$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/DD080F16E31D7F6244B2F06C9116C76917BDB6C3.cer File: DD080F16E31D7F6244B2F06C9116C76917BDB6C3.cer (raw, json) Hash identifier: wxVKszGzs5nV+FN+cNTT7W8fUA6PbW803I05WJU4juE= Subject key identifier: DD:08:0F:16:E3:1D:7F:62:44:B2:F0:6C:91:16:C7:69:17:BD:B6:C3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 196A68006F3C934066080D70B147A96F3C06EE20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7dbeba32-3ed9-4f98-b9cf-c5c9402737f1/0/DD080F16E31D7F6244B2F06C9116C76917BDB6C3.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7dbeba32-3ed9-4f98-b9cf-c5c9402737f1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Tue 20 Oct 2026 19:40:13 +0000 Certificate not after: Tue 19 Oct 2027 19:45:13 +0000 Subordinate resources: AS: 153806 IP: 163.223.118.0/23 IP: 2001:df5:3ec0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 04:20:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:6a:68:00:6f:3c:93:40:66:08:0d:70:b1:47:a9:6f:3c:06:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 20 19:40:13 2026 GMT Not After : Oct 19 19:45:13 2027 GMT Subject: CN=DD080F16E31D7F6244B2F06C9116C76917BDB6C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8a:85:f1:b7:4e:93:45:6a:4c:bf:de:67:04: 8d:22:62:2f:05:08:2d:0b:fb:6d:7e:64:35:a0:99: 19:38:d4:f2:ac:c7:27:cc:48:ba:0d:54:96:83:d9: 50:92:ab:28:45:a3:1f:a2:64:0f:14:a0:c6:a3:af: 57:6e:cb:84:3e:6b:d9:3d:3a:aa:25:e2:8b:42:c1: 82:ad:72:66:bf:cb:fc:b1:4c:f6:12:e9:16:4b:cd: 78:cb:c7:f2:f5:04:9a:88:f5:02:62:98:64:17:e8: d1:8b:fb:0c:fd:bc:37:36:77:9c:db:ae:17:e3:c7: e0:38:69:9d:4a:e5:e4:15:44:23:c4:1c:41:ef:08: 77:80:ee:76:07:e9:99:e4:7e:0b:86:2f:45:c5:4e: 0a:9c:42:1d:a1:fb:0b:2c:97:9d:6b:f0:81:7f:a0: 06:5c:4d:b1:6a:bd:64:33:3e:1a:26:e3:23:6c:af: 51:41:67:e0:28:d7:57:ac:91:88:78:9c:4f:2c:35: 4e:89:b5:85:08:c9:80:da:03:c6:90:22:5b:e6:04: d3:6e:e6:fb:49:d1:ad:cc:5f:c1:ca:33:79:90:87: 29:20:2a:0b:b9:a3:d1:12:8a:ca:83:68:a2:91:bd: f7:da:51:92:a1:45:f0:e5:6e:69:7c:f1:14:95:96: 77:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DD:08:0F:16:E3:1D:7F:62:44:B2:F0:6C:91:16:C7:69:17:BD:B6:C3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7dbeba32-3ed9-4f98-b9cf-c5c9402737f1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7dbeba32-3ed9-4f98-b9cf-c5c9402737f1/0/DD080F16E31D7F6244B2F06C9116C76917BDB6C3.