$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/259644D6CC2FFF59D9034CCA59B2AE8B06C7A06E.cer File: 259644D6CC2FFF59D9034CCA59B2AE8B06C7A06E.cer (raw, json) Hash identifier: 5pQVVf2qznKqvBcdtkDNzrQpOFtXvNMN+gEVCHMHVbk= Subject key identifier: 25:96:44:D6:CC:2F:FF:59:D9:03:4C:CA:59:B2:AE:8B:06:C7:A0:6E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3DA3B3F062D6C5FEAD3AF70CD3418111F9179AD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer CRL Distribution Point: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Manifest: rsync://rpki-rsync.idnic.net/repo/9d30387f-2bf0-452f-b7a6-1e19f360a56d/0/259644D6CC2FFF59D9034CCA59B2AE8B06C7A06E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9d30387f-2bf0-452f-b7a6-1e19f360a56d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Thu 12 Nov 2026 15:52:08 +0000 Certificate not after: Thu 11 Nov 2027 15:57:08 +0000 Subordinate resources: IP: 203.33.35.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a3:b3:f0:62:d6:c5:fe:ad:3a:f7:0c:d3:41:81:11:f9:17:9a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Nov 12 15:52:08 2026 GMT Not After : Nov 11 15:57:08 2027 GMT Subject: CN=259644D6CC2FFF59D9034CCA59B2AE8B06C7A06E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6f:2c:1e:b1:aa:cd:9f:cb:bf:c4:46:fd:ab: ac:c9:24:86:ed:47:a7:48:ca:ce:40:05:50:f9:ce: b1:47:42:3a:99:8b:41:c7:6f:5c:6a:c1:a7:bf:32: ee:87:35:f4:56:5f:c4:3a:f7:a0:a4:f4:d9:a5:a6: b7:1f:a4:a8:1c:7e:ac:a1:15:af:85:ef:69:b5:b7: 77:f5:09:e9:de:38:a4:21:cb:82:87:47:33:c0:aa: b6:02:34:09:78:85:9b:bf:1f:58:40:b5:d7:bc:8c: 80:44:28:84:47:92:ac:1f:8e:f5:fa:8d:5d:e3:45: 3d:fb:27:e2:9b:92:44:d6:98:51:97:9e:84:84:34: e7:fd:a2:b7:12:78:47:af:c7:65:07:9e:07:b8:75: 5c:52:9d:d0:53:d0:9e:26:ca:6e:9d:3e:71:a0:dd: d1:1d:63:d3:92:62:7b:72:64:1a:59:44:52:08:11: 30:46:4d:82:4a:67:95:bb:b6:a1:8d:b1:7b:96:6e: 5c:c8:c0:5f:d4:a5:20:be:0b:86:b5:03:f5:ad:13: c0:22:52:12:96:a9:d8:b8:34:d9:71:79:29:1a:96: 37:a5:f2:4e:3a:61:2e:33:ec:64:95:7c:7f:8d:eb: c2:40:10:7e:4a:0f:f8:ee:d3:52:b3:b2:2a:89:27: 67:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:96:44:D6:CC:2F:FF:59:D9:03:4C:CA:59:B2:AE:8B:06:C7:A0:6E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9d30387f-2bf0-452f-b7a6-1e19f360a56d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9d30387f-2bf0-452f-b7a6-1e19f360a56d/0/259644D6CC2FFF59D9034CCA59B2AE8B06C7A06E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.33.35.0/24 