$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/3/0DBD006C7DED00F7D7A4FF599C57D7B607FE7A00.cer File: 0DBD006C7DED00F7D7A4FF599C57D7B607FE7A00.cer (raw, json) Hash identifier: w7Qd7OlgDJYgwi9GEdRaOrxKbVlxSC08fTdduwFd/uA= Subject key identifier: 0D:BD:00:6C:7D:ED:00:F7:D7:A4:FF:59:9C:57:D7:B6:07:FE:7A:00 Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53 Certificate issuer: /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53 Certificate serial: 7EF9C890B533D07AF646D0E8F1FCF5EEF0D3007C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer Manifest: rsync://rpki-rsync.idnic.net/repo/18d45855-661e-4603-9217-dba609484ba2/1/0DBD006C7DED00F7D7A4FF599C57D7B607FE7A00.mft caRepository: rsync://rpki-rsync.idnic.net/repo/18d45855-661e-4603-9217-dba609484ba2/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Thu 05 Nov 2026 07:07:47 +0000 Certificate not after: Thu 04 Nov 2027 07:12:47 +0000 Subordinate resources: IP: 151.158.82.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 10:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f9:c8:90:b5:33:d0:7a:f6:46:d0:e8:f1:fc:f5:ee:f0:d3:00:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53 Validity Not Before: Nov 5 07:07:47 2026 GMT Not After : Nov 4 07:12:47 2027 GMT Subject: CN=0DBD006C7DED00F7D7A4FF599C57D7B607FE7A00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e5:90:bc:e1:15:17:2f:53:ef:27:d3:59:dd: 40:71:16:8d:67:e5:f8:a6:10:e9:d0:5c:94:fd:b5: 11:74:f2:97:4e:0a:4c:8f:a8:4f:dd:e6:16:b7:4f: ab:2c:1f:07:5a:1f:bd:69:97:cc:91:b1:b2:f7:96: ad:fd:8d:c9:69:f5:7d:b7:2c:d3:2f:40:b4:c2:de: 78:20:53:9a:a4:23:7f:e0:fb:b1:80:5d:7b:91:b6: e6:bb:38:4f:92:f7:49:8c:40:1f:d7:cd:07:59:23: 5c:d9:a0:4a:6c:31:11:0d:65:b0:b2:d1:20:05:77: 3d:d5:e6:2f:05:7b:ab:e1:6a:eb:15:32:46:8d:50: 89:04:6b:c0:ad:88:61:a7:7c:b5:58:f9:7d:02:d6: 8f:8f:51:c5:06:e7:00:d4:c1:98:d7:99:4e:c3:35: f1:50:60:b0:0e:f5:b8:ab:0f:61:a7:f1:0d:93:cd: bd:db:e5:ec:92:f1:c8:05:6f:35:0e:44:f8:f8:10: 88:74:bc:14:ba:b3:af:b6:23:85:f0:f9:47:09:90: c8:c6:dc:e8:2b:4a:3c:6f:83:9d:3f:47:80:cd:25: ba:53:6b:aa:07:e2:ee:22:80:5c:97:12:e4:59:c0: 0b:a4:96:69:e7:13:4b:9a:21:61:93:81:68:c4:6b: 6a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:BD:00:6C:7D:ED:00:F7:D7:A4:FF:59:9C:57:D7:B6:07:FE:7A:00 X509v3 Authority Key Identifier: keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/18d45855-661e-4603-9217-dba609484ba2/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/18d45855-661e-4603-9217-dba609484ba2/1/0DBD006C7DED00F7D7A4FF599C57D7B607FE7A00.