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.223.118.0/23 IPv6: 2001:df5:3ec0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 153806 Signature Algorithm: sha256WithRSAEncryption 21:7f:ad:ab:5c:41:ac:78:0c:f2:0b:4c:2e:f0:0a:1e:18:3a: f4:91:55:c9:6b:54:e5:58:fb:6d:ce:a5:1c:dd:f7:c7:fb:76: 9f:8d:03:52:6e:e0:46:6e:f5:60:ad:46:ad:1d:45:eb:aa:e4: 19:0c:f1:70:3f:77:26:38:88:e2:c0:8c:90:c3:1b:5e:61:b0: 9e:17:21:a7:fc:3a:36:8c:54:db:87:87:ce:ac:eb:26:f2:9e: 6b:c6:e2:68:96:36:c2:02:df:da:f7:78:64:41:ca:cd:af:1c: 3c:36:49:24:c5:7c:fa:08:68:5d:36:96:d8:ec:2d:3b:b7:1c: f8:fd:9c:5f:df:84:5a:2e:7d:68:15:34:50:b2:60:ca:e6:8c: 5c:56:99:2d:27:d8:3b:d8:70:b4:5c:d8:b1:45:db:59:4a:2d: 66:00:5e:9f:73:ec:64:ff:c0:ea:95:5d:c8:ff:e8:a4:1f:33: 81:e0:7d:82:ac:ef:d3:cb:5a:2b:65:a6:be:1a:89:f7:42:a1: 2d:f8:1e:40:f0:73:62:ba:60:fd:b1:19:58:18:03:99:bb:8f: 20:f9:70:fe:d5:a5:12:13:a6:4f:c2:98:96:6d:40:b1:69:49: 2a:2e:ef:1a:74:64:38:da:c5:aa:88:52:d6:f6:cb:c9:59:ec: 0c:f9:96:e6 -----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgIUGWpoAG88k0BmCA1wsUepbzwG7iAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAyMDE5NDAxM1oX DTI3MTAxOTE5NDUxM1owMzExMC8GA1UEAxMoREQwODBGMTZFMzFEN0Y2MjQ0QjJG MDZDOTExNkM3NjkxN0JEQjZDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKqKhfG3TpNFaky/3mcEjSJiLwUILQv7bX5kNaCZGTjU8qzHJ8xIug1UloPZ UJKrKEWjH6JkDxSgxqOvV27LhD5r2T06qiXii0LBgq1yZr/L/LFM9hLpFkvNeMvH 8vUEmoj1AmKYZBfo0Yv7DP28NzZ3nNuuF+PH4DhpnUrl5BVEI8QcQe8Id4Dudgfp meR+C4YvRcVOCpxCHaH7CyyXnWvwgX+gBlxNsWq9ZDM+GibjI2yvUUFn4CjXV6yR iHicTyw1Tom1hQjJgNoDxpAiW+YE027m+0nRrcxfwcozeZCHKSAqC7mj0RKKyoNo opG999pRkqFF8OVuaXzxFJWWdxcCAwEAAaOCAuYwggLiMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN0IDxbjHX9iRLLwbJEWx2kXvbbDMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdkYmViYTMyLTNlZDktNGY5OC1iOWNmLWM1Yzk0MDI3MzdmMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ZGJlYmEz Mi0zZWQ5LTRmOTgtYjljZi1jNWM5NDAyNzM3ZjEvMC9ERDA4MEYxNkUzMUQ3RjYy NDRCMkYwNkM5MTE2Qzc2OTE3QkRCNkMzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBo992MA8EAgACMAkDBwAgAQ31PsAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AljOMA0GCSqGSIb3DQEBCwUAA4IBAQAhf62rXEGseAzyC0wu8AoeGDr0kVXJa1Tl WPttzqUc3ffH+3afjQNSbuBGbvVgrUatHUXrquQZDPFwP3cmOIjiwIyQwxteYbCe FyGn/Do2jFTbh4fOrOsm8p5rxuJoljbCAt/a93hkQcrNrxw8NkkkxXz6CGhdNpbY 7C07txz4/Zxf34RaLn1oFTRQsmDK5oxcVpktJ9g72HC0XNixRdtZSi1mAF6fc+xk /8DqlV3I/+ikHzOB4H2CrO/Ty1orZaa+Gon3QqEt+B5A8HNiumD9sRlYGAOZu48g +XD+1aUSE6ZPwpiWbUCxaUkqLu8adGQ42sWqiFLW9svJWewM+Zbm -----END CERTIFICATE-----Generated at Tue Nov 10 03:31:51 2026 by rpki-client