$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/ECC5BEB9267FB3F11EDDB1D2E7105F68644D7E75.cer File: ECC5BEB9267FB3F11EDDB1D2E7105F68644D7E75.cer (raw, json) Hash identifier: HIticWtoGDzgHbCSDCmVv1qJlGq1wzHPgrX6rBk3kiY= Subject key identifier: EC:C5:BE:B9:26:7F:B3:F1:1E:DD:B1:D2:E7:10:5F:68:64:4D:7E:75 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 37DBD987C1F7AF1DBEAD83FBC100B17AD1037477 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e173624b-9566-4833-ba9e-691b00184cf6/0/ECC5BEB9267FB3F11EDDB1D2E7105F68644D7E75.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e173624b-9566-4833-ba9e-691b00184cf6/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Wed 28 Oct 2026 04:02:20 +0000 Certificate not after: Wed 27 Oct 2027 04:07:20 +0000 Subordinate resources: AS: 152347 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:db:d9:87:c1:f7:af:1d:be:ad:83:fb:c1:00:b1:7a:d1:03:74:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 28 04:02:20 2026 GMT Not After : Oct 27 04:07:20 2027 GMT Subject: CN=ECC5BEB9267FB3F11EDDB1D2E7105F68644D7E75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e8:74:94:dd:f5:a6:fb:de:7f:a6:e5:94:e2: d0:c0:3e:1c:70:77:57:a6:13:42:bd:3f:e8:82:d8: 31:19:25:68:04:f4:13:2c:c4:80:a6:8b:1b:38:80: 79:51:15:7b:70:81:6e:7c:3d:bc:cd:21:36:b4:85: 4a:ef:c3:58:93:4c:d5:ca:61:ac:81:5a:a9:f3:dd: 51:a0:55:c2:52:93:c5:d0:77:55:60:90:9d:66:79: ab:e0:9f:07:be:64:7d:79:12:93:a8:8a:52:eb:be: 8d:36:3c:b4:22:a5:d0:5d:cd:f8:bd:13:4a:ed:23: b8:0d:79:f0:f1:d4:2d:bf:dc:b6:ff:8e:fe:df:54: de:6e:53:8a:1a:ec:d5:bf:58:7e:18:03:8a:0d:ae: 89:74:cc:cb:01:99:8c:7b:86:c0:39:a8:59:aa:01: 2b:87:05:2c:bb:89:7c:18:23:16:69:15:ee:56:e6: 33:9e:06:78:10:15:51:91:62:15:6f:85:73:3c:16: 59:f2:7c:f7:c5:57:d7:71:41:d6:fc:8e:39:f4:94: 36:31:3f:00:6c:d2:03:86:4f:0a:51:85:3d:a6:3d: 80:89:f0:b7:99:78:3e:f1:ec:58:15:06:44:5a:04: 80:e7:57:0d:75:ba:f8:82:64:49:45:88:df:3f:35: f3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:C5:BE:B9:26:7F:B3:F1:1E:DD:B1:D2:E7:10:5F:68:64:4D:7E:75 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e173624b-9566-4833-ba9e-691b00184cf6/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e173624b-9566-4833-ba9e-691b00184cf6/0/ECC5BEB9267FB3F11EDDB1D2E7105F68644D7E75.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 152347 Signature Algorithm: sha256WithRSAEncryption 47:7d:17:86:b0:0f:e6:a8:58:29:14:0c:c0:e7:39:29:27:7a: 87:42:0c:79:7c:da:45:d8:4d:ca:7f:0f:95:b8:b4:80:e2:cf: a5:e3:4b:98:73:cb:3a:1e:d7:98:3e:71:fa:ed:14:9b:a7:b3: db:ba:e1:ea:d9:16:c8:43:5a:72:c3:ef:c5:8e:19:52:17:b5: 3a:8b:7b:cf:4f:8a:d6:84:02:d3:37:dc:92:d8:39:4f:09:ea: a8:51:ba:0b:70:8f:2e:f2:79:49:53:a5:38:35:b0:79:4c:cc: 19:c3:0b:47:41:bb:42:af:eb:a2:22:9c:b3:90:61:77:2b:10: bd:a8:bd:fb:2d:23:f0:a1:23:f9:05:cc:3c:19:bf:1a:29:16: ca:42:3c:13:a3:c4:da:18:bd:1b:ae:57:8c:d0:aa:37:c3:f0: c0:6d:a5:b7:18:10:54:01:3e:10:11:94:46:98:15:e8:7f:0e: d2:0f:12:08:68:6a:ed:4c:ce:93:f2:f9:3d:69:cc:65:04:22: b3:79:83:46:f2:d7:73:b1:66:ce:0a:83:24:90:5f:c8:c4:52: cf:e0:fa:49:e3:3d:76:f1:c4:25:5c:38:38:94:81:34:9f:64: 02:a5:ce:97:f6:07:1e:a4:6a:de:a4:69:30:eb:24:8c:d3:94: ae:00:30:52 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgIUN9vZh8H3rx2+rYP7wQCxetEDdHcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAyODA0MDIyMFoX DTI3MTAyNzA0MDcyMFowMzExMC8GA1UEAxMoRUNDNUJFQjkyNjdGQjNGMTFFRERC MUQyRTcxMDVGNjg2NDREN0U3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANXodJTd9ab73n+m5ZTi0MA+HHB3V6YTQr0/6ILYMRklaAT0EyzEgKaLGziA eVEVe3CBbnw9vM0hNrSFSu/DWJNM1cphrIFaqfPdUaBVwlKTxdB3VWCQnWZ5q+Cf B75kfXkSk6iKUuu+jTY8tCKl0F3N+L0TSu0juA158PHULb/ctv+O/t9U3m5Tihrs 1b9YfhgDig2uiXTMywGZjHuGwDmoWaoBK4cFLLuJfBgjFmkV7lbmM54GeBAVUZFi FW+FczwWWfJ898VX13FB1vyOOfSUNjE/AGzSA4ZPClGFPaY9gInwt5l4PvHsWBUG RFoEgOdXDXW6+IJkSUWI3z8182ECAwEAAaOCArQwggKwMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOzFvrkmf7PxHt2x0ucQX2hkTX51MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2UxNzM2MjRiLTk1NjYtNDgzMy1iYTllLTY5MWIwMDE4NGNmNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lMTczNjI0 Yi05NTY2LTQ4MzMtYmE5ZS02OTFiMDAxODRjZjYvMC9FQ0M1QkVCOTI2N0ZCM0Yx MUVEREIxRDJFNzEwNUY2ODY0NEQ3RTc1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJT GzANBgkqhkiG9w0BAQsFAAOCAQEAR30XhrAP5qhYKRQMwOc5KSd6h0IMeXzaRdhN yn8Plbi0gOLPpeNLmHPLOh7XmD5x+u0Um6ez27rh6tkWyENacsPvxY4ZUhe1Oot7 z0+K1oQC0zfcktg5TwnqqFG6C3CPLvJ5SVOlODWweUzMGcMLR0G7Qq/roiKcs5Bh dysQvai9+y0j8KEj+QXMPBm/GikWykI8E6PE2hi9G65XjNCqN8PwwG2ltxgQVAE+ EBGURpgV6H8O0g8SCGhq7UzOk/L5PWnMZQQis3mDRvLXc7FmzgqDJJBfyMRSz+D6 SeM9dvHEJVw4OJSBNJ9kAqXOl/YHHqRq3qRpMOskjNOUrgAwUg== -----END CERTIFICATE-----Generated at Mon Nov 9 21:36:20 2026 by rpki-client