$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/257400396282690A629EEAC8D9AE6FFBDA48213E.cer File: 257400396282690A629EEAC8D9AE6FFBDA48213E.cer (raw, json) Hash identifier: Oyx9wiYhmBn2OyRDJYjNrow5Oipp7o0mNZzgedxuYB0= Subject key identifier: 25:74:00:39:62:82:69:0A:62:9E:EA:C8:D9:AE:6F:FB:DA:48:21:3E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 11A8B789EEC77A23E1622A802E40AD28E94F03CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer CRL Distribution Point: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Manifest: rsync://rpki-rsync.idnic.net/repo/7a8cdbae-c67b-4e9e-9b5d-b64937da8def/0/257400396282690A629EEAC8D9AE6FFBDA48213E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7a8cdbae-c67b-4e9e-9b5d-b64937da8def/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Thu 05 Nov 2026 00:42:51 +0000 Certificate not after: Thu 04 Nov 2027 00:47:51 +0000 Subordinate resources: AS: 154926 IP: 163.52.200.0/23 IP: 2001:df7:88c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a8:b7:89:ee:c7:7a:23:e1:62:2a:80:2e:40:ad:28:e9:4f:03:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Nov 5 00:42:51 2026 GMT Not After : Nov 4 00:47:51 2027 GMT Subject: CN=257400396282690A629EEAC8D9AE6FFBDA48213E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f4:d6:ee:a3:24:9d:6a:45:56:d5:54:48:cc: 37:83:19:4a:4c:a4:b4:26:a7:21:c8:95:b0:e7:d6: 73:04:7c:b6:5e:87:d0:34:34:fb:c1:ee:8d:ef:05: 21:47:f9:83:75:41:78:2a:9e:2b:8b:2f:48:15:54: 13:fa:51:05:e7:e8:f0:0b:d0:64:1e:ee:f3:dd:f0: fb:27:a1:9e:cb:c2:3a:48:d7:72:ae:0c:46:eb:ed: 7c:88:50:45:02:7a:5e:f1:9d:55:d2:67:2b:57:29: 2f:1f:06:d9:ef:92:0c:18:5c:ad:4e:a0:16:1c:88: 3f:b1:d9:f7:84:07:ed:cb:b2:86:86:dd:9c:45:25: 56:19:06:97:ce:b2:09:75:e0:f4:b7:c0:9d:f1:8d: be:82:42:16:3d:d1:ab:11:b1:d4:ef:94:e1:e5:d7: 74:8f:4a:99:47:07:da:0d:30:be:4f:1d:03:90:0a: 1f:d6:c0:63:b1:a0:01:ba:0a:a9:6c:b2:3b:c4:4b: 41:1a:9c:dc:c5:81:8e:a7:37:4b:95:f3:f9:e8:56: f3:04:c9:7b:a3:34:66:7f:a0:e3:56:1e:ad:65:3a: c9:33:c6:6c:c3:21:38:9f:a8:07:20:78:ab:6f:b4: 60:1b:08:1d:6e:3f:0c:ad:ad:9c:df:69:7d:e1:2c: 0d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:74:00:39:62:82:69:0A:62:9E:EA:C8:D9:AE:6F:FB:DA:48:21:3E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7a8cdbae-c67b-4e9e-9b5d-b64937da8def/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7a8cdbae-c67b-4e9e-9b5d-b64937da8def/0/257400396282690A629EEAC8D9AE6FFBDA48213E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.200.0/23 IPv6: 