$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/378A3CDFC885FF682AB4268D41AC4081FB774095.cer File: 378A3CDFC885FF682AB4268D41AC4081FB774095.cer (raw, json) Hash identifier: i3d8iElx4mS1V+hZYvLzQh+LGaPg4LIg+Xc6OUzyNZY= Subject key identifier: 37:8A:3C:DF:C8:85:FF:68:2A:B4:26:8D:41:AC:40:81:FB:77:40:95 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2466A1B5DCC39C9C33CC2AE86BF1B9F6B0130C5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.mft caRepository: rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:05:05 +0000 Certificate not after: Sun 02 May 2027 00:10:05 +0000 Subordinate resources: AS: 152438 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:66:a1:b5:dc:c3:9c:9c:33:cc:2a:e8:6b:f1:b9:f6:b0:13:0c:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:05:05 2026 GMT Not After : May 2 00:10:05 2027 GMT Subject: CN=378A3CDFC885FF682AB4268D41AC4081FB774095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6b:f2:f1:5f:90:f4:31:f0:d6:4b:17:bc:6e: 35:98:9a:c6:81:0d:aa:10:53:06:b9:5d:65:e2:d3: 36:e8:fb:69:d9:ca:48:f9:cc:03:cd:54:8d:21:21: 4f:3f:b5:a5:a1:f2:04:bc:88:ee:64:41:54:af:21: e8:9e:36:8b:89:1f:76:26:dd:9a:f0:a7:8d:34:11: 03:9d:5d:8d:13:07:e3:4c:9d:69:90:16:d4:f8:cc: e1:ce:4e:58:c6:c2:b1:a9:81:5f:a4:66:86:6c:b6: de:1f:ba:7d:0f:dc:6c:b4:7b:1b:54:a2:24:78:10: 4e:fc:a2:f4:b3:cc:73:ed:a2:63:be:4f:c5:c3:44: 1e:5b:53:eb:9e:b3:a3:bd:0f:74:20:59:a1:6f:a8: f2:ef:7a:cc:0d:b1:eb:1d:53:c7:c8:9f:c0:8c:81: 07:27:27:0c:35:fc:2e:d5:4b:b5:5e:94:21:b9:51: d5:0b:d3:81:bf:88:bf:49:93:35:2d:43:32:a3:c6: b2:82:fe:43:46:b0:30:1a:a2:43:7f:bf:75:fb:a5: ca:d3:f3:17:b8:51:21:5b:6e:f7:5d:16:28:8e:46: ed:15:ce:71:7f:ff:2c:7a:33:42:b1:93:d3:af:56: 59:da:4e:a7:c3:7b:ed:b1:21:f5:09:b1:8b:d0:9f: d3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:8A:3C:DF:C8:85:FF:68:2A:B4:26:8D:41:AC:40:81:FB:77:40:95 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 152438 Signature Algorithm: sha256WithRSAEncryption 1b:bd:25:ab:09:9e:aa:1c:6c:ff:79:f6:8c:34:e8:44:4a:7b: 3a:8b:85:1c:40:63:e2:d2:bc:49:b9:51:a3:09:f7:c5:91:37: 32:d6:8a:dd:73:39:ea:96:93:d6:53:de:65:31:9f:bd:74:8d: 20:74:b4:8f:0b:59:31:45:bc:41:7c:1f:dd:d5:78:b1:ff:6a: b4:d3:16:b4:62:3d:d0:9c:eb:46:31:75:50:01:b9:19:c8:60: 6e:bb:b3:a9:dd:41:f7:9f:8a:09:ef:8d:86:48:54:fa:fe:4d: 12:78:f4:1d:d0:d8:6d:99:20:1f:bb:7b:8b:80:d7:9e:3b:7e: 3e:47:c0:37:6b:40:f9:eb:5a:cf:66:90:1a:1d:ff:2d:5a:70: 1f:49:0d:72:9f:bc:91:9a:61:48:a2:3d:c4:17:83:16:de:05: 51:ee:0b:39:9b:72:8a:81:1f:33:fb:78:dc:fc:52:90:6a:aa: 90:b6:d2:1c:1b:ad:5c:cd:fb:f4:1f:bd:9f:5c:3f:39:b7:df: 07:cc:45:56:10:c3:3d:98:27:f7:f9:6c:60:fa:22:8a:90:cf: 07:6a:a1:e9:c4:20:b1:1e:de:bf:22:35:07:b7:c3:64:fe:5f: 3d:ae:29:70:34:00:4d:37:36:78:19:25:80:4f:6b:46:05:92: e3:42:d3:09 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgIUJGahtdzDnJwzzCroa/G59rATDF4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDUwNVoX DTI3MDUwMjAwMTAwNVowMzExMC8GA1UEAxMoMzc4QTNDREZDODg1RkY2ODJBQjQy NjhENDFBQzQwODFGQjc3NDA5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZr8vFfkPQx8NZLF7xuNZiaxoENqhBTBrldZeLTNuj7adnKSPnMA81UjSEh Tz+1paHyBLyI7mRBVK8h6J42i4kfdibdmvCnjTQRA51djRMH40ydaZAW1PjM4c5O WMbCsamBX6Rmhmy23h+6fQ/cbLR7G1SiJHgQTvyi9LPMc+2iY75PxcNEHltT656z o70PdCBZoW+o8u96zA2x6x1Tx8ifwIyBBycnDDX8LtVLtV6UIblR1QvTgb+Iv0mT NS1DMqPGsoL+Q0awMBqiQ3+/dfulytPzF7hRIVtu910WKI5G7RXOcX//LHozQrGT 069WWdpOp8N77bEh9Qmxi9Cf02sCAwEAAaOCArQwggKwMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDeKPN/Ihf9oKrQmjUGsQIH7d0CVMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzI2ZmE5NTg0LTZmOTctNDA0MS05YzhkLThiMzk1OWU0ZjliMy8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yNmZhOTU4 NC02Zjk3LTQwNDEtOWM4ZC04YjM5NTllNGY5YjMvMS8zNzhBM0NERkM4ODVGRjY4 MkFCNDI2OEQ0MUFDNDA4MUZCNzc0MDk1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJT djANBgkqhkiG9w0BAQsFAAOCAQEAG70lqwmeqhxs/3n2jDToREp7OouFHEBj4tK8 SblRown3xZE3MtaK3XM56paT1lPeZTGfvXSNIHS0jwtZMUW8QXwf3dV4sf9qtNMW tGI90JzrRjF1UAG5Gchgbruzqd1B95+KCe+NhkhU+v5NEnj0HdDYbZkgH7t7i4DX njt+PkfAN2tA+etaz2aQGh3/LVpwH0kNcp+8kZphSKI9xBeDFt4FUe4LOZtyioEf M/t43PxSkGqqkLbSHButXM379B+9n1w/ObffB8xFVhDDPZgn9/lsYPoiipDPB2qh 6cQgsR7evyI1B7fDZP5fPa4pcDQATTc2eBklgE9rRgWS40LTCQ== -----END CERTIFICATE-----Generated at Tue May 12 22:52:52 2026 by rpki-client