$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/D923807D26711727AE4683EA63ABE3CCFCB9F1E8.cer File: D923807D26711727AE4683EA63ABE3CCFCB9F1E8.cer (raw, json) Hash identifier: qCu1Olv0cJKC+qHBimYNm86djW01Hyha/uqGUOlkI1M= Subject key identifier: D9:23:80:7D:26:71:17:27:AE:46:83:EA:63:AB:E3:CC:FC:B9:F1:E8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2261E39CEB0462CA82FA19B9C41CFD87AEECD9C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/755e7f0a-7d90-4cb5-94be-ffe46f6c6145/0/D923807D26711727AE4683EA63ABE3CCFCB9F1E8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/755e7f0a-7d90-4cb5-94be-ffe46f6c6145/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Mon 28 Sep 2026 13:40:11 +0000 Certificate not after: Mon 27 Sep 2027 13:45:11 +0000 Subordinate resources: IP: 180.94.10.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 15:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:61:e3:9c:eb:04:62:ca:82:fa:19:b9:c4:1c:fd:87:ae:ec:d9:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 28 13:40:11 2026 GMT Not After : Sep 27 13:45:11 2027 GMT Subject: CN=D923807D26711727AE4683EA63ABE3CCFCB9F1E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3f:f1:a1:f7:aa:9a:5b:54:39:53:80:7d:39: de:0b:a5:37:f5:0e:9f:c3:30:4d:99:5c:bc:3a:8c: 11:4c:df:f0:a4:b2:fd:5f:6e:ef:9a:82:86:09:d8: 4c:72:ef:ec:76:a2:07:11:cf:7a:f0:a0:b0:58:a2: b6:8a:26:97:b3:bb:67:06:9d:f5:88:3d:c4:a3:01: ec:b6:07:02:18:0e:05:50:3e:21:e2:e1:9f:32:c3: 43:e0:23:9d:49:1c:c9:fe:f3:10:27:11:59:90:05: ee:89:cb:e2:ae:b3:c4:39:e9:0c:f1:59:70:44:a9: 6b:de:e1:92:b4:a4:ae:12:75:bc:dc:eb:e7:fc:89: ed:c3:91:e3:6b:e4:81:65:9a:6b:4d:60:d7:49:d1: ea:70:50:38:90:0e:70:9b:a1:63:30:2e:44:2b:94: 89:9b:6f:73:9f:c5:e5:49:5f:3e:e9:bc:03:ef:e7: 3d:7d:60:84:59:e4:4e:16:6c:43:72:c6:29:bb:e6: 81:77:1f:ee:21:40:73:8f:15:d1:66:71:67:03:d4: 26:6f:a8:9a:59:af:47:c5:6c:12:5b:06:3b:2b:62: 21:b7:52:83:52:f7:67:81:eb:a8:4e:66:24:b9:40: e7:19:1a:bc:24:20:5a:ad:ff:02:c6:86:69:50:da: 67:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:23:80:7D:26:71:17:27:AE:46:83:EA:63:AB:E3:CC:FC:B9:F1:E8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/755e7f0a-7d90-4cb5-94be-ffe46f6c6145/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/755e7f0a-7d90-4cb5-94be-ffe46f6c6145/0/D923807D26711727AE4683EA63ABE3CCFCB9F1E8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.94.10.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:bb:70:cb:27:ee:4d:d7:e2:5a:78:ed:23:f6:d0:94:28:b3: 9f:37:fa:73:bc:12:16:78:2c:c5:80:41:c8:ab:7b:08:9b:10: e6:c2:a8:05:3c:c3:05:b2:5b:18:f1:83:20:31:20:df:6c:44: df:a0:f8:7d:e4:91:ff:e9:d1:f7:79:70:6a:4a:61:bf:bb:45: cf:df:5c:b9:66:3f:b6:7f:bf:6d:e1:4d:fa:7f:93:83:29:64: a2:7c:b1:d4:6b:b6:db:e4:df:e0:0b:8a:0d:c2:2a:e2:94:33: 04:f4:39:96:96:33:9a:2a:eb:6b:89:fd:f3:d5:d8:2f:e1:e9: 7b:9c:3d:61:4e:21:89:b8:23:e2:9d:75:44:86:2d:60:3b:6f: 6c:cc:ac:ef:e3:82:be:ea:7f:df:51:7d:72:00:87:0c:bd:3a: 99:24:cb:24:36:29:64:23:17:c1:8b:d3:fd:fe:6c:3c:41:10: 6d:df:f4:3c:0b:b6:56:c5:cf:96:6f:1f:97:1f:15:39:4d:4a: 68:86:42:88:54:0d:80:fa:dd:81:b8:91:87:ed:1b:65:58:85: ea:00:c1:99:2b:42:40:12:23:7f:01:19:e8:c6:4f:5e:b8:f3: 65:c3:50:d7:6f:ae:6d:28:0c:b2:b7:c7:47:31:cd:a6:da:32: 53:48:24:f0 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUImHjnOsEYsqC+hm5xBz9h67s2cMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkyODEzNDAxMVoX DTI3MDkyNzEzNDUxMVowMzExMC8GA1UEAxMoRDkyMzgwN0QyNjcxMTcyN0FFNDY4 M0VBNjNBQkUzQ0NGQ0I5RjFFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKg/8aH3qppbVDlTgH053gulN/UOn8MwTZlcvDqMEUzf8KSy/V9u75qChgnY THLv7HaiBxHPevCgsFiitooml7O7Zwad9Yg9xKMB7LYHAhgOBVA+IeLhnzLDQ+Aj nUkcyf7zECcRWZAF7onL4q6zxDnpDPFZcESpa97hkrSkrhJ1vNzr5/yJ7cOR42vk gWWaa01g10nR6nBQOJAOcJuhYzAuRCuUiZtvc5/F5UlfPum8A+/nPX1ghFnkThZs Q3LGKbvmgXcf7iFAc48V0WZxZwPUJm+omlmvR8VsElsGOytiIbdSg1L3Z4HrqE5m JLlA5xkavCQgWq3/AsaGaVDaZ90CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNkjgH0mcRcnrkaD6mOr48z8ufHoMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc1NWU3ZjBhLTdkOTAtNGNiNS05NGJlLWZmZTQ2ZjZjNjE0NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83NTVlN2Yw YS03ZDkwLTRjYjUtOTRiZS1mZmU0NmY2YzYxNDUvMC9EOTIzODA3RDI2NzExNzI3 QUU0NjgzRUE2M0FCRTNDQ0ZDQjlGMUU4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBtF4KMA0GCSqGSIb3DQEBCwUAA4IBAQALu3DLJ+5N1+JaeO0j9tCUKLOfN/pz vBIWeCzFgEHIq3sImxDmwqgFPMMFslsY8YMgMSDfbETfoPh95JH/6dH3eXBqSmG/ u0XP31y5Zj+2f79t4U36f5ODKWSifLHUa7bb5N/gC4oNwirilDME9DmWljOaKutr if3z1dgv4el7nD1hTiGJuCPinXVEhi1gO29szKzv44K+6n/fUX1yAIcMvTqZJMsk NilkIxfBi9P9/mw8QRBt3/Q8C7ZWxc+Wbx+XHxU5TUpohkKIVA2A+t2BuJGH7Rtl WIXqAMGZK0JAEiN/ARnoxk9euPNlw1DXb65tKAyyt8dHMc2m2jJTSCTw -----END CERTIFICATE-----Generated at Sat Oct 3 23:54:50 2026 by rpki-client