$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer File: 78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer (raw, json) Hash identifier: u9voplJVsjHjxvRnsKns5SSAlSlkC2cxhwZjKKswj4c= Subject key identifier: 78:B2:1F:CC:57:E9:B9:12:4F:15:D5:B7:C6:FE:14:52:A1:36:D2:EA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5C8E72582F289C1557BA91EA23AE12E0158FB1C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:09:17 +0000 Certificate not after: Sun 02 May 2027 00:14:17 +0000 Subordinate resources: IP: 103.163.80.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:8e:72:58:2f:28:9c:15:57:ba:91:ea:23:ae:12:e0:15:8f:b1:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:09:17 2026 GMT Not After : May 2 00:14:17 2027 GMT Subject: CN=78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b8:b2:b9:3a:27:a3:25:ce:8c:15:9c:3a:71: 2b:29:be:4a:78:14:14:d3:03:29:94:24:3f:40:94: d9:a7:63:38:fe:73:01:0f:78:69:ae:85:0d:13:f6: 94:d0:8a:1c:18:03:c0:f2:33:48:24:4e:95:a7:d2: 72:6c:07:9f:c2:70:df:9c:53:1e:ae:c8:ae:35:68: 7f:1c:72:bb:12:56:c1:9d:d0:31:90:2a:0d:54:90: 68:e0:3a:bf:7f:29:ed:f5:ee:4d:52:1e:d0:9f:15: 4e:7e:e0:07:94:84:07:43:0c:66:48:d1:5a:41:69: dd:7e:d4:e0:42:e7:68:ee:cb:1e:04:93:49:1a:51: 24:e9:3d:eb:f5:c6:71:9d:95:cd:fe:25:00:b2:a4: 74:74:c8:4f:97:cc:a2:09:78:3d:9e:f3:cd:1e:bc: 4c:2b:9a:9e:1f:b8:1c:fb:a2:19:18:65:1d:ea:6c: 4f:f7:36:36:cf:9d:19:53:45:5f:78:a9:a7:50:79: 12:21:89:4e:26:a6:ac:63:1d:75:cf:49:37:40:33: ad:0e:92:ee:e7:c0:da:d5:88:ef:7f:40:49:e7:bb: fe:99:6e:6a:02:72:98:90:07:bb:74:f0:00:cd:42: 82:38:cc:1a:61:b6:c3:08:b4:0e:93:a0:c0:f2:ee: e1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:B2:1F:CC:57:E9:B9:12:4F:15:D5:B7:C6:FE:14:52:A1:36:D2:EA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.80.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:72:14:39:d8:87:3d:30:5c:1e:fc:4a:5e:33:6b:47:4b:c5: 54:72:78:60:3d:71:09:70:22:ee:ee:76:46:1f:3b:de:58:11: 0c:b9:d2:39:14:0c:fa:6f:9a:2f:72:48:d4:71:8d:d5:a9:86: 49:05:48:b8:71:35:72:de:74:5a:6e:cf:dc:06:81:ac:89:9f: d9:30:e1:e9:b3:96:1e:c8:a1:94:db:80:bf:8a:f7:90:cf:99: ac:65:d2:8a:80:37:f7:d6:3b:79:95:7c:3e:32:00:11:e2:09: cf:c1:55:2f:61:3d:7e:86:21:47:d8:32:0b:ca:4c:f8:7b:22: 0d:68:0e:73:7a:57:32:d8:b3:a3:96:33:36:97:d4:1b:43:0c: 20:45:1e:36:76:f3:5c:2d:f6:2f:87:4c:45:e6:61:e0:36:c5: 03:58:e5:f5:97:6a:c7:e1:bc:25:e0:24:a8:24:be:67:74:a9: fa:2c:a6:73:5b:07:7f:21:53:dc:19:8a:06:42:fe:cb:12:67: 4f:69:af:c4:63:8b:af:29:8d:e8:cf:e8:fb:20:17:28:d4:86: 11:71:b9:44:72:11:02:75:fe:4b:1e:fa:2b:be:07:4f:f3:24: 07:8e:7c:04:46:54:46:d1:55:99:bf:d4:96:b1:d9:7d:c4:2c: 85:70:f1:ca -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUXI5yWC8onBVXupHqI64S4BWPsckwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDkxN1oX DTI3MDUwMjAwMTQxN1owMzExMC8GA1UEAxMoNzhCMjFGQ0M1N0U5QjkxMjRGMTVE NUI3QzZGRTE0NTJBMTM2RDJFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMS4srk6J6MlzowVnDpxKym+SngUFNMDKZQkP0CU2adjOP5zAQ94aa6FDRP2 lNCKHBgDwPIzSCROlafScmwHn8Jw35xTHq7IrjVofxxyuxJWwZ3QMZAqDVSQaOA6 v38p7fXuTVIe0J8VTn7gB5SEB0MMZkjRWkFp3X7U4ELnaO7LHgSTSRpRJOk96/XG cZ2Vzf4lALKkdHTIT5fMogl4PZ7zzR68TCuanh+4HPuiGRhlHepsT/c2Ns+dGVNF X3ipp1B5EiGJTiamrGMddc9JN0AzrQ6S7ufA2tWI739ASee7/pluagJymJAHu3Tw AM1CgjjMGmG2wwi0DpOgwPLu4c8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHiyH8xX6bkSTxXVt8b+FFKhNtLqMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJkMjM0ZDUwLTY3ZTEtNDE5Yy04NWJhLTY0YmE4YzExMTIyNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yZDIzNGQ1 MC02N2UxLTQxOWMtODViYS02NGJhOGMxMTEyMjUvMC83OEIyMUZDQzU3RTlCOTEy NEYxNUQ1QjdDNkZFMTQ1MkExMzZEMkVBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6NQMA0GCSqGSIb3DQEBCwUAA4IBAQBcchQ52Ic9MFwe/EpeM2tHS8VUcnhg PXEJcCLu7nZGHzveWBEMudI5FAz6b5ovckjUcY3VqYZJBUi4cTVy3nRabs/cBoGs iZ/ZMOHps5YeyKGU24C/iveQz5msZdKKgDf31jt5lXw+MgAR4gnPwVUvYT1+hiFH 2DILykz4eyINaA5zelcy2LOjljM2l9QbQwwgRR42dvNcLfYvh0xF5mHgNsUDWOX1 l2rH4bwl4CSoJL5ndKn6LKZzWwd/IVPcGYoGQv7LEmdPaa/EY4uvKY3oz+j7IBco 1IYRcblEchECdf5LHvorvgdP8yQHjnwERlRG0VWZv9SWsdl9xCyFcPHK -----END CERTIFICATE-----Generated at Tue May 12 22:03:00 2026 by rpki-client