$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/78A2C1B7FD05098A611E198E8481B7297F924590.cer File: 78A2C1B7FD05098A611E198E8481B7297F924590.cer (raw, json) Hash identifier: /LF/p7/MsccuZVy97NO+lZ6ENrDJC36zDLZXr5QNJyk= Subject key identifier: 78:A2:C1:B7:FD:05:09:8A:61:1E:19:8E:84:81:B7:29:7F:92:45:90 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 71A4030618D6FF6C7F80629DD1D6F012AAFFC651 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.mft caRepository: rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:22:59 +0000 Certificate not after: Sun 02 May 2027 01:27:59 +0000 Subordinate resources: IP: 119.235.248.0/21 IP: 2407:c200::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a4:03:06:18:d6:ff:6c:7f:80:62:9d:d1:d6:f0:12:aa:ff:c6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:22:59 2026 GMT Not After : May 2 01:27:59 2027 GMT Subject: CN=78A2C1B7FD05098A611E198E8481B7297F924590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:72:8c:e3:a2:e7:a8:1b:83:75:f7:08:6b:82: b0:09:a4:46:e8:9c:8c:81:da:4b:17:e9:f2:e4:51: 13:e7:31:03:c2:af:8e:d1:73:30:3b:c8:b9:70:22: 0f:d7:4e:e3:f5:b2:5a:ee:0d:cb:9f:8f:a0:aa:76: 21:fb:17:44:b1:5b:fb:7e:5d:a2:9f:55:cd:f8:69: c4:fb:b7:a6:62:ce:61:9e:de:64:da:c6:9f:14:0f: 2b:e0:e9:b8:b0:52:f8:56:77:d5:d7:ac:aa:07:25: 4e:c4:8c:31:85:e3:d3:86:67:e5:7c:52:c7:0a:fc: 8e:8c:b3:5d:8f:44:c5:ce:96:8d:6a:fd:15:4a:ef: b5:65:ed:fb:e0:1d:78:c1:51:50:76:21:0a:fc:ac: 6f:f5:ee:03:d5:7e:05:f2:7a:42:9e:e8:e5:57:d1: 13:a0:81:34:03:ab:be:b4:27:60:b8:34:1f:d2:f1: 8e:b3:57:64:b4:56:17:e8:c3:40:a4:05:af:6f:78: 84:a3:26:39:4f:27:83:04:3c:25:d3:23:97:ec:33: 87:19:71:a4:de:f4:62:59:8e:86:e3:27:02:7a:a7: aa:b8:62:71:29:42:fb:91:44:42:62:05:3b:c1:f9: 35:1f:5f:c8:73:96:4f:e4:b6:83:8b:c0:9c:18:12: 06:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:A2:C1:B7:FD:05:09:8A:61:1E:19:8E:84:81:B7:29:7F:92:45:90 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.235.248.0/21 IPv6: 2407:c200::/32 Signature Algorithm: sha256WithRSAEncryption 30:85:04:87:9c:34:bc:af:43:38:30:5c:62:c5:6a:99:ba:d8: 13:60:31:96:f5:76:41:54:7e:8d:5f:f9:88:5f:4e:65:19:2e: 63:bd:56:e4:03:72:0d:45:ee:bb:33:36:50:af:b8:3f:37:c2: 5b:04:46:5c:2c:a4:f7:e0:cb:4f:76:3a:8a:c2:c4:63:d1:b8: a0:78:54:94:5e:58:01:23:f9:48:56:50:17:47:55:91:ad:ce: 8c:ff:03:45:a6:c5:ed:06:2c:2a:2c:84:d5:bb:3b:4d:17:25: e2:d7:35:83:17:73:d7:12:dc:65:f6:e6:a1:b9:71:c0:59:51: f0:d4:cf:5c:30:28:1a:0d:c5:2d:bc:c7:74:d4:d4:48:64:fc: 5d:a9:75:e6:20:19:f3:4b:f5:7e:21:a9:ad:76:d4:4a:a5:d0: 45:b0:e6:d4:71:6f:38:eb:36:d6:fb:a6:1c:e1:ed:4a:6d:c7: 03:5b:6e:f6:e3:3f:8f:f3:59:e7:bf:5e:e7:9e:d2:96:db:c0: 16:09:a3:0a:bc:3a:e0:73:05:cf:5b:ae:56:9e:9a:d3:0b:88: 42:c7:76:cc:e2:43:96:1e:91:de:dc:95:09:6f:d2:6c:40:b1: e7:df:5b:ec:bf:03:69:11:9f:6f:2c:0c:6c:67:3c:59:ae:49: c2:e6:1a:c6 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUcaQDBhjW/2x/gGKd0dbwEqr/xlEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjI1OVoX DTI3MDUwMjAxMjc1OVowMzExMC8GA1UEAxMoNzhBMkMxQjdGRDA1MDk4QTYxMUUx OThFODQ4MUI3Mjk3RjkyNDU5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKJyjOOi56gbg3X3CGuCsAmkRuicjIHaSxfp8uRRE+cxA8KvjtFzMDvIuXAi D9dO4/WyWu4Ny5+PoKp2IfsXRLFb+35dop9VzfhpxPu3pmLOYZ7eZNrGnxQPK+Dp uLBS+FZ31desqgclTsSMMYXj04Zn5XxSxwr8joyzXY9Exc6WjWr9FUrvtWXt++Ad eMFRUHYhCvysb/XuA9V+BfJ6Qp7o5VfRE6CBNAOrvrQnYLg0H9LxjrNXZLRWF+jD QKQFr294hKMmOU8ngwQ8JdMjl+wzhxlxpN70YlmOhuMnAnqnqrhicSlC+5FEQmIF O8H5NR9fyHOWT+S2g4vAnBgSBvMCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHiiwbf9BQmKYR4ZjoSBtyl/kkWQMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk5ZTNiMWQ4LWJmMTktNDZlMy1iNjA5LTBkMTYwOTg4ZGFjOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85OWUzYjFk OC1iZjE5LTQ2ZTMtYjYwOS0wZDE2MDk4OGRhYzgvMC83OEEyQzFCN0ZEMDUwOThB NjExRTE5OEU4NDgxQjcyOTdGOTI0NTkwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQDd+v4MA0EAgACMAcDBQAkB8IAMA0GCSqGSIb3DQEBCwUAA4IBAQAwhQSHnDS8 r0M4MFxixWqZutgTYDGW9XZBVH6NX/mIX05lGS5jvVbkA3INRe67MzZQr7g/N8Jb BEZcLKT34MtPdjqKwsRj0bigeFSUXlgBI/lIVlAXR1WRrc6M/wNFpsXtBiwqLITV uztNFyXi1zWDF3PXEtxl9uahuXHAWVHw1M9cMCgaDcUtvMd01NRIZPxdqXXmIBnz S/V+IamtdtRKpdBFsObUcW846zbW+6Yc4e1KbccDW2724z+P81nnv17nntKW28AW CaMKvDrgcwXPW65WnprTC4hCx3bM4kOWHpHe3JUJb9JsQLHn31vsvwNpEZ9vLAxs ZzxZrknC5hrG -----END CERTIFICATE-----Generated at Wed May 13 02:20:28 2026 by rpki-client