$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/5C7B4DD70B983AD68F0FA4B30361CDA4C18371E7.cer File: 5C7B4DD70B983AD68F0FA4B30361CDA4C18371E7.cer (raw, json) Hash identifier: +CMoXqRGqlPoYPaQaQGjf2VVV0ojfpxDy70q9wsNbn4= Subject key identifier: 5C:7B:4D:D7:0B:98:3A:D6:8F:0F:A4:B3:03:61:CD:A4:C1:83:71:E7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 581E80947C14DB1D6A50889AF5CF3A520FB1B418 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/0/5C7B4DD70B983AD68F0FA4B30361CDA4C18371E7.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Wed 21 Oct 2026 02:13:15 +0000 Certificate not after: Wed 20 Oct 2027 02:18:15 +0000 Subordinate resources: AS: 152783 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:1e:80:94:7c:14:db:1d:6a:50:88:9a:f5:cf:3a:52:0f:b1:b4:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 21 02:13:15 2026 GMT Not After : Oct 20 02:18:15 2027 GMT Subject: CN=5C7B4DD70B983AD68F0FA4B30361CDA4C18371E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:05:e7:ae:3f:d3:e3:11:86:11:dc:79:8a:a5: 5c:03:f2:58:22:73:4f:4c:7b:be:04:59:7a:f4:fd: 58:d7:ee:d5:d7:e5:b9:36:0e:fc:85:d1:a8:d3:33: 47:43:89:7e:0d:8a:9a:3f:21:0b:89:29:df:ca:8f: cd:d1:5b:3e:7a:f4:99:d6:37:69:53:cb:3e:fa:01: 7b:82:02:60:12:ed:4e:9a:f4:4a:3b:99:e3:2c:b7: 2c:57:99:40:01:ce:0e:f8:29:b4:cf:21:4e:af:34: 62:c9:9d:00:fb:a5:41:6c:f8:76:e9:f2:2c:3f:9d: 86:f9:79:ec:78:6a:04:33:12:00:a1:5a:c1:52:a3: a8:d7:be:95:6e:b4:89:ff:f4:58:13:b6:06:56:17: 97:a0:10:66:a7:2d:bb:62:ff:7d:cf:e0:e5:04:92: 38:eb:99:84:da:fd:b7:64:38:ba:27:10:c8:c5:1b: e4:8b:3d:79:18:f2:6d:94:e3:2a:8b:31:f8:24:c4: c9:96:f1:50:bf:2b:24:f5:f6:74:e3:f7:ae:c2:f3: d4:c1:ae:a2:69:6c:3e:a8:a5:56:d9:0b:fe:c1:7c: 63:b5:47:d1:04:37:03:c5:58:6a:18:7a:b6:f7:91: a8:c3:8c:f5:41:83:7c:c5:2f:ff:ad:e7:36:d3:83: 85:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5C:7B:4D:D7:0B:98:3A:D6:8F:0F:A4:B3:03:61:CD:A4:C1:83:71:E7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/0/5C7B4DD70B983AD68F0FA4B30361CDA4C18371E7.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 152783 Signature Algorithm: sha256WithRSAEncryption 83:21:66:f3:1d:3b:76:2c:4d:b9:ba:6a:59:0b:75:ea:1a:7d: f8:09:c0:41:4c:f6:13:22:15:c9:fd:c8:b2:2d:7b:d3:d0:6d: c7:b7:7b:26:b9:73:06:08:8e:47:d2:f0:ad:64:e6:ea:e0:3d: 18:c3:4d:af:70:ab:0e:e3:93:e9:21:93:23:2f:d0:ec:b3:86: 7e:07:d0:8d:2b:43:37:2f:42:bb:e0:61:69:67:38:f4:01:9c: fb:13:81:5c:b4:d4:da:d4:03:99:dc:d3:8f:a8:c1:a9:d6:22: 7a:e8:98:6b:47:5d:2d:7d:1e:dc:f1:6f:3e:96:5f:31:39:bd: 84:77:b3:6f:e4:09:6c:08:f2:23:1b:0c:19:04:0e:03:ff:36: 8f:ab:15:da:47:fe:f9:16:0c:0f:ef:61:34:97:8b:ee:4b:0c: 3b:1e:35:08:20:a2:c5:4a:67:16:c4:76:fe:b5:8f:e8:34:f9: 4d:7c:37:32:34:be:d3:f4:50:e9:a5:94:6f:c1:4c:28:8b:6f: 55:88:92:31:94:9e:4b:82:e0:26:6f:16:cd:e6:57:3d:04:12: e2:4d:6a:21:d8:fa:57:a7:ed:a1:e4:16:05:2e:e7:3b:d3:ab: 4b:a3:f9:af:7e:00:e4:a1:fa:11:d8:92:f3:f9:5a:2a:e6:e8: 98:52:08:86 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgIUWB6AlHwU2x1qUIia9c86Ug+xtBgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAyMTAyMTMxNVoX DTI3MTAyMDAyMTgxNVowMzExMC8GA1UEAxMoNUM3QjRERDcwQjk4M0FENjhGMEZB NEIzMDM2MUNEQTRDMTgzNzFFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcF564/0+MRhhHceYqlXAPyWCJzT0x7vgRZevT9WNfu1dfluTYO/IXRqNMz R0OJfg2Kmj8hC4kp38qPzdFbPnr0mdY3aVPLPvoBe4ICYBLtTpr0SjuZ4yy3LFeZ QAHODvgptM8hTq80YsmdAPulQWz4dunyLD+dhvl57HhqBDMSAKFawVKjqNe+lW60 if/0WBO2BlYXl6AQZqctu2L/fc/g5QSSOOuZhNr9t2Q4uicQyMUb5Is9eRjybZTj Kosx+CTEyZbxUL8rJPX2dOP3rsLz1MGuomlsPqilVtkL/sF8Y7VH0QQ3A8VYahh6 tveRqMOM9UGDfMUv/63nNtODhVMCAwEAAaOCArQwggKwMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFx7TdcLmDrWjw+kswNhzaTBg3HnMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZiMDFiODk1LTUzYzYtNGEyMS1hMmMwLTg5OWRmMmYyZDg5Yy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82YjAxYjg5 NS01M2M2LTRhMjEtYTJjMC04OTlkZjJmMmQ4OWMvMC81QzdCNERENzBCOTgzQUQ2 OEYwRkE0QjMwMzYxQ0RBNEMxODM3MUU3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJU zzANBgkqhkiG9w0BAQsFAAOCAQEAgyFm8x07dixNubpqWQt16hp9+AnAQUz2EyIV yf3Isi1709Btx7d7JrlzBgiOR9LwrWTm6uA9GMNNr3CrDuOT6SGTIy/Q7LOGfgfQ jStDNy9Cu+BhaWc49AGc+xOBXLTU2tQDmdzTj6jBqdYieuiYa0ddLX0e3PFvPpZf MTm9hHezb+QJbAjyIxsMGQQOA/82j6sV2kf++RYMD+9hNJeL7ksMOx41CCCixUpn FsR2/rWP6DT5TXw3MjS+0/RQ6aWUb8FMKItvVYiSMZSeS4LgJm8WzeZXPQQS4k1q Idj6V6ftoeQWBS7nO9OrS6P5r34A5KH6EdiS8/laKubomFIIhg== -----END CERTIFICATE-----Generated at Tue Nov 10 15:11:07 2026 by rpki-client