$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/97BE33E9A7A32D1E4DDAD8F13872317D75028EDF.cer File: 97BE33E9A7A32D1E4DDAD8F13872317D75028EDF.cer (raw, json) Hash identifier: 16eguXR1mGzcJHVTYnRmzk9Du4/UhgG7E+P0EdIKHj8= Subject key identifier: 97:BE:33:E9:A7:A3:2D:1E:4D:DA:D8:F1:38:72:31:7D:75:02:8E:DF Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 250800916EC9B415775679653C9D8CEDF45FECD9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer CRL Distribution Point: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Manifest: rsync://rpki-rsync.idnic.net/repo/9d30387f-2bf0-452f-b7a6-1e19f360a56d/1/97BE33E9A7A32D1E4DDAD8F13872317D75028EDF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9d30387f-2bf0-452f-b7a6-1e19f360a56d/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Thu 12 Nov 2026 15:52:11 +0000 Certificate not after: Thu 11 Nov 2027 15:57:11 +0000 Subordinate resources: IP: 157.85.192.0/19 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:08:00:91:6e:c9:b4:15:77:56:79:65:3c:9d:8c:ed:f4:5f:ec:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Nov 12 15:52:11 2026 GMT Not After : Nov 11 15:57:11 2027 GMT Subject: CN=97BE33E9A7A32D1E4DDAD8F13872317D75028EDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e1:4e:3f:20:34:ce:fa:8b:e2:b8:b3:96:4d: df:2d:93:08:b0:77:66:0c:a1:27:e8:fe:7e:47:69: b5:09:de:99:fc:bf:e7:9c:ab:93:74:99:30:a9:1e: 5a:3d:89:d6:97:90:8a:18:a7:d4:bb:ed:71:f0:99: ea:2f:12:02:1c:24:d6:e5:bc:ef:01:8d:d8:f0:c0: b4:6e:35:7b:a2:d5:c3:00:11:c6:d8:3f:53:fc:f2: 1e:85:9d:6f:83:77:f8:9b:bc:b5:bb:3a:db:75:ac: b2:7e:bf:ff:63:dc:33:d9:b3:96:94:09:d8:1f:01: 58:07:bc:4d:59:f7:96:3b:19:32:c3:db:aa:67:ba: ad:2b:68:c8:b7:0d:29:cf:b4:1c:38:44:2a:27:b1: 46:c5:81:d6:e7:3b:36:43:79:e5:3e:a8:5d:2f:4c: 48:d5:c5:78:a2:0e:d0:69:fb:d8:43:06:22:de:6b: 23:a9:09:b2:b1:c3:98:65:24:97:76:c7:99:fb:f7: a3:77:59:14:41:8a:47:37:c0:18:ab:6e:04:57:9d: dc:0a:d7:27:59:73:6e:9b:c6:86:de:02:53:b6:11: 3c:bd:b6:32:50:e9:0a:f8:9a:62:f5:26:b9:e0:5d: 00:9d:57:fe:98:51:7b:81:a7:fa:68:b0:bb:ef:41: 95:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 97:BE:33:E9:A7:A3:2D:1E:4D:DA:D8:F1:38:72:31:7D:75:02:8E:DF X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9d30387f-2bf0-452f-b7a6-1e19f360a56d/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9d30387f-2bf0-452f-b7a6-1e19f360a56d/1/97BE33E9A7A32D1E4DDAD8F13872317D75028EDF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.85.192.0/19 