$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer File: 7377350E3E3A151F4CC7127822802AD47B86A5CF.cer (raw, json) Hash identifier: nGAjVskqNcUW0o10aQ5MMu5hNEiRCYZoCOcSBUjsDlg= Subject key identifier: 73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5EFC30765CD26B3A95485D76C8CE9F208B95FA1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:21:03 +0000 Certificate not after: Sun 02 May 2027 00:26:03 +0000 Subordinate resources: IP: 58.145.168.0/21 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:fc:30:76:5c:d2:6b:3a:95:48:5d:76:c8:ce:9f:20:8b:95:fa:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:21:03 2026 GMT Not After : May 2 00:26:03 2027 GMT Subject: CN=7377350E3E3A151F4CC7127822802AD47B86A5CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3b:0e:38:cc:31:30:e0:91:6f:9d:36:e1:71: 5d:43:13:11:f7:39:f8:5b:f4:68:17:37:19:b9:4f: 5f:2b:e2:3d:d6:7c:30:42:ec:54:76:06:0f:1b:b8: 6e:86:a5:86:51:02:1d:bb:d0:e4:9d:08:55:63:f2: 36:ca:e6:6b:7e:1f:55:48:2e:f0:8d:16:57:eb:5b: 13:2b:9f:8f:a3:f5:38:5f:b3:1e:ca:b6:0d:f6:ad: 62:0c:8a:3d:e6:70:6d:ea:6f:ab:15:75:47:88:4b: 33:47:22:d8:5c:9a:5b:66:79:8e:bf:85:56:98:8a: e2:e3:07:82:ba:5d:9e:33:02:4f:09:2c:af:99:ab: 1c:75:a5:c0:d0:90:99:cd:7c:49:19:d5:75:85:be: c0:7a:1a:ce:de:9f:59:4a:81:05:1e:fc:d6:6f:52: c8:d7:7a:b2:cb:b2:2d:17:42:d7:61:df:81:d3:5b: 34:32:d2:61:09:63:07:96:1d:8b:be:18:5b:11:9a: df:bb:7c:c0:d8:c7:ea:7a:37:92:e2:95:87:ff:54: 16:c5:58:54:ff:ca:3d:0a:48:fd:c8:ed:61:01:c8: 73:48:e2:6e:58:3d:e1:42:48:2b:36:03:9b:af:77: f8:7b:0f:e8:d1:6a:ba:a7:8c:6d:e7:a9:39:23:e1: 4b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.145.168.0/21 Signature Algorithm: sha256WithRSAEncryption 4b:5b:93:32:85:90:20:a1:74:86:6a:72:d6:c5:37:74:ab:74: 64:08:82:42:1b:8e:8a:2c:a1:37:d9:3c:09:b0:03:cb:71:47: 10:2b:31:51:48:c1:24:fa:ca:ef:a0:83:f1:ee:75:f4:d5:34: d0:45:8d:1c:aa:c4:a8:92:30:da:c6:1e:22:6e:d3:2b:ad:49: bd:eb:11:48:ca:5b:59:48:0f:b1:99:c4:d9:52:a3:bf:fa:03: 26:9a:9c:b2:b5:d7:14:1a:90:c1:b1:c2:14:92:aa:c4:24:47: e5:d3:07:de:65:60:18:84:2d:3f:1a:75:47:54:18:dd:32:ab: 76:89:b5:31:e7:5f:c0:27:08:de:a5:6e:59:0c:54:7b:d5:a6: a5:26:fa:ac:62:6f:3c:c4:c0:5d:0e:70:24:f2:43:a6:62:cc: 77:65:ba:65:70:01:15:c5:4b:d1:52:08:c1:c9:4a:33:13:1b: 3d:5b:83:08:62:0f:8f:e9:16:f8:6b:44:97:0a:47:99:fa:15: 2c:37:91:49:ce:ce:1d:d4:df:98:ed:a3:b1:f2:12:70:80:0e: b3:c0:11:45:98:cd:da:c4:58:45:cf:80:a4:ff:62:32:38:4b: 58:ea:9e:f8:95:56:4b:e3:80:c6:a2:7a:f6:6c:8f:50:72:0c: 3b:e9:ed:97 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUXvwwdlzSazqVSF12yM6fIIuV+h0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjEwM1oX DTI3MDUwMjAwMjYwM1owMzExMC8GA1UEAxMoNzM3NzM1MEUzRTNBMTUxRjRDQzcx Mjc4MjI4MDJBRDQ3Qjg2QTVDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKA7DjjMMTDgkW+dNuFxXUMTEfc5+Fv0aBc3GblPXyviPdZ8MELsVHYGDxu4 boalhlECHbvQ5J0IVWPyNsrma34fVUgu8I0WV+tbEyufj6P1OF+zHsq2DfatYgyK PeZwbepvqxV1R4hLM0ci2FyaW2Z5jr+FVpiK4uMHgrpdnjMCTwksr5mrHHWlwNCQ mc18SRnVdYW+wHoazt6fWUqBBR781m9SyNd6ssuyLRdC12HfgdNbNDLSYQljB5Yd i74YWxGa37t8wNjH6no3kuKVh/9UFsVYVP/KPQpI/cjtYQHIc0jiblg94UJIKzYD m693+HsP6NFquqeMbeepOSPhS2cCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHN3NQ4+OhUfTMcSeCKAKtR7hqXPMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNjZjMwOTM2LWM3NTAtNDMzYi05YzJhLThmZjVmMzhlNjNkNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zY2YzMDkz Ni1jNzUwLTQzM2ItOWMyYS04ZmY1ZjM4ZTYzZDQvMC83Mzc3MzUwRTNFM0ExNTFG NENDNzEyNzgyMjgwMkFENDdCODZBNUNGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQDOpGoMA0GCSqGSIb3DQEBCwUAA4IBAQBLW5MyhZAgoXSGanLWxTd0q3RkCIJC G46KLKE32TwJsAPLcUcQKzFRSMEk+srvoIPx7nX01TTQRY0cqsSokjDaxh4ibtMr rUm96xFIyltZSA+xmcTZUqO/+gMmmpyytdcUGpDBscIUkqrEJEfl0wfeZWAYhC0/ GnVHVBjdMqt2ibUx51/AJwjepW5ZDFR71aalJvqsYm88xMBdDnAk8kOmYsx3Zbpl cAEVxUvRUgjByUozExs9W4MIYg+P6Rb4a0SXCkeZ+hUsN5FJzs4d1N+Y7aOx8hJw gA6zwBFFmM3axFhFz4Ck/2IyOEtY6p74lVZL44DGonr2bI9Qcgw76e2X -----END CERTIFICATE-----Generated at Wed May 13 01:07:18 2026 by rpki-client