$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/357778A786AA1E6854673B0A6AAAA40B85254E94.cer File: 357778A786AA1E6854673B0A6AAAA40B85254E94.cer (raw, json) Hash identifier: xCSm3Uj0G40FhqxfUASrgYWts0NnnsDYHfhsk3I8HrE= Subject key identifier: 35:77:78:A7:86:AA:1E:68:54:67:3B:0A:6A:AA:A4:0B:85:25:4E:94 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4689DCBCB759DB5DD26471C1678EE671C4226827 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:01:23 +0000 Certificate not after: Sun 02 May 2027 01:06:23 +0000 Subordinate resources: IP: 103.174.174.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:89:dc:bc:b7:59:db:5d:d2:64:71:c1:67:8e:e6:71:c4:22:68:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:01:23 2026 GMT Not After : May 2 01:06:23 2027 GMT Subject: CN=357778A786AA1E6854673B0A6AAAA40B85254E94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:89:30:ab:ab:ab:78:dc:59:bf:8f:44:a0:fd: 15:d2:2f:71:aa:22:0e:9c:5c:7b:ba:0b:17:02:e8: 04:13:b5:01:ca:9d:b6:5f:f9:b6:42:48:bd:b3:28: 46:e9:65:db:02:06:0e:e9:55:f9:08:57:e3:f5:db: cf:04:e6:a9:7f:94:d6:2f:13:6c:56:bd:7e:4b:7f: 83:3e:42:bf:29:0a:d6:6e:20:52:2f:65:81:28:ef: 44:39:68:fe:e1:81:cc:e2:82:16:28:27:be:2b:53: 83:3c:87:c5:96:ec:63:3c:b1:8f:72:fa:d0:8c:d3: 84:8c:2a:25:86:02:66:05:54:8b:d4:b5:39:27:d0: bc:ca:67:b5:78:3b:11:b9:72:3d:20:4a:38:1d:dc: b6:03:27:53:e3:24:8c:c2:61:57:91:f0:8f:6e:40: 87:c0:db:cf:29:51:5f:1e:1c:bd:ab:a5:88:7c:7a: 58:ef:52:2c:36:b1:23:55:e7:32:6b:cd:e0:b6:9c: f7:96:ed:0d:27:79:cc:45:91:94:4e:55:11:41:f1: 52:91:91:15:10:72:d6:d0:82:81:09:62:74:0d:61: d9:da:1e:44:fe:5d:36:99:e7:7d:bc:aa:03:72:19: 58:58:45:35:f7:42:86:92:13:db:aa:88:51:02:71: 27:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:77:78:A7:86:AA:1E:68:54:67:3B:0A:6A:AA:A4:0B:85:25:4E:94 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.174.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:20:e1:cf:3e:d0:a0:30:a7:68:b4:5a:4b:16:22:8e:0e:1b: 2b:99:bf:22:d0:bd:09:f1:5a:38:0d:b6:71:f4:4b:6f:1d:54: 7b:39:8e:e1:88:84:bf:2c:d7:6f:83:2b:e9:03:d8:e0:ee:1a: 09:eb:8d:4c:d9:90:5a:88:14:a2:61:22:51:5b:33:6f:d6:ef: cd:d7:fd:2c:9c:a1:fc:b0:93:47:05:6e:fa:41:f3:5a:bd:fd: 0c:a8:58:72:ba:e1:4b:c3:72:f5:c9:9f:f5:45:91:ba:22:59: 01:0b:4c:80:8c:cd:f4:48:2a:57:b1:60:87:8d:2f:aa:d5:26: 1c:61:3a:c4:ce:23:d0:b0:ca:58:1f:c7:44:bc:93:26:5f:bc: a9:a3:62:d1:91:60:28:71:64:8a:09:45:da:93:b9:51:fb:44: 95:48:a8:c6:f3:42:a2:41:10:b0:7c:9c:f0:45:e5:dd:3e:38: c7:17:24:93:a9:bf:67:8f:b6:24:e0:c9:aa:d1:74:27:2d:4c: 1d:e3:52:d5:c9:67:a6:21:78:15:f8:93:9d:c0:9d:5c:ab:c8: 07:b4:3c:70:7b:23:4e:1f:aa:fb:48:a4:2d:c2:05:6e:91:76: 81:72:92:3c:99:58:55:fc:a5:14:3f:7c:34:3c:b4:c8:06:10: ec:ad:6f:41 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIURoncvLdZ213SZHHBZ47mccQiaCcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDEyM1oX DTI3MDUwMjAxMDYyM1owMzExMC8GA1UEAxMoMzU3Nzc4QTc4NkFBMUU2ODU0Njcz QjBBNkFBQUE0MEI4NTI1NEU5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOmJMKurq3jcWb+PRKD9FdIvcaoiDpxce7oLFwLoBBO1Acqdtl/5tkJIvbMo Rull2wIGDulV+QhX4/XbzwTmqX+U1i8TbFa9fkt/gz5CvykK1m4gUi9lgSjvRDlo /uGBzOKCFignvitTgzyHxZbsYzyxj3L60IzThIwqJYYCZgVUi9S1OSfQvMpntXg7 EblyPSBKOB3ctgMnU+MkjMJhV5Hwj25Ah8DbzylRXx4cvauliHx6WO9SLDaxI1Xn MmvN4Lac95btDSd5zEWRlE5VEUHxUpGRFRBy1tCCgQlidA1h2doeRP5dNpnnfbyq A3IZWFhFNfdChpIT26qIUQJxJ6UCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDV3eKeGqh5oVGc7CmqqpAuFJU6UMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdhNzBkNDRlLTBmNzAtNDVhMy1hZjA0LTgxZjQyOWRiM2E1ZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83YTcwZDQ0 ZS0wZjcwLTQ1YTMtYWYwNC04MWY0MjlkYjNhNWQvMC8zNTc3NzhBNzg2QUExRTY4 NTQ2NzNCMEE2QUFBQTQwQjg1MjU0RTk0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ66uMA0GCSqGSIb3DQEBCwUAA4IBAQB/IOHPPtCgMKdotFpLFiKODhsrmb8i 0L0J8Vo4DbZx9EtvHVR7OY7hiIS/LNdvgyvpA9jg7hoJ641M2ZBaiBSiYSJRWzNv 1u/N1/0snKH8sJNHBW76QfNavf0MqFhyuuFLw3L1yZ/1RZG6IlkBC0yAjM30SCpX sWCHjS+q1SYcYTrEziPQsMpYH8dEvJMmX7ypo2LRkWAocWSKCUXak7lR+0SVSKjG 80KiQRCwfJzwReXdPjjHFySTqb9nj7Yk4Mmq0XQnLUwd41LVyWemIXgV+JOdwJ1c q8gHtDxweyNOH6r7SKQtwgVukXaBcpI8mVhV/KUUP3w0PLTIBhDsrW9B -----END CERTIFICATE-----Generated at Wed May 13 00:53:56 2026 by rpki-client