$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer File: 678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer (raw, json) Hash identifier: 35Ql5KP/IP5YyXR73GzBq1OH11fnVfqQYOV3IZzZXoE= Subject key identifier: 67:8D:C4:E5:CD:EE:38:E9:2F:16:4E:31:CB:CF:1D:E2:81:E1:1F:78 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4545080D7E34D9B8195F99E1E1323FBC9B386395 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:39:07 +0000 Certificate not after: Sun 02 May 2027 01:44:07 +0000 Subordinate resources: IP: 103.187.162.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:45:08:0d:7e:34:d9:b8:19:5f:99:e1:e1:32:3f:bc:9b:38:63:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:39:07 2026 GMT Not After : May 2 01:44:07 2027 GMT Subject: CN=678DC4E5CDEE38E92F164E31CBCF1DE281E11F78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1c:f9:c5:f2:6d:bd:f0:0b:e6:4d:47:ec:55: c1:fe:f7:1c:25:51:05:06:4d:24:2a:d0:9c:c1:b9: 3d:b5:9f:7b:40:32:e9:8e:3d:6b:ab:b2:8f:25:48: a4:90:87:33:e2:a0:7c:65:11:0e:0d:03:87:59:98: 77:ad:af:c5:49:16:0c:e3:50:54:f9:0d:cf:bc:9f: 07:8f:13:91:3b:16:44:16:f1:28:c2:5b:1c:5e:a0: 77:d9:41:93:1b:bb:7e:40:b2:57:f3:b3:c8:b9:8f: 38:9c:80:e4:82:94:4f:37:38:c0:66:51:4c:3a:e1: 40:fc:3f:bb:bb:e5:8a:f3:88:27:a6:07:dd:8c:a5: c0:00:bc:03:4e:73:2d:08:e9:3a:d8:39:01:38:a0: fd:b4:17:ed:53:9e:12:08:d1:6b:8f:9d:02:a8:cb: e9:e0:ea:f9:c0:74:06:d3:d9:d5:ae:47:9f:63:b4: 25:f0:e1:86:79:8a:7e:25:a6:c9:fa:ec:b8:47:cd: fb:8c:fa:ea:11:f5:9e:27:08:3e:46:f6:3a:0c:4f: 57:28:a6:60:b1:0b:9a:eb:99:fe:c1:fb:a4:2f:16: 2a:01:e4:31:96:5c:75:ae:c9:e8:ed:30:99:95:1c: ea:72:80:42:63:63:72:c6:71:4a:82:9a:2b:b6:e0: 78:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 67:8D:C4:E5:CD:EE:38:E9:2F:16:4E:31:CB:CF:1D:E2:81:E1:1F:78 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.187.162.0/23 Signature Algorithm: sha256WithRSAEncryption a5:bf:75:00:49:ed:00:c8:17:b8:ad:9b:d8:fd:18:c5:be:e8: 7c:3a:14:2a:2c:16:d8:ab:64:fc:91:e9:b3:67:e9:a0:83:97: 93:ed:05:43:64:b2:79:2f:a7:97:ee:26:3e:e3:4d:b8:e8:ca: 12:8c:a3:e5:25:fe:5c:6c:bd:6b:cd:81:dd:0a:22:46:63:3f: 3e:ad:73:86:d6:f9:a2:5b:e4:b9:86:36:83:70:ba:c0:f3:0f: ec:e3:42:a2:55:5c:3e:41:33:0a:ed:c6:8f:5b:42:e5:41:86: 71:e6:08:7a:51:c3:8f:80:df:56:6f:c8:52:be:f4:3d:db:c9: 4f:9d:5c:25:e6:37:b3:3c:6e:80:31:ba:ac:43:88:a5:fd:ab: 7b:b7:d9:c3:11:d7:a2:46:29:aa:10:df:bd:ef:44:dc:a0:cb: bc:21:01:41:52:e4:fb:2c:37:a3:e0:44:15:3c:3b:23:f1:43: 30:e0:21:e6:8c:40:0e:b0:9f:ed:f4:42:18:a2:34:a2:7d:43: 40:8f:70:8c:a2:49:3c:b1:cb:b5:de:9f:8c:05:5c:81:b9:2d: c5:97:04:88:42:35:59:c2:e8:34:16:e1:7c:7c:92:2e:6d:cf: 1f:51:31:d7:11:fb:b3:25:f0:fb:ac:86:58:62:10:e2:f4:fa: c4:e8:6a:e8 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIURUUIDX402bgZX5nh4TI/vJs4Y5UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzkwN1oX DTI3MDUwMjAxNDQwN1owMzExMC8GA1UEAxMoNjc4REM0RTVDREVFMzhFOTJGMTY0 RTMxQ0JDRjFERTI4MUUxMUY3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL8c+cXybb3wC+ZNR+xVwf73HCVRBQZNJCrQnMG5PbWfe0Ay6Y49a6uyjyVI pJCHM+KgfGURDg0Dh1mYd62vxUkWDONQVPkNz7yfB48TkTsWRBbxKMJbHF6gd9lB kxu7fkCyV/OzyLmPOJyA5IKUTzc4wGZRTDrhQPw/u7vlivOIJ6YH3YylwAC8A05z LQjpOtg5ATig/bQX7VOeEgjRa4+dAqjL6eDq+cB0BtPZ1a5Hn2O0JfDhhnmKfiWm yfrsuEfN+4z66hH1nicIPkb2OgxPVyimYLELmuuZ/sH7pC8WKgHkMZZcda7J6O0w mZUc6nKAQmNjcsZxSoKaK7bgeNUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGeNxOXN7jjpLxZOMcvPHeKB4R94MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2IyNWM3ZTFkLTgyZTgtNDEwMC1iNDM1LTk5NTQyNzJmYjdhOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iMjVjN2Ux ZC04MmU4LTQxMDAtYjQzNS05OTU0MjcyZmI3YTgvMC82NzhEQzRFNUNERUUzOEU5 MkYxNjRFMzFDQkNGMURFMjgxRTExRjc4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7uiMA0GCSqGSIb3DQEBCwUAA4IBAQClv3UASe0AyBe4rZvY/RjFvuh8OhQq LBbYq2T8kemzZ+mgg5eT7QVDZLJ5L6eX7iY+40246MoSjKPlJf5cbL1rzYHdCiJG Yz8+rXOG1vmiW+S5hjaDcLrA8w/s40KiVVw+QTMK7caPW0LlQYZx5gh6UcOPgN9W b8hSvvQ928lPnVwl5jezPG6AMbqsQ4il/at7t9nDEdeiRimqEN+970TcoMu8IQFB UuT7LDej4EQVPDsj8UMw4CHmjEAOsJ/t9EIYojSifUNAj3CMokk8scu13p+MBVyB uS3FlwSIQjVZwug0FuF8fJIubc8fUTHXEfuzJfD7rIZYYhDi9PrE6Gro -----END CERTIFICATE-----Generated at Tue May 12 22:04:00 2026 by rpki-client