$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/D9EE9F33563012FDBA5636F76B555BDC8947E439.cer File: D9EE9F33563012FDBA5636F76B555BDC8947E439.cer (raw, json) Hash identifier: mBf5uSqOX4ZJrKvjRZX7rKtqy1xmquHK/RVdZH2hNnk= Subject key identifier: D9:EE:9F:33:56:30:12:FD:BA:56:36:F7:6B:55:5B:DC:89:47:E4:39 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7CD0A912562221F70761885B26B95B70A2871FB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/806d975f-8076-4899-9f8c-a8faa137870f/0/D9EE9F33563012FDBA5636F76B555BDC8947E439.mft caRepository: rsync://rpki-rsync.idnic.net/repo/806d975f-8076-4899-9f8c-a8faa137870f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Mon 19 Oct 2026 03:39:54 +0000 Certificate not after: Mon 18 Oct 2027 03:44:54 +0000 Subordinate resources: AS: 152378 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d0:a9:12:56:22:21:f7:07:61:88:5b:26:b9:5b:70:a2:87:1f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 19 03:39:54 2026 GMT Not After : Oct 18 03:44:54 2027 GMT Subject: CN=D9EE9F33563012FDBA5636F76B555BDC8947E439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c5:53:8a:07:a6:4c:d0:1c:e3:d2:6e:73:7e: 34:d6:96:dd:32:87:14:5b:e7:8e:2a:b6:06:fd:84: cf:17:1d:52:bb:40:f2:02:40:bf:75:de:6f:65:47: f5:4e:2b:49:a9:b7:85:08:23:22:14:c6:b6:e4:92: 91:56:4c:53:45:6a:26:ac:56:bc:c9:79:33:f6:c8: f5:39:20:f3:d5:4f:e2:48:00:57:0b:04:f8:57:00: 0d:b0:48:bb:59:ac:45:a2:09:2a:ad:e1:9a:13:a8: 93:f9:8d:1e:7a:1b:e7:08:e6:f8:23:bd:6f:d3:71: 7c:a6:08:a8:2d:23:07:80:26:db:c8:52:24:5b:ad: 0b:e4:bb:1a:de:bc:41:7f:9a:a2:21:cd:15:44:70: 91:4a:94:94:04:8e:fe:1b:cb:41:3a:b8:29:3d:33: fa:87:e1:63:56:dc:44:76:6a:d0:de:8c:bb:62:2e: 93:ab:66:6e:8d:bc:87:11:7c:c0:17:e4:87:e9:6f: 1b:c5:f0:f8:5b:29:d6:68:49:8f:16:fc:94:30:a5: 3d:59:83:89:23:19:e8:e6:29:6e:45:49:7f:d7:ac: b3:56:b2:1c:b5:43:eb:74:c5:b0:6f:49:42:67:bc: 19:c3:30:ea:bf:d8:30:e1:cc:cd:57:19:08:bc:bb: 34:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:EE:9F:33:56:30:12:FD:BA:56:36:F7:6B:55:5B:DC:89:47:E4:39 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/806d975f-8076-4899-9f8c-a8faa137870f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/806d975f-8076-4899-9f8c-a8faa137870f/0/D9EE9F33563012FDBA5636F76B555BDC8947E439.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 152378 Signature Algorithm: sha256WithRSAEncryption 3c:5d:f5:38:a8:10:fb:82:41:67:61:f7:9d:ad:25:05:b7:30: 41:7f:31:5c:f7:46:ae:9d:be:0b:1f:6a:82:8c:ed:66:9d:f1: 80:a2:eb:3f:23:52:70:31:98:ee:1b:15:43:71:d4:85:d5:22: b9:ed:d5:66:37:f2:f0:b4:71:67:d0:a2:9a:64:49:43:ab:99: c1:58:82:20:84:7c:5d:b2:e7:32:e9:8f:10:d9:8b:13:bf:28: 0c:03:42:3e:9a:33:40:7b:af:a6:fc:2a:24:b6:ce:54:ed:aa: f4:05:e6:07:dc:30:e0:7b:7c:33:30:b3:e7:ac:54:6a:73:01: dc:e8:08:95:eb:fe:00:2a:c5:41:b8:0f:0f:b6:3e:eb:aa:57: 69:44:bf:64:fa:fd:51:ae:0a:55:98:1f:bf:cf:ae:b2:f6:57: 52:fa:3c:6f:5c:b6:45:5e:02:ed:fc:28:fd:91:3d:6b:ca:3a: 12:b5:e0:1b:b2:f4:17:0b:e0:c2:31:09:eb:cd:ff:2b:07:aa: 31:3c:da:37:08:0e:22:98:b5:3c:ed:5f:a8:da:8e:ef:f2:c6: 3a:6f:93:d8:75:8e:11:3e:e0:47:6a:13:bd:ba:93:9f:a5:0c: 5a:81:bd:91:e4:43:32:61:38:5a:a2:62:91:72:f1:23:a0:9f: 4e:ca:ed:df -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgIUfNCpElYiIfcHYYhbJrlbcKKHH7gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAxOTAzMzk1NFoX DTI3MTAxODAzNDQ1NFowMzExMC8GA1UEAxMoRDlFRTlGMzM1NjMwMTJGREJBNTYz NkY3NkI1NTVCREM4OTQ3RTQzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALfFU4oHpkzQHOPSbnN+NNaW3TKHFFvnjiq2Bv2EzxcdUrtA8gJAv3Xeb2VH 9U4rSam3hQgjIhTGtuSSkVZMU0VqJqxWvMl5M/bI9Tkg89VP4kgAVwsE+FcADbBI u1msRaIJKq3hmhOok/mNHnob5wjm+CO9b9NxfKYIqC0jB4Am28hSJFutC+S7Gt68 QX+aoiHNFURwkUqUlASO/hvLQTq4KT0z+ofhY1bcRHZq0N6Mu2Iuk6tmbo28hxF8 wBfkh+lvG8Xw+Fsp1mhJjxb8lDClPVmDiSMZ6OYpbkVJf9ess1ayHLVD63TFsG9J Qme8GcMw6r/YMOHMzVcZCLy7NKsCAwEAAaOCArQwggKwMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNnunzNWMBL9ulY292tVW9yJR+Q5MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzgwNmQ5NzVmLTgwNzYtNDg5OS05ZjhjLWE4ZmFhMTM3ODcwZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84MDZkOTc1 Zi04MDc2LTQ4OTktOWY4Yy1hOGZhYTEzNzg3MGYvMC9EOUVFOUYzMzU2MzAxMkZE QkE1NjM2Rjc2QjU1NUJEQzg5NDdFNDM5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJT OjANBgkqhkiG9w0BAQsFAAOCAQEAPF31OKgQ+4JBZ2H3na0lBbcwQX8xXPdGrp2+ Cx9qgoztZp3xgKLrPyNScDGY7hsVQ3HUhdUiue3VZjfy8LRxZ9CimmRJQ6uZwViC IIR8XbLnMumPENmLE78oDANCPpozQHuvpvwqJLbOVO2q9AXmB9ww4Ht8MzCz56xU anMB3OgIlev+ACrFQbgPD7Y+66pXaUS/ZPr9Ua4KVZgfv8+usvZXUvo8b1y2RV4C 7fwo/ZE9a8o6ErXgG7L0FwvgwjEJ683/KweqMTzaNwgOIpi1PO1fqNqO7/LGOm+T 2HWOET7gR2oTvbqTn6UMWoG9keRDMmE4WqJikXLxI6CfTsrt3w== -----END CERTIFICATE-----Generated at Mon Nov 9 22:25:12 2026 by rpki-client