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.158.82.0/23 Signature Algorithm: sha256WithRSAEncryption 53:80:2e:78:f0:70:9f:21:65:39:70:23:67:61:8c:10:18:67: d6:6a:52:49:28:ac:cc:80:82:0e:7b:a6:dd:d9:7c:27:d8:fd: 6a:0b:06:b6:c8:60:0b:3d:ac:ca:7b:ff:88:b5:04:6d:6c:b6: 7b:49:a7:da:16:7f:36:4c:7b:67:62:5e:1a:95:7d:05:37:5f: d6:7e:f5:e8:94:2a:40:5e:ad:fa:a2:4d:71:09:bd:0b:ca:ee: 70:84:8d:fe:d0:73:bc:1b:98:87:cc:1c:ef:46:2e:d1:cf:21: 4c:59:e8:cc:64:e2:9a:d1:f8:27:11:b5:50:2b:99:1c:58:2b: c8:e3:91:6b:5c:c9:48:c4:cf:e6:96:bd:cf:65:b7:0f:d5:12: 52:9e:1e:80:3b:8b:51:39:09:10:3c:45:71:68:e0:40:b7:86: a0:b2:50:49:03:7d:71:8b:54:38:a9:31:e1:12:ba:21:b2:0f: 2e:13:ee:9d:28:a0:ec:08:d7:50:51:44:3b:0a:79:7c:4b:9a: dd:ad:87:1c:d9:4a:2f:90:fd:9d:d6:82:35:1c:34:db:6b:ac: 96:ca:d6:c2:e1:ae:ea:87:85:b0:0d:ec:3e:ee:80:15:95:b9: 8e:c3:64:86:13:d1:5d:8f:11:ad:96:90:d7:91:d9:3d:c1:80: 39:56:14:d5 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUfvnIkLUz0Hr2RtDo8fz17vDTAHwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhGOTI3REYzODQ4 QUJBQkNBODhGRjNEOTVBMUU1QjE2NzU0QzYzQTUzMB4XDTI2MTEwNTA3MDc0N1oX DTI3MTEwNDA3MTI0N1owMzExMC8GA1UEAxMoMERCRDAwNkM3REVEMDBGN0Q3QTRG RjU5OUM1N0Q3QjYwN0ZFN0EwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKrlkLzhFRcvU+8n01ndQHEWjWfl+KYQ6dBclP21EXTyl04KTI+oT93mFrdP qywfB1ofvWmXzJGxsveWrf2NyWn1fbcs0y9AtMLeeCBTmqQjf+D7sYBde5G25rs4 T5L3SYxAH9fNB1kjXNmgSmwxEQ1lsLLRIAV3PdXmLwV7q+Fq6xUyRo1QiQRrwK2I Yad8tVj5fQLWj49RxQbnANTBmNeZTsM18VBgsA71uKsPYafxDZPNvdvl7JLxyAVv NQ5E+PgQiHS8FLqzr7YjhfD5RwmQyMbc6CtKPG+DnT9HgM0lulNrqgfi7iKAXJcS 5FnAC6SWaecTS5ohYZOBaMRrau0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFA29AGx97QD316T/WZxX17YH/noAMB8GA1UdIwQYMBaAFPkn 3zhIq6vKiP89laHlsWdUxjpTMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMy9G OTI3REYzODQ4QUJBQkNBODhGRjNEOTVBMUU1QjE2NzU0QzYzQTUzLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CMzIyQTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi8tU2Zm T0VpcnE4cUlfejJWb2VXeFoxVEdPbE0uY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE4ZDQ1ODU1LTY2MWUtNDYwMy05MjE3LWRiYTYwOTQ4NGJhMi8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xOGQ0NTg1 NS02NjFlLTQ2MDMtOTIxNy1kYmE2MDk0ODRiYTIvMS8wREJEMDA2QzdERUQwMEY3 RDdBNEZGNTk5QzU3RDdCNjA3RkU3QTAwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBl55SMA0GCSqGSIb3DQEBCwUAA4IBAQBTgC548HCfIWU5cCNnYYwQGGfWalJJ KKzMgIIOe6bd2Xwn2P1qCwa2yGALPazKe/+ItQRtbLZ7SafaFn82THtnYl4alX0F N1/WfvXolCpAXq36ok1xCb0Lyu5whI3+0HO8G5iHzBzvRi7RzyFMWejMZOKa0fgn EbVQK5kcWCvI45FrXMlIxM/mlr3PZbcP1RJSnh6AO4tROQkQPEVxaOBAt4agslBJ A31xi1Q4qTHhErohsg8uE+6dKKDsCNdQUUQ7Cnl8S5rdrYcc2UovkP2d1oI1HDTb a6yWytbC4a7qh4WwDew+7oAVlbmOw2SGE9FdjxGtlpDXkdk9wYA5VhTV -----END CERTIFICATE-----Generated at Tue Nov 10 20:58:20 2026 by rpki-client