$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/FE4178477DF7BF579AE9E70B66FB1AEAC2AB450E.cer File: FE4178477DF7BF579AE9E70B66FB1AEAC2AB450E.cer (raw, json) Hash identifier: yt9gyrrVxD3mT1v5RR1yDpzgXeANHXS2kX7zBApSYAo= Subject key identifier: FE:41:78:47:7D:F7:BF:57:9A:E9:E7:0B:66:FB:1A:EA:C2:AB:45:0E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 415DA61539EA554B89D8F470469B4BE245FF7E41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/16f21263-26c6-4047-8463-82f6a5c072ba/0/FE4178477DF7BF579AE9E70B66FB1AEAC2AB450E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/16f21263-26c6-4047-8463-82f6a5c072ba/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Nov 2026 08:50:09 +0000 Certificate not after: Tue 02 Nov 2027 08:55:09 +0000 Subordinate resources: AS: 154992 IP: 203.23.54.0/24 IP: 2001:df7:a4c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:5d:a6:15:39:ea:55:4b:89:d8:f4:70:46:9b:4b:e2:45:ff:7e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Nov 3 08:50:09 2026 GMT Not After : Nov 2 08:55:09 2027 GMT Subject: CN=FE4178477DF7BF579AE9E70B66FB1AEAC2AB450E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:63:41:58:ae:05:1c:36:d6:e6:da:86:c6:22: 9d:57:2d:7a:cd:dc:d8:48:cc:ef:ed:b6:93:2b:af: 53:7d:62:82:ab:70:07:3e:7d:10:a1:1a:82:b6:a9: af:db:2e:16:c6:a8:4d:1e:13:be:4f:ac:3a:7a:ba: e1:9f:26:17:4f:bc:f9:20:a5:95:4d:f5:38:6d:ba: fb:ea:a4:9d:db:67:13:de:fc:be:58:d1:a2:6c:0d: de:9d:a9:32:26:65:4c:7e:d5:9d:00:8f:73:60:05: 04:a2:d0:78:b0:92:17:af:5b:9b:54:e9:9b:05:ef: 20:4d:25:ed:c7:7f:24:e7:4e:1c:04:f0:2c:ae:db: 1a:be:44:b7:2d:ab:f3:ed:40:92:1a:d3:b5:28:85: 59:2e:95:86:b5:00:da:ee:25:ea:e3:4e:f3:1e:55: 18:95:3e:e0:ef:bf:71:39:8f:7b:00:49:7a:9e:3d: e8:15:9b:4c:04:20:72:d6:5c:da:9c:fc:56:b0:33: 71:af:2c:46:e0:ae:4d:d3:4d:6e:56:6c:04:d0:5d: 69:f6:1b:dd:32:c5:25:b5:cd:90:01:12:76:18:39: f1:8c:46:97:0c:11:56:49:9d:ff:29:08:83:43:6f: 3b:41:74:00:4d:70:3d:3b:73:ea:3b:d7:d8:c8:06: 34:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FE:41:78:47:7D:F7:BF:57:9A:E9:E7:0B:66:FB:1A:EA:C2:AB:45:0E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/16f21263-26c6-4047-8463-82f6a5c072ba/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/16f21263-26c6-4047-8463-82f6a5c072ba/0/FE4178477DF7BF579AE9E70B66FB1AEAC2AB450E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.23.54.0/24 IPv6: 2001:df7:a4c0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 154992 