VmM2QxMzYvMC8zNzg5MThEMzA1RTBCRTQ2 QTM2QUM1OTM5Mzc1OUU0MTA3NERBNDNCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6rEMA0GCSqGSIb3DQEBCwUAA4IBAQAwaBANbuRx13GlfZp/5pSF4T94+neH OjzSc2mhunX349gWf+SDcdu/OjM/vC/Af3jp4FCqgOUogAFPy3pemNnGtIVym1ty s0UajRt81MDAJh0u/m2VEs+YGLiObpKXNIr6y51yv9OUS0ko1xM2i4LQ3t5xpEys 3Yk9evXwe4PsFuk0EmXfLQko9e2Ap0Ixe5o5l37pywwZTt9k6H9nZxTIOWzk9kxA /Ex76X0oQzd0GtF5NRCp32GKQo6HLtfQ3rhpNZ+SlpUQHK9BQyTiuGlHss33nCBv aTizBoGgOcjjAxjcJw8DRELDTnjJ+eKKpCfbmpdIA7x6I8uCSUbiFuOW -----END CERTIFICATE-----Generated at Fri May 8 07:34:32 2026 by rpki-client