2001:df7:88c0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 154926 Signature Algorithm: sha256WithRSAEncryption 20:21:c1:a7:b4:9a:48:2e:98:0c:ba:ad:bc:14:c0:91:d9:c6: 51:90:e2:16:70:44:d5:db:7b:7a:21:70:2f:a1:e6:16:4b:7a: be:d2:39:38:ee:8e:0c:61:70:f0:5a:90:08:69:60:7d:38:10: a4:0f:8a:18:33:55:0c:f6:21:44:87:bc:67:ba:17:ab:68:ad: 19:a9:b3:ae:ac:d8:87:cb:70:09:5c:17:6d:f7:91:dc:4b:5a: 47:2e:7d:ca:d5:d8:f2:d8:d2:79:ee:6d:6f:b7:ad:51:58:e0: ad:67:0f:24:fb:34:1c:03:77:0c:34:45:dd:e1:ef:84:bb:d5: af:7e:64:6a:2c:e1:a7:97:4c:71:d2:fa:e2:9b:93:4a:24:90: e2:4d:e7:8e:73:ef:9b:b1:64:d0:45:c9:f8:a7:b2:93:91:c1: 23:33:cd:c3:08:81:ff:67:e9:50:ac:30:31:0e:41:46:27:7d: b2:02:8a:68:d1:a3:9d:96:45:22:ad:3e:d2:c5:b4:10:86:f0: 80:e8:db:a3:0a:80:f1:73:9c:6b:9b:03:c9:ce:dc:38:bc:f3: 90:0b:de:27:31:54:c4:67:31:1b:d8:6f:79:8d:84:a9:59:f9: b0:e3:32:07:2a:37:44:bf:17:b8:67:54:86:c2:f0:e6:6b:5b: 52:6b:3b:e1 -----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgIUEai3ie7HeiPhYiqALkCtKOlPA88wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTEwNTAwNDI1MVoX DTI3MTEwNDAwNDc1MVowMzExMC8GA1UEAxMoMjU3NDAwMzk2MjgyNjkwQTYyOUVF QUM4RDlBRTZGRkJEQTQ4MjEzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/01u6jJJ1qRVbVVEjMN4MZSkyktCanIciVsOfWcwR8tl6H0DQ0+8Huje8F IUf5g3VBeCqeK4svSBVUE/pRBefo8AvQZB7u893w+yehnsvCOkjXcq4MRuvtfIhQ RQJ6XvGdVdJnK1cpLx8G2e+SDBhcrU6gFhyIP7HZ94QH7cuyhobdnEUlVhkGl86y CXXg9LfAnfGNvoJCFj3RqxGx1O+U4eXXdI9KmUcH2g0wvk8dA5AKH9bAY7GgAboK qWyyO8RLQRqc3MWBjqc3S5Xz+ehW8wTJe6M0Zn+g41YerWU6yTPGbMMhOJ+oByB4 q2+0YBsIHW4/DK2tnN9pfeEsDV0CAwEAAaOCAuYwggLiMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCV0ADligmkKYp7qyNmub/vaSCE+MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdhOGNkYmFlLWM2N2ItNGU5ZS05YjVkLWI2NDkzN2RhOGRlZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83YThjZGJh ZS1jNjdiLTRlOWUtOWI1ZC1iNjQ5MzdkYThkZWYvMC8yNTc0MDAzOTYyODI2OTBB NjI5RUVBQzhEOUFFNkZGQkRBNDgyMTNFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBozTIMA8EAgACMAkDBwAgAQ33iMAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Al0uMA0GCSqGSIb3DQEBCwUAA4IBAQAgIcGntJpILpgMuq28FMCR2cZRkOIWcETV 23t6IXAvoeYWS3q+0jk47o4MYXDwWpAIaWB9OBCkD4oYM1UM9iFEh7xnuheraK0Z qbOurNiHy3AJXBdt95HcS1pHLn3K1djy2NJ57m1vt61RWOCtZw8k+zQcA3cMNEXd 4e+Eu9WvfmRqLOGnl0xx0vrim5NKJJDiTeeOc++bsWTQRcn4p7KTkcEjM83DCIH/ Z+lQrDAxDkFGJ32yAopo0aOdlkUirT7SxbQQhvCA6NujCoDxc5xrmwPJztw4vPOQ C94nMVTEZzEb2G95jYSpWfmw4zIHKjdEvxe4Z1SGwvDma1tSazvh -----END CERTIFICATE-----Generated at Sun Nov 15 17:09:52 2026 by rpki-client