Signature Algorithm: sha256WithRSAEncryption 13:13:0e:db:5b:e1:89:7d:4a:b3:ba:b5:7d:4f:91:00:b2:5c: ba:f9:73:97:d3:7a:b0:f0:e0:df:6b:70:08:f1:7b:c3:b5:23: ce:be:e6:54:1c:e1:b7:50:9f:3e:50:9e:cd:a2:ef:6f:c4:de: bf:51:94:62:06:69:9b:b5:5a:97:82:33:32:f1:2e:02:95:4f: 31:d8:91:c7:b2:6c:24:ab:9a:df:c2:34:bc:2e:08:81:0a:e4: ab:d0:b4:82:81:d7:dd:92:a9:26:f0:ea:43:c8:83:ed:70:13: c9:fe:d8:e0:74:c2:e0:77:cb:48:55:ce:18:f1:dd:be:6c:77: f4:85:5d:0a:2c:1e:86:bc:5b:58:7f:c6:b5:4e:5b:bb:92:13: ed:42:fb:0e:9f:4f:ac:88:a0:04:68:fc:23:0f:12:c0:d8:28: 21:67:7a:23:c2:af:60:7b:ab:3d:a3:dd:8c:37:a1:6d:94:07: 35:b9:e9:18:94:a3:b7:38:c9:85:62:d9:5b:04:43:6b:25:cb: 0f:de:25:43:e8:a6:34:a5:27:a1:41:9a:d4:75:ee:27:6a:1a: 30:cb:63:7b:f1:f6:42:91:b5:15:45:0f:64:65:b0:a3:0c:c0: ab:9c:74:14:7a:95:87:26:f7:6d:9f:56:ef:33:55:7b:b9:64: 1f:05:f4:48 -----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgIUQV2mFTnqVUuJ2PRwRptL4kX/fkEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTEwMzA4NTAwOVoX DTI3MTEwMjA4NTUwOVowMzExMC8GA1UEAxMoRkU0MTc4NDc3REY3QkY1NzlBRTlF NzBCNjZGQjFBRUFDMkFCNDUwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9jQViuBRw21ubahsYinVctes3c2EjM7+22kyuvU31igqtwBz59EKEagrap r9suFsaoTR4Tvk+sOnq64Z8mF0+8+SCllU31OG26++qkndtnE978vljRomwN3p2p MiZlTH7VnQCPc2AFBKLQeLCSF69bm1TpmwXvIE0l7cd/JOdOHATwLK7bGr5Ety2r 8+1AkhrTtSiFWS6VhrUA2u4l6uNO8x5VGJU+4O+/cTmPewBJep496BWbTAQgctZc 2pz8VrAzca8sRuCuTdNNblZsBNBdafYb3TLFJbXNkAESdhg58YxGlwwRVkmd/ykI g0NvO0F0AE1wPTtz6jvX2MgGNLMCAwEAAaOCAuYwggLiMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP5BeEd9979XmunnC2b7GurCq0UOMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE2ZjIxMjYzLTI2YzYtNDA0Ny04NDYzLTgyZjZhNWMwNzJiYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xNmYyMTI2 My0yNmM2LTQwNDctODQ2My04MmY2YTVjMDcyYmEvMC9GRTQxNzg0NzdERjdCRjU3 OUFFOUU3MEI2NkZCMUFFQUMyQUI0NTBFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAyxc2MA8EAgACMAkDBwAgAQ33pMAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Al1wMA0GCSqGSIb3DQEBCwUAA4IBAQATEw7bW+GJfUqzurV9T5EAsly6+XOX03qw 8ODfa3AI8XvDtSPOvuZUHOG3UJ8+UJ7Nou9vxN6/UZRiBmmbtVqXgjMy8S4ClU8x 2JHHsmwkq5rfwjS8LgiBCuSr0LSCgdfdkqkm8OpDyIPtcBPJ/tjgdMLgd8tIVc4Y 8d2+bHf0hV0KLB6GvFtYf8a1Tlu7khPtQvsOn0+siKAEaPwjDxLA2CghZ3ojwq9g e6s9o92MN6FtlAc1uekYlKO3OMmFYtlbBENrJcsP3iVD6KY0pSehQZrUde4nahow y2N78fZCkbUVRQ9kZbCjDMCrnHQUepWHJvdtn1bvM1V7uWQfBfRI -----END CERTIFICATE-----Generated at Mon Nov 9 17:24:36 2026 by rpki-client