Signature Algorithm: sha256WithRSAEncryption 77:17:da:bf:09:c6:44:c7:de:33:70:4a:0a:d1:94:c4:69:77: fe:8c:51:98:c4:2f:03:01:c3:a8:6b:74:ae:67:ce:54:f5:f1: 19:01:a4:38:0c:c3:57:3f:3a:a2:0a:54:81:66:af:4c:78:35: 6e:7c:fb:cb:b3:a5:48:78:da:24:6f:9b:b8:a7:e2:3e:7d:ca: 30:aa:fb:e4:de:bc:21:a8:76:aa:5f:2f:a8:31:e3:8d:55:e9: c1:51:15:62:e9:bf:02:41:49:30:72:59:73:69:12:c5:2b:fa: 70:68:5b:c1:ed:84:78:65:6f:c8:f3:55:f7:4b:d2:5a:3a:2e: ee:50:98:ea:18:b7:a8:3e:6f:b4:06:28:5d:56:04:f6:a1:f4: ba:c9:69:da:47:3d:2a:17:cb:09:a8:fb:51:23:53:cc:a1:7c: d7:33:3e:fb:02:ad:fa:98:7a:a9:da:ab:05:fa:5e:78:7e:d1: 24:7f:39:d7:b2:44:f2:cf:c0:20:bc:ee:e6:93:32:f7:11:cd: c5:2f:ec:90:79:7b:69:fa:ad:c0:5a:36:d3:e7:c1:34:e0:f2: 8a:d7:99:3b:2b:9c:01:0d:d5:27:8c:87:56:d5:75:ef:e1:b3: 35:36:27:6a:4a:31:37:13:36:3e:71:be:24:4e:ed:ab:80:48: 94:f1:bd:13 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUPaOz8GLWxf6tOvcM00GBEfkXmtAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTExMjE1NTIwOFoX DTI3MTExMTE1NTcwOFowMzExMC8GA1UEAxMoMjU5NjQ0RDZDQzJGRkY1OUQ5MDM0 Q0NBNTlCMkFFOEIwNkM3QTA2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJFvLB6xqs2fy7/ERv2rrMkkhu1Hp0jKzkAFUPnOsUdCOpmLQcdvXGrBp78y 7oc19FZfxDr3oKT02aWmtx+kqBx+rKEVr4XvabW3d/UJ6d44pCHLgodHM8CqtgI0 CXiFm78fWEC117yMgEQohEeSrB+O9fqNXeNFPfsn4puSRNaYUZeehIQ05/2itxJ4 R6/HZQeeB7h1XFKd0FPQnibKbp0+caDd0R1j05Jie3JkGllEUggRMEZNgkpnlbu2 oY2xe5ZuXMjAX9SlIL4LhrUD9a0TwCJSEpap2Lg02XF5KRqWN6XyTjphLjPsZJV8 f43rwkAQfkoP+O7TUrOyKoknZ5UCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCWWRNbML/9Z2QNMylmyrosGx6BuMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzlkMzAzODdmLTJiZjAtNDUyZi1iN2E2LTFlMTlmMzYwYTU2ZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85ZDMwMzg3 Zi0yYmYwLTQ1MmYtYjdhNi0xZTE5ZjM2MGE1NmQvMC8yNTk2NDRENkNDMkZGRjU5 RDkwMzRDQ0E1OUIyQUU4QjA2QzdBMDZFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAyyEjMA0GCSqGSIb3DQEBCwUAA4IBAQB3F9q/CcZEx94zcEoK0ZTEaXf+jFGY xC8DAcOoa3SuZ85U9fEZAaQ4DMNXPzqiClSBZq9MeDVufPvLs6VIeNokb5u4p+I+ fcowqvvk3rwhqHaqXy+oMeONVenBURVi6b8CQUkwcllzaRLFK/pwaFvB7YR4ZW/I 81X3S9JaOi7uUJjqGLeoPm+0BihdVgT2ofS6yWnaRz0qF8sJqPtRI1PMoXzXMz77 Aq36mHqp2qsF+l54ftEkfznXskTyz8AgvO7mkzL3Ec3FL+yQeXtp+q3AWjbT58E0 4PKK15k7K5wBDdUnjIdW1XXv4bM1NidqSjE3EzY+cb4kTu2rgEiU8b0T -----END CERTIFICATE-----Generated at Sun Nov 15 12:30:18 2026 by rpki-client