$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/156E44F3A5D74600196013DD5BB14AA93BEA6A46.cer File: 156E44F3A5D74600196013DD5BB14AA93BEA6A46.cer (raw, json) Hash identifier: 4DXywlFHRHUTn/JPqBRtfScvigtEl5DV0DwOKf3hhG0= Subject key identifier: 15:6E:44:F3:A5:D7:46:00:19:60:13:DD:5B:B1:4A:A9:3B:EA:6A:46 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 173473345FC1016F2F4781888F5E487DE9319C1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft caRepository: rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:04:19 +0000 Certificate not after: Sun 02 May 2027 02:09:19 +0000 Subordinate resources: IP: 103.178.218.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:34:73:34:5f:c1:01:6f:2f:47:81:88:8f:5e:48:7d:e9:31:9c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:04:19 2026 GMT Not After : May 2 02:09:19 2027 GMT Subject: CN=156E44F3A5D74600196013DD5BB14AA93BEA6A46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:01:4d:75:ec:54:54:0c:79:55:5c:b7:fc: 89:d9:31:96:b5:80:3b:b7:ba:35:9a:44:f2:08:68: 1b:0a:18:aa:29:e6:df:61:a2:a3:d5:65:ec:c3:cd: 5e:25:f0:2b:c3:cd:a6:55:93:0f:77:2e:7a:c5:84: d4:54:23:81:de:a3:09:eb:95:6a:58:3c:97:39:22: 79:5f:c2:8e:6e:e7:9f:10:9d:bd:73:d3:68:c4:53: 21:55:9d:ea:29:d7:00:d5:bb:88:c9:fe:5d:8a:17: d5:93:ef:a6:06:df:3a:d7:d2:ef:ce:11:1d:53:b8: af:4e:0c:6d:96:83:61:97:d0:ce:6c:32:38:f7:51: 8a:0c:99:b0:9e:68:90:70:38:e1:ff:0e:26:3a:5c: ec:53:00:a2:75:bb:4a:9c:92:86:bb:29:1d:ce:f7: f4:0a:2f:91:90:20:7d:3d:c2:2d:25:8a:e8:a8:93: 22:69:d4:31:b2:ec:a6:26:e4:36:cf:c0:b5:d7:38: b2:5b:73:dd:0f:3f:68:e4:be:ff:15:9b:ab:db:3c: 3f:16:39:55:22:0e:e3:05:8e:cb:44:dc:e0:8a:ea: 8d:98:a3:96:0d:4e:4c:f6:70:21:9d:b8:80:63:a6: ea:00:ac:64:7f:9b:44:ad:94:5d:c2:cd:7d:df:5c: 83:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 15:6E:44:F3:A5:D7:46:00:19:60:13:DD:5B:B1:4A:A9:3B:EA:6A:46 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.218.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:53:49:83:24:c4:75:2b:79:19:18:b7:0e:e4:c6:56:ce:ec: de:a5:24:83:e9:c8:2e:eb:12:a9:16:8e:82:36:d3:40:66:80: 41:98:1e:fb:ff:a7:91:93:33:c1:96:1c:3e:71:93:34:07:42: 78:12:87:7b:eb:eb:19:c3:e2:74:b4:36:db:f1:cb:62:0e:8b: 0e:16:f4:3f:51:6f:8c:75:b9:ba:91:75:1e:bb:3e:25:70:73: 53:6f:b8:ad:ba:1b:24:47:50:21:d9:ac:a0:32:5a:60:28:f0: 30:ba:cd:9b:33:17:d7:7d:de:6e:53:f3:52:04:ad:dc:52:c0: dc:e8:37:0e:ef:b3:61:c2:62:75:27:7a:e7:61:c5:52:d9:0b: a6:05:c4:27:af:9b:29:69:05:26:9c:6c:14:93:02:ab:d9:de: 75:82:48:02:83:c2:7d:eb:e1:41:67:2d:2c:74:d6:41:1d:bb: ce:3b:6e:5b:05:34:08:14:c5:41:31:2e:13:0e:fe:8a:c8:54: ab:02:8e:78:22:d2:d5:18:99:ec:20:d1:57:da:94:e4:1c:04: bc:cd:56:94:e0:72:2d:1a:08:e1:3a:25:ef:18:49:aa:f0:4f: f4:50:e5:5c:37:f1:0c:a9:ad:6d:b2:65:48:0b:18:48:c0:b9: 72:4a:d9:93 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUFzRzNF/BAW8vR4GIj15IfekxnB8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDQxOVoX DTI3MDUwMjAyMDkxOVowMzExMC8GA1UEAxMoMTU2RTQ0RjNBNUQ3NDYwMDE5NjAx M0RENUJCMTRBQTkzQkVBNkE0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALkDAU117FRUDHlVXLf8idkxlrWAO7e6NZpE8ghoGwoYqinm32Gio9Vl7MPN XiXwK8PNplWTD3cuesWE1FQjgd6jCeuValg8lzkieV/Cjm7nnxCdvXPTaMRTIVWd 6inXANW7iMn+XYoX1ZPvpgbfOtfS784RHVO4r04MbZaDYZfQzmwyOPdRigyZsJ5o kHA44f8OJjpc7FMAonW7SpyShrspHc739AovkZAgfT3CLSWK6KiTImnUMbLspibk Ns/Atdc4sltz3Q8/aOS+/xWbq9s8PxY5VSIO4wWOy0Tc4IrqjZijlg1OTPZwIZ24 gGOm6gCsZH+bRK2UXcLNfd9cg9ECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBVuRPOl10YAGWAT3VuxSqk76mpGMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RkMDI5YzIyLTIyMTUtNDhjMS05YWI2LWJiMTNjMDFiNDNiMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kZDAyOWMy Mi0yMjE1LTQ4YzEtOWFiNi1iYjEzYzAxYjQzYjEvMC8xNTZFNDRGM0E1RDc0NjAw MTk2MDEzREQ1QkIxNEFBOTNCRUE2QTQ2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ7LaMA0GCSqGSIb3DQEBCwUAA4IBAQAfU0mDJMR1K3kZGLcO5MZWzuzepSSD 6cgu6xKpFo6CNtNAZoBBmB77/6eRkzPBlhw+cZM0B0J4Eod76+sZw+J0tDbb8cti DosOFvQ/UW+Mdbm6kXUeuz4lcHNTb7ituhskR1Ah2aygMlpgKPAwus2bMxfXfd5u U/NSBK3cUsDc6DcO77NhwmJ1J3rnYcVS2QumBcQnr5spaQUmnGwUkwKr2d51gkgC g8J96+FBZy0sdNZBHbvOO25bBTQIFMVBMS4TDv6KyFSrAo54ItLVGJnsINFX2pTk HAS8zVaU4HItGgjhOiXvGEmq8E/0UOVcN/EMqa1tsmVICxhIwLlyStmT -----END CERTIFICATE-----Generated at Tue May 12 22:50:02 2026 by rpki-client