$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B78A1ED892FB248A8B9BD980AD2B97821308CD15.cer File: B78A1ED892FB248A8B9BD980AD2B97821308CD15.cer (raw, json) Hash identifier: jhH+epWpofQKBydI6wr9gtV5jz6NPEGYaynPLMXRBUM= Subject key identifier: B7:8A:1E:D8:92:FB:24:8A:8B:9B:D9:80:AD:2B:97:82:13:08:CD:15 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 60B072D84B6394CB70A17954C9428E2025A91C89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/B78A1ED892FB248A8B9BD980AD2B97821308CD15.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:33:24 +0000 Certificate not after: Sun 02 May 2027 01:38:24 +0000 Subordinate resources: IP: 103.171.179.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b0:72:d8:4b:63:94:cb:70:a1:79:54:c9:42:8e:20:25:a9:1c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:33:24 2026 GMT Not After : May 2 01:38:24 2027 GMT Subject: CN=B78A1ED892FB248A8B9BD980AD2B97821308CD15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:58:49:bc:73:ac:51:c8:f0:f5:fa:50:ac:0a: cb:f9:fc:40:89:82:dc:bd:18:55:94:9a:ac:bf:86: 6e:75:1b:b4:ed:b9:b5:2b:3f:79:ad:d7:e5:92:46: 58:fe:69:bf:40:df:80:cb:7d:8e:5f:e8:ed:8f:e3: 8c:9c:f9:40:15:10:7e:b7:17:6a:7b:da:99:ab:6f: 7c:5b:2b:9a:97:28:2d:d4:10:59:f6:e7:19:f2:a0: a1:3c:9e:f9:79:9f:b0:0b:d8:5b:a2:e6:57:05:49: c4:37:94:d1:0b:8b:4b:7b:4a:15:5c:bd:6e:28:9b: d0:3e:6e:05:ab:7a:aa:7f:3a:ca:22:14:dd:b5:39: ad:e6:94:28:be:6f:07:cf:f5:ab:b3:cd:76:61:39: 3c:04:4b:76:a3:87:7a:85:06:8e:19:95:8e:2e:2f: 5d:d4:14:fe:3c:c9:90:8d:71:d8:1e:86:18:9c:3d: 04:38:04:00:d1:83:7a:9c:77:c4:a1:e0:22:e1:7c: ef:40:4c:69:fd:2b:26:da:2a:27:65:b3:ce:52:c5: 6b:e8:c2:2c:89:80:16:80:de:e0:d9:1d:f7:7b:fd: e3:92:bf:92:3a:8a:00:f1:38:ea:4a:ca:c4:a9:50: ec:6f:ed:ab:39:ff:7c:5c:2b:f2:81:ad:63:18:0d: ba:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B7:8A:1E:D8:92:FB:24:8A:8B:9B:D9:80:AD:2B:97:82:13:08:CD:15 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/B78A1ED892FB248A8B9BD980AD2B97821308CD15.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.171.179.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:22:f7:0c:f7:48:f0:24:b8:ec:99:0d:9b:43:ec:a8:65:7f: f5:20:c3:26:70:82:60:08:07:cb:41:dd:4a:8a:6a:60:9e:0d: 42:b3:6c:12:09:7e:70:4c:af:5c:83:56:78:26:89:b5:9f:73: 98:1c:43:d4:11:ab:75:f4:67:3c:07:6c:a0:b4:26:76:ff:2a: 69:41:bc:51:e4:83:4f:fd:02:49:b2:5a:f1:64:d8:7d:36:d3: 95:b2:08:2b:42:3c:ea:b4:77:3a:e8:c8:b3:cb:7a:52:6c:f4: 1b:12:b7:b2:f1:ec:9b:71:bb:60:74:1b:0b:f9:cd:ee:a9:a9: 3b:68:69:df:71:bf:a9:16:30:c2:00:65:11:36:e5:9b:3e:94: 43:7b:6e:56:3d:e7:73:d2:95:98:58:a3:7d:8f:eb:9d:78:cb: 66:b9:a6:b9:af:88:33:3a:54:30:61:ab:c3:4c:cd:09:b9:ea: 29:77:33:c9:5b:32:92:74:d0:a1:7f:4b:07:94:e0:02:9e:fb: be:b2:24:6b:c0:cf:1c:17:59:28:cd:1c:cb:27:8e:e7:39:b1: 3d:e8:67:ff:9b:89:98:be:04:d1:a2:40:78:c3:ca:77:64:5e: 70:8b:37:09:1d:94:87:4d:b8:c0:30:60:91:78:0c:0a:44:d4: 12:3d:1a:0d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYLBy2EtjlMtwoXlUyUKOICWpHIkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzMyNFoX DTI3MDUwMjAxMzgyNFowMzExMC8GA1UEAxMoQjc4QTFFRDg5MkZCMjQ4QThCOUJE OTgwQUQyQjk3ODIxMzA4Q0QxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALtYSbxzrFHI8PX6UKwKy/n8QImC3L0YVZSarL+GbnUbtO25tSs/ea3X5ZJG WP5pv0DfgMt9jl/o7Y/jjJz5QBUQfrcXanvamatvfFsrmpcoLdQQWfbnGfKgoTye +XmfsAvYW6LmVwVJxDeU0QuLS3tKFVy9biib0D5uBat6qn86yiIU3bU5reaUKL5v B8/1q7PNdmE5PARLdqOHeoUGjhmVji4vXdQU/jzJkI1x2B6GGJw9BDgEANGDepx3 xKHgIuF870BMaf0rJtoqJ2WzzlLFa+jCLImAFoDe4Nkd93v945K/kjqKAPE46krK xKlQ7G/tqzn/fFwr8oGtYxgNuo0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLeKHtiS+ySKi5vZgK0rl4ITCM0VMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E5MGFhMTU4LTY1ODEtNGNiZS1iNmNlLWQ4NzIxYzcxOWZhMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hOTBhYTE1 OC02NTgxLTRjYmUtYjZjZS1kODcyMWM3MTlmYTAvMC9CNzhBMUVEODkyRkIyNDhB OEI5QkQ5ODBBRDJCOTc4MjEzMDhDRDE1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6uzMA0GCSqGSIb3DQEBCwUAA4IBAQCMIvcM90jwJLjsmQ2bQ+yoZX/1IMMm cIJgCAfLQd1Kimpgng1Cs2wSCX5wTK9cg1Z4Jom1n3OYHEPUEat19Gc8B2ygtCZ2 /yppQbxR5INP/QJJslrxZNh9NtOVsggrQjzqtHc66Mizy3pSbPQbErey8eybcbtg dBsL+c3uqak7aGnfcb+pFjDCAGURNuWbPpRDe25WPedz0pWYWKN9j+udeMtmuaa5 r4gzOlQwYavDTM0JueopdzPJWzKSdNChf0sHlOACnvu+siRrwM8cF1kozRzLJ47n ObE96Gf/m4mYvgTRokB4w8p3ZF5wizcJHZSHTbjAMGCReAwKRNQSPRoN -----END CERTIFICATE-----Generated at Tue May 12 22:16:10 2026 by rpki-client