$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4C378F3C5E9E84D98D0229475208B1E382584588.cer File: 4C378F3C5E9E84D98D0229475208B1E382584588.cer (raw, json) Hash identifier: QBLtwPor3pM9j5bOXzHRdNboBsC4J7zYxfFP7JIbwU4= Subject key identifier: 4C:37:8F:3C:5E:9E:84:D9:8D:02:29:47:52:08:B1:E3:82:58:45:88 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5F887DEC465E617F7F9D1245346752DCA7BA9D0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:53:08 +0000 Certificate not after: Sun 02 May 2027 00:58:08 +0000 Subordinate resources: IP: 103.168.190.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:88:7d:ec:46:5e:61:7f:7f:9d:12:45:34:67:52:dc:a7:ba:9d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:53:08 2026 GMT Not After : May 2 00:58:08 2027 GMT Subject: CN=4C378F3C5E9E84D98D0229475208B1E382584588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c7:c1:6e:a8:15:cd:9f:24:78:66:4a:19:91: 9a:f8:e1:9a:49:11:c0:f4:7b:68:6f:1e:86:16:66: c5:d4:b7:bf:44:d0:35:50:89:7a:c0:84:ac:85:1b: 2b:22:71:bc:c1:ff:5e:26:b1:77:45:51:58:ff:74: b9:c6:b7:a2:0d:05:69:e1:f1:de:f0:35:55:82:f9: 51:1a:70:1f:f9:99:eb:d0:68:d4:c9:58:3b:bb:03: da:5c:73:ff:2b:a5:6a:97:71:38:e3:3e:13:2c:0c: ba:07:d9:f2:11:7c:03:e4:20:1d:c7:dd:67:d5:3d: 3e:54:30:04:08:8b:26:fa:a4:2b:92:47:e7:92:45: b6:4e:a0:ff:6e:a1:27:cb:b2:cd:23:d9:ef:43:50: 38:ef:d9:b2:9b:4b:33:95:93:22:9d:fa:6d:11:af: 36:11:68:2d:07:28:9f:b6:38:99:80:c7:83:87:d3: 7a:fa:4b:35:12:9e:a6:c9:5e:a6:1f:29:4a:21:11: 3d:35:d7:09:d8:15:9f:e2:ea:ca:d1:3a:bf:da:39: 42:df:2b:67:e3:ca:09:41:c2:0f:05:fe:4b:4a:84: 06:48:0b:8f:be:8a:b5:c9:29:09:dc:50:d7:36:a4: 84:5b:e9:47:4c:0c:be:ee:e3:ab:47:6a:fb:86:44: 28:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:37:8F:3C:5E:9E:84:D9:8D:02:29:47:52:08:B1:E3:82:58:45:88 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.190.0/24 Signature Algorithm: sha256WithRSAEncryption 81:56:3b:00:2b:ca:ba:5a:58:72:30:87:5c:ee:ec:78:dc:ea: 9c:42:2b:0a:5b:4f:37:d3:4e:83:12:0f:02:5c:85:45:26:2c: 64:3b:2d:75:f5:b1:d6:4b:7e:97:a0:4c:46:ed:0f:ef:ed:7c: 07:fc:e8:2a:ca:9b:10:ae:2e:5a:4e:13:ad:4d:22:71:b8:9f: 36:0b:f8:07:1f:8c:91:d7:06:33:48:4b:56:41:04:ed:3f:3c: d0:a3:b1:9f:1b:5f:67:c0:ce:8d:90:e4:6d:b3:52:33:cb:6a: 51:6c:64:d8:9e:91:4d:a4:67:d6:8c:9f:b1:64:70:04:e0:6e: b7:21:51:ee:ce:09:62:37:66:8f:50:24:49:75:d4:32:a0:4d: d3:8a:e4:e1:40:29:e3:62:88:7b:a5:97:a7:89:ee:31:5e:ed: 4e:d6:fa:fd:49:67:c7:b1:1f:ba:ca:ab:94:96:74:71:3e:b9: 2f:50:16:80:e0:1a:70:81:ac:31:22:ee:5b:8e:25:e8:3c:51: 84:50:4a:40:79:ff:3a:3e:7b:f6:fb:64:c2:84:47:74:bb:11: 29:f8:db:10:49:c4:7e:91:c4:e0:52:34:c3:fe:1e:fd:5b:b5: bc:ba:d9:c0:91:c6:8a:db:c7:92:4c:d2:42:cf:33:c2:47:0f: 33:af:5a:9e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUX4h97EZeYX9/nRJFNGdS3Ke6nQ8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTMwOFoX DTI3MDUwMjAwNTgwOFowMzExMC8GA1UEAxMoNEMzNzhGM0M1RTlFODREOThEMDIy OTQ3NTIwOEIxRTM4MjU4NDU4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKHHwW6oFc2fJHhmShmRmvjhmkkRwPR7aG8ehhZmxdS3v0TQNVCJesCErIUb KyJxvMH/Xiaxd0VRWP90uca3og0FaeHx3vA1VYL5URpwH/mZ69Bo1MlYO7sD2lxz /yulapdxOOM+EywMugfZ8hF8A+QgHcfdZ9U9PlQwBAiLJvqkK5JH55JFtk6g/26h J8uyzSPZ70NQOO/ZsptLM5WTIp36bRGvNhFoLQcon7Y4mYDHg4fTevpLNRKepsle ph8pSiERPTXXCdgVn+LqytE6v9o5Qt8rZ+PKCUHCDwX+S0qEBkgLj76KtckpCdxQ 1zakhFvpR0wMvu7jq0dq+4ZEKIECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEw3jzxenoTZjQIpR1IIseOCWEWIMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZlOWIwYmFkLTY2YjktNGYyOC1hN2M1LWU5YTlmZTEyMGFkNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82ZTliMGJh ZC02NmI5LTRmMjgtYTdjNS1lOWE5ZmUxMjBhZDcvMC80QzM3OEYzQzVFOUU4NEQ5 OEQwMjI5NDc1MjA4QjFFMzgyNTg0NTg4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6i+MA0GCSqGSIb3DQEBCwUAA4IBAQCBVjsAK8q6WlhyMIdc7ux43OqcQisK W083006DEg8CXIVFJixkOy119bHWS36XoExG7Q/v7XwH/OgqypsQri5aThOtTSJx uJ82C/gHH4yR1wYzSEtWQQTtPzzQo7GfG19nwM6NkORts1Izy2pRbGTYnpFNpGfW jJ+xZHAE4G63IVHuzgliN2aPUCRJddQyoE3TiuThQCnjYoh7pZenie4xXu1O1vr9 SWfHsR+6yquUlnRxPrkvUBaA4BpwgawxIu5bjiXoPFGEUEpAef86Pnv2+2TChEd0 uxEp+NsQScR+kcTgUjTD/h79W7W8utnAkcaK28eSTNJCzzPCRw8zr1qe -----END CERTIFICATE-----Generated at Wed May 13 00:34:07 2026 by rpki-client