$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/57789CB78D85714C21EE6022D183A8D40AFE4063.cer File: 57789CB78D85714C21EE6022D183A8D40AFE4063.cer (raw, json) Hash identifier: KVL3eUbznXG+mRDed3qFfyYg5YzKImM9e8ByoTzjt4g= Subject key identifier: 57:78:9C:B7:8D:85:71:4C:21:EE:60:22:D1:83:A8:D4:0A:FE:40:63 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1B6BC34F8D4964331398F8C32112038EB21B5B21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/57789CB78D85714C21EE6022D183A8D40AFE4063.mft caRepository: rsync://rpki-rsync.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:59:10 +0000 Certificate not after: Sun 02 May 2027 01:04:10 +0000 Subordinate resources: IP: 103.168.188.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 05:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:6b:c3:4f:8d:49:64:33:13:98:f8:c3:21:12:03:8e:b2:1b:5b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:59:10 2026 GMT Not After : May 2 01:04:10 2027 GMT Subject: CN=57789CB78D85714C21EE6022D183A8D40AFE4063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:22:14:58:16:f8:37:1e:52:3a:d0:42:2e:d3: 16:ab:d0:8d:7e:46:8b:5c:8b:54:94:31:0f:30:4d: 7c:43:d7:cf:1e:f9:bc:b4:f3:b9:7d:e5:3c:66:b3: d8:cf:41:2d:bf:6e:da:5c:ed:73:01:f3:91:a3:f0: 49:af:81:8e:67:e0:b2:97:ef:36:31:8e:56:26:51: bf:07:0e:34:5a:94:11:e0:b1:19:d5:36:53:21:ad: c8:70:da:b0:73:92:1a:ee:50:f8:b9:5b:bc:d4:78: 23:10:46:65:6d:94:59:d1:98:8a:6c:7d:cd:d6:ba: 65:40:14:5c:4f:7d:49:8e:2e:bc:75:20:9c:4c:15: 2a:3a:de:2c:b2:7b:98:6f:d7:82:8a:d9:c0:75:d4: e4:d0:8c:7f:92:a6:c9:26:3a:50:3a:97:11:eb:dc: 43:43:61:84:28:04:79:82:91:d1:d4:0d:d0:b0:5a: 59:be:6a:6a:a4:e7:ef:9d:f2:58:bc:4b:dc:d6:25: 82:b1:32:6a:d2:6f:0f:1a:07:7b:2d:00:8e:73:22: 4e:a7:ff:46:d7:8e:6b:9e:80:06:a2:1b:db:9c:2d: 8c:b1:2a:db:c4:67:83:3a:d4:76:a3:b2:d0:d7:42: b5:0d:7d:af:11:12:b5:e9:6c:62:99:9e:1b:a6:8e: 4a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 57:78:9C:B7:8D:85:71:4C:21:EE:60:22:D1:83:A8:D4:0A:FE:40:63 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/57789CB78D85714C21EE6022D183A8D40AFE4063.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.188.0/23 Signature Algorithm: sha256WithRSAEncryption 36:3b:9e:76:c0:f8:b2:ba:b0:0b:bb:9d:1e:50:d2:5b:a4:e2: 01:7c:e4:61:96:fe:ce:c3:11:35:14:7c:0d:d0:31:df:de:47: 35:bb:e3:f9:15:38:15:69:ec:95:2c:2c:c1:45:1f:30:57:23: 9d:b1:fb:f9:c7:c8:7e:b9:63:52:b3:df:e3:c0:7c:9e:85:51: 9c:e5:18:e2:67:1d:e7:5b:88:c5:e1:e8:28:e0:7c:c7:d3:71: e1:29:c6:f5:91:67:b7:08:6d:49:fe:0f:af:f6:0c:be:ff:89: 01:38:d5:9f:68:89:66:eb:a7:d6:36:7d:12:7d:4c:00:87:b5: aa:8b:31:5d:b9:9c:ca:02:fb:13:24:dd:84:89:9f:0e:8d:ef: 6a:1b:f8:fe:b3:eb:1c:3b:98:9a:73:32:8f:19:e9:b2:b6:36: fc:3c:85:6f:30:24:e4:ad:95:3d:fe:b3:7f:fe:fb:8d:c2:b3: 40:0f:27:9d:0d:5b:ad:ad:a4:30:df:34:ec:44:77:e1:1e:ae: 35:4d:d9:d2:bc:f2:8c:97:1a:62:47:71:14:03:bd:0d:b6:7a: 4f:5a:79:89:97:bd:e4:0e:f6:40:9b:7c:3e:7f:aa:5d:c8:53: 89:2b:58:d0:9d:f6:c0:e9:fa:6b:9d:77:d6:9c:8e:cd:d4:44: ee:85:0b:3f -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUG2vDT41JZDMTmPjDIRIDjrIbWyEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTkxMFoX DTI3MDUwMjAxMDQxMFowMzExMC8GA1UEAxMoNTc3ODlDQjc4RDg1NzE0QzIxRUU2 MDIyRDE4M0E4RDQwQUZFNDA2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOwiFFgW+DceUjrQQi7TFqvQjX5Gi1yLVJQxDzBNfEPXzx75vLTzuX3lPGaz 2M9BLb9u2lztcwHzkaPwSa+BjmfgspfvNjGOViZRvwcONFqUEeCxGdU2UyGtyHDa sHOSGu5Q+LlbvNR4IxBGZW2UWdGYimx9zda6ZUAUXE99SY4uvHUgnEwVKjreLLJ7 mG/XgorZwHXU5NCMf5KmySY6UDqXEevcQ0NhhCgEeYKR0dQN0LBaWb5qaqTn753y WLxL3NYlgrEyatJvDxoHey0AjnMiTqf/RteOa56ABqIb25wtjLEq28RngzrUdqOy 0NdCtQ19rxEStelsYpmeG6aOShcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFd4nLeNhXFMIe5gItGDqNQK/kBjMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc2ZGI0Y2I4LWZhZWEtNDUzMC1iMjllLTBiN2E0YWZmYzMxNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83NmRiNGNi OC1mYWVhLTQ1MzAtYjI5ZS0wYjdhNGFmZmMzMTYvMC81Nzc4OUNCNzhEODU3MTRD MjFFRTYwMjJEMTgzQThENDBBRkU0MDYzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6i8MA0GCSqGSIb3DQEBCwUAA4IBAQA2O552wPiyurALu50eUNJbpOIBfORh lv7OwxE1FHwN0DHf3kc1u+P5FTgVaeyVLCzBRR8wVyOdsfv5x8h+uWNSs9/jwHye hVGc5RjiZx3nW4jF4ego4HzH03HhKcb1kWe3CG1J/g+v9gy+/4kBONWfaIlm66fW Nn0SfUwAh7WqizFduZzKAvsTJN2EiZ8Oje9qG/j+s+scO5iaczKPGemytjb8PIVv MCTkrZU9/rN//vuNwrNADyedDVutraQw3zTsRHfhHq41TdnSvPKMlxpiR3EUA70N tnpPWnmJl73kDvZAm3w+f6pdyFOJK1jQnfbA6fprnXfWnI7N1ETuhQs/ -----END CERTIFICATE-----Generated at Fri May 8 07:29:51 2026 by rpki-client