$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer File: 5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer (raw, json) Hash identifier: QqXUpmLYxyiuuqhP9xjag8LEinjBTU3owezlm4uvC5I= Subject key identifier: 5D:77:8C:6B:5A:83:CF:E3:42:83:BD:94:95:BB:B4:8B:E3:D5:95:63 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 62D28C4F1698C23E53D4C594BB60E841B83A5075 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:41:39 +0000 Certificate not after: Sun 02 May 2027 01:46:39 +0000 Subordinate resources: IP: 113.59.232.0/21 IP: 2400:b080::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 01:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d2:8c:4f:16:98:c2:3e:53:d4:c5:94:bb:60:e8:41:b8:3a:50:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:41:39 2026 GMT Not After : May 2 01:46:39 2027 GMT Subject: CN=5D778C6B5A83CFE34283BD9495BBB48BE3D59563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e8:fb:e6:56:de:7f:00:b7:bf:eb:f9:09:f7: b3:a3:f8:17:7c:12:2a:71:5d:ed:97:f7:4c:0f:85: b1:31:b1:93:61:1b:e0:46:a9:af:93:4e:39:4d:65: 8d:27:21:46:31:05:c5:7b:a8:f7:39:83:f8:df:60: 76:c2:57:03:de:8e:51:7a:f5:2a:00:ee:45:b6:57: 8f:38:96:ce:44:95:85:72:07:0f:0b:f7:e7:c5:66: 2f:85:ea:55:24:50:db:38:fb:72:a4:3c:5e:a0:c0: ff:b9:4e:41:d6:c9:ba:67:fc:b5:98:53:af:cd:ac: f1:dd:e4:9a:70:e2:45:aa:a0:6b:9a:0e:8a:2c:39: d9:ab:08:de:e2:24:92:47:5c:46:41:36:3d:c2:89: 44:e5:05:20:87:40:65:03:5e:a4:30:69:68:8e:cc: a6:f6:54:63:1a:22:06:7a:3e:c0:08:43:91:b3:c8: 8a:3b:bb:8f:d1:96:26:12:d0:74:1b:49:e8:18:d9: 84:ad:3c:4b:64:62:52:51:27:68:25:4d:88:23:e8: e2:71:69:c2:ba:7c:ad:a4:03:91:a0:76:bc:c6:0a: 72:11:f5:d2:53:2c:6f:03:38:c6:46:1a:52:b3:ab: 1d:07:33:6b:de:3e:ba:67:ef:0a:ac:c4:7d:80:95: c3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5D:77:8C:6B:5A:83:CF:E3:42:83:BD:94:95:BB:B4:8B:E3:D5:95:63 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 113.59.232.0/21 IPv6: 2400:b080::/32 Signature Algorithm: sha256WithRSAEncryption a1:d4:e4:0c:e6:32:ed:41:d7:ca:10:47:00:4e:e5:4b:60:93: 47:fd:bc:d8:4a:6e:db:26:14:81:37:30:32:65:e8:95:62:fe: 6a:ab:47:ed:2d:9a:ed:0b:5a:30:27:30:bd:a3:d9:5c:5c:d5: 7d:a0:56:e4:e3:2d:3e:b5:a1:77:e3:ff:42:18:55:25:cc:f7: 18:60:e9:05:ae:d0:34:33:52:78:68:5a:bf:e4:35:39:c9:c8: dc:1f:78:65:8f:ce:fa:92:37:af:f2:a4:41:53:ae:f9:50:fc: 32:fd:fd:90:08:df:d3:ed:81:ab:28:ce:30:ad:5d:4a:f6:e0: 2f:4b:fc:ad:58:6b:12:43:b1:64:91:4f:38:b6:8c:52:9e:a6: be:b5:5d:a5:a9:68:88:76:43:68:d3:72:bb:e3:78:e2:85:01: 8e:34:b2:0a:b5:62:1a:a2:45:b1:53:82:24:7c:ed:09:f0:d6: e9:d8:d2:c0:33:37:e4:f6:f2:79:1f:72:86:8d:53:af:a3:3a: 1e:53:31:11:c9:e7:08:4f:fa:a9:cd:24:9d:d7:5d:69:36:ca: a7:6a:e2:51:8a:11:44:3a:32:98:08:d8:93:6a:eb:8d:36:8a: 5f:45:29:3d:97:12:53:a5:1b:e7:bb:27:e6:a5:7a:10:f2:0c: 59:8b:6d:ba -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUYtKMTxaYwj5T1MWUu2DoQbg6UHUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDEzOVoX DTI3MDUwMjAxNDYzOVowMzExMC8GA1UEAxMoNUQ3NzhDNkI1QTgzQ0ZFMzQyODNC RDk0OTVCQkI0OEJFM0Q1OTU2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIvo++ZW3n8At7/r+Qn3s6P4F3wSKnFd7Zf3TA+FsTGxk2Eb4Eapr5NOOU1l jSchRjEFxXuo9zmD+N9gdsJXA96OUXr1KgDuRbZXjziWzkSVhXIHDwv358VmL4Xq VSRQ2zj7cqQ8XqDA/7lOQdbJumf8tZhTr82s8d3kmnDiRaqga5oOiiw52asI3uIk kkdcRkE2PcKJROUFIIdAZQNepDBpaI7MpvZUYxoiBno+wAhDkbPIiju7j9GWJhLQ dBtJ6BjZhK08S2RiUlEnaCVNiCPo4nFpwrp8raQDkaB2vMYKchH10lMsbwM4xkYa UrOrHQcza94+umfvCqzEfYCVww8CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF13jGtag8/jQoO9lJW7tIvj1ZVjMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2I2MDY3MThmLWY0YzYtNDc3NS04OTU3LTk5ZDJiZDY2NjM2My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iNjA2NzE4 Zi1mNGM2LTQ3NzUtODk1Ny05OWQyYmQ2NjYzNjMvMC81RDc3OEM2QjVBODNDRkUz NDI4M0JEOTQ5NUJCQjQ4QkUzRDU5NTYzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQDcTvoMA0EAgACMAcDBQAkALCAMA0GCSqGSIb3DQEBCwUAA4IBAQCh1OQM5jLt QdfKEEcATuVLYJNH/bzYSm7bJhSBNzAyZeiVYv5qq0ftLZrtC1owJzC9o9lcXNV9 oFbk4y0+taF34/9CGFUlzPcYYOkFrtA0M1J4aFq/5DU5ycjcH3hlj876kjev8qRB U675UPwy/f2QCN/T7YGrKM4wrV1K9uAvS/ytWGsSQ7FkkU84toxSnqa+tV2lqWiI dkNo03K743jihQGONLIKtWIaokWxU4IkfO0J8Nbp2NLAMzfk9vJ5H3KGjVOvozoe UzERyecIT/qpzSSd111pNsqnauJRihFEOjKYCNiTauuNNopfRSk9lxJTpRvnuyfm pXoQ8gxZi226 -----END CERTIFICATE-----Generated at Thu May 7 03:53:39 2026 by rpki-client