Signature Algorithm: sha256WithRSAEncryption af:39:c6:ea:25:76:a0:8c:9a:90:27:08:fd:43:08:57:b1:8c: 73:62:c4:86:df:fb:51:81:8e:13:b9:f4:e6:e9:b6:00:16:64: 20:b1:06:0a:65:9f:8c:3c:94:f7:71:62:b6:7f:51:d0:15:b5: 72:9f:1d:18:65:da:e0:77:6f:f3:c1:4c:23:d1:ee:42:99:21: 27:0c:55:d3:c6:a2:c4:8f:0b:aa:44:a4:75:9f:8b:75:33:2f: e5:c8:b1:5e:cd:5c:33:5e:58:c0:43:fd:23:b5:b5:ea:ed:89: b5:4b:30:01:9a:84:f1:f7:33:54:f3:91:a5:b5:b2:18:7e:56: 63:cc:1f:34:54:93:6f:d7:a0:d9:9b:ae:02:40:1e:76:de:ac: cf:b1:3a:b2:53:a8:b7:cc:ff:0e:0e:f2:65:7d:eb:c5:45:29: 1d:56:3b:2d:e5:d4:81:15:5a:ac:96:d0:90:da:85:e9:cc:e1: ad:9f:fd:7b:28:b7:37:a2:27:f2:1f:ab:c9:f7:65:ac:bf:8f: a5:65:d4:32:05:72:41:99:6c:f9:07:4f:01:0e:1b:53:0f:26: e8:2d:66:b1:9a:b7:25:31:4e:0a:e5:13:50:de:20:d8:e0:97: 30:c2:2d:de:ed:01:37:96:88:5d:1b:7f:4f:14:88:db:6f:ab: 33:e1:fa:63 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUJQgAkW7JtBV3VnllPJ2M7fRf7NkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MTExMjE1NTIxMVoX DTI3MTExMTE1NTcxMVowMzExMC8GA1UEAxMoOTdCRTMzRTlBN0EzMkQxRTREREFE OEYxMzg3MjMxN0Q3NTAyOEVERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKbhTj8gNM76i+K4s5ZN3y2TCLB3ZgyhJ+j+fkdptQnemfy/55yrk3SZMKke Wj2J1peQihin1LvtcfCZ6i8SAhwk1uW87wGN2PDAtG41e6LVwwARxtg/U/zyHoWd b4N3+Ju8tbs623Wssn6//2PcM9mzlpQJ2B8BWAe8TVn3ljsZMsPbqme6rStoyLcN Kc+0HDhEKiexRsWB1uc7NkN55T6oXS9MSNXFeKIO0Gn72EMGIt5rI6kJsrHDmGUk l3bHmfv3o3dZFEGKRzfAGKtuBFed3ArXJ1lzbpvGht4CU7YRPL22MlDpCviaYvUm ueBdAJ1X/phRe4Gn+miwu+9BlbUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJe+M+mnoy0eTdrY8ThyMX11Ao7fMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzlkMzAzODdmLTJiZjAtNDUyZi1iN2E2LTFlMTlmMzYwYTU2ZC8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85ZDMwMzg3 Zi0yYmYwLTQ1MmYtYjdhNi0xZTE5ZjM2MGE1NmQvMS85N0JFMzNFOUE3QTMyRDFF NEREQUQ4RjEzODcyMzE3RDc1MDI4RURGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQFnVXAMA0GCSqGSIb3DQEBCwUAA4IBAQCvOcbqJXagjJqQJwj9QwhXsYxzYsSG 3/tRgY4TufTm6bYAFmQgsQYKZZ+MPJT3cWK2f1HQFbVynx0YZdrgd2/zwUwj0e5C mSEnDFXTxqLEjwuqRKR1n4t1My/lyLFezVwzXljAQ/0jtbXq7Ym1SzABmoTx9zNU 85GltbIYflZjzB80VJNv16DZm64CQB523qzPsTqyU6i3zP8ODvJlfevFRSkdVjst 5dSBFVqsltCQ2oXpzOGtn/17KLc3oifyH6vJ92Wsv4+lZdQyBXJBmWz5B08BDhtT DyboLWaxmrclMU4K5RNQ3iDY4Jcwwi3e7QE3lohdG39PFIjbb6sz4fpj -----END CERTIFICATE-----Generated at Sun Nov 15 00:32:18 2026 by rpki-client