$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.cer File: 787B7E1048C16AB0BE85DAB0BB116B1706F3056E.cer (raw, json) Hash identifier: 3Iv8P8BaG93rbv2gkUqJynIpD2ROlccYm2ukWW6zBXY= Subject key identifier: 78:7B:7E:10:48:C1:6A:B0:BE:85:DA:B0:BB:11:6B:17:06:F3:05:6E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 15BF908607F9D425557000D84D37618EC5FDA485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:42:26 +0000 Certificate not after: Sun 02 May 2027 00:47:26 +0000 Subordinate resources: IP: 2001:df3:f3c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:bf:90:86:07:f9:d4:25:55:70:00:d8:4d:37:61:8e:c5:fd:a4:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:42:26 2026 GMT Not After : May 2 00:47:26 2027 GMT Subject: CN=787B7E1048C16AB0BE85DAB0BB116B1706F3056E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6a:2d:13:8b:c8:62:d0:9c:a8:53:21:61:7a: 46:bb:8f:6b:e9:c9:70:84:a6:13:9f:c2:fa:40:55: 33:f4:be:ab:e8:8b:1b:1e:7b:6f:21:e8:5d:5e:3b: 1a:c0:2e:bc:70:99:0c:56:5f:c4:7d:92:ae:6a:5c: 2f:46:9c:92:c7:29:34:ae:32:76:58:81:7d:1f:e6: 8e:35:17:8b:6b:2e:c6:51:6f:ef:0b:4c:20:67:41: c1:9f:75:6d:3b:e3:c5:5f:1b:7f:f3:37:e9:e6:1d: c2:9b:2a:72:58:47:28:84:65:67:f5:0c:1e:26:65: 5a:bc:04:1f:ef:85:24:8c:3c:b9:ed:a3:60:c5:01: 5e:29:fd:c8:73:c0:10:06:ca:bd:15:f8:60:3a:c0: a0:8e:37:f4:45:63:48:02:5e:a2:38:59:c0:41:54: a5:07:d7:af:11:0e:cc:e8:f8:54:3d:71:f0:01:36: e1:52:40:d3:b9:f2:39:d5:a3:b4:7f:ac:68:b0:be: 65:c6:7f:af:98:f1:69:38:26:b8:57:e6:7c:14:45: 43:a1:fb:f1:0e:3d:3e:41:fb:f0:98:af:8e:c8:72: f4:b6:46:88:0d:96:ec:9c:99:ba:e8:8e:b4:b8:bb: 77:bd:e1:e6:c5:bc:fa:9d:9f:72:a6:2f:e2:e7:f4: ff:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:7B:7E:10:48:C1:6A:B0:BE:85:DA:B0:BB:11:6B:17:06:F3:05:6E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:f3c0::/48 Signature Algorithm: sha256WithRSAEncryption 25:3d:02:6d:aa:34:0d:68:4a:a4:b2:5f:8a:07:8a:38:a7:f1: 75:48:1c:7b:a0:3e:78:ca:3f:27:2e:24:d5:f0:b4:b0:03:42: f7:35:77:97:12:26:8f:28:bc:0c:63:b9:c2:d2:05:0b:9d:e6: fd:ff:6d:b2:47:b0:aa:a8:e7:1f:b1:cc:41:44:1c:31:b3:be: 16:0f:e9:5c:65:ad:11:6d:e0:86:d1:98:53:13:b7:3d:4f:40: 10:5d:ed:e7:dc:ee:44:c2:56:3e:36:24:c4:53:73:d2:1e:ba: e5:55:89:c2:84:a4:c7:4e:36:a0:31:ca:c8:a2:81:cc:ef:96: 69:c9:6b:4c:ad:cb:0a:5b:d1:26:df:63:42:d9:11:91:42:03: 4b:48:20:a3:fe:e9:04:d7:79:93:8a:cd:b3:39:84:88:8d:10: 71:1f:08:03:75:df:ae:1b:52:69:51:2c:69:ec:9e:03:2a:ea: 8d:5f:84:83:6b:f6:ce:96:05:5e:78:c1:4c:5a:e1:30:bb:ec: c9:ea:d5:34:00:39:41:5b:79:8d:67:eb:aa:13:47:1a:45:e4: 9b:97:68:73:11:2d:8d:dd:02:e4:6a:6b:22:e6:03:27:89:0c: 5a:cb:c6:58:e1:08:4c:4b:39:bb:d0:9e:9f:b0:03:ef:e3:6d: cb:d0:88:2e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUFb+Qhgf51CVVcADYTTdhjsX9pIUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDIyNloX DTI3MDUwMjAwNDcyNlowMzExMC8GA1UEAxMoNzg3QjdFMTA0OEMxNkFCMEJFODVE QUIwQkIxMTZCMTcwNkYzMDU2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANJqLROLyGLQnKhTIWF6RruPa+nJcISmE5/C+kBVM/S+q+iLGx57byHoXV47 GsAuvHCZDFZfxH2SrmpcL0ackscpNK4ydliBfR/mjjUXi2suxlFv7wtMIGdBwZ91 bTvjxV8bf/M36eYdwpsqclhHKIRlZ/UMHiZlWrwEH++FJIw8ue2jYMUBXin9yHPA EAbKvRX4YDrAoI439EVjSAJeojhZwEFUpQfXrxEOzOj4VD1x8AE24VJA07nyOdWj tH+saLC+ZcZ/r5jxaTgmuFfmfBRFQ6H78Q49PkH78Jivjshy9LZGiA2W7JyZuuiO tLi7d73h5sW8+p2fcqYv4uf0/5ECAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHh7fhBIwWqwvoXasLsRaxcG8wVuMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVkOGVmMTE5LTdkZGYtNDVlNS04NjM0LTM4Yjc3MjU4Y2JjYy8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81ZDhlZjEx OS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMS83ODdCN0UxMDQ4QzE2QUIw QkU4NURBQjBCQjExNkIxNzA2RjMwNTZFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN8/PAMA0GCSqGSIb3DQEBCwUAA4IBAQAlPQJtqjQNaEqksl+KB4o4p/F1 SBx7oD54yj8nLiTV8LSwA0L3NXeXEiaPKLwMY7nC0gULneb9/22yR7CqqOcfscxB RBwxs74WD+lcZa0RbeCG0ZhTE7c9T0AQXe3n3O5EwlY+NiTEU3PSHrrlVYnChKTH TjagMcrIooHM75ZpyWtMrcsKW9Em32NC2RGRQgNLSCCj/ukE13mTis2zOYSIjRBx HwgDdd+uG1JpUSxp7J4DKuqNX4SDa/bOlgVeeMFMWuEwu+zJ6tU0ADlBW3mNZ+uq E0caReSbl2hzES2N3QLkamsi5gMniQxay8ZY4QhMSzm70J6fsAPv423L0Igu -----END CERTIFICATE-----Generated at Tue May 12 22:33:10 2026 by rpki-client