$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/C70C382573B502FF29482CE28573DCCF10C0C0DE.cer File: C70C382573B502FF29482CE28573DCCF10C0C0DE.cer (raw, json) Hash identifier: cdyWP2HT24aatvl3yWVi8snBZ+Ag4WYbel/ZjhPetTc= Subject key identifier: C7:0C:38:25:73:B5:02:FF:29:48:2C:E2:85:73:DC:CF:10:C0:C0:DE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 56FA24AC2C6EEAFF2F2E048DB9C11B72905337F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/aa659217-caa2-45ed-87b4-da0dadcfa087/0/C70C382573B502FF29482CE28573DCCF10C0C0DE.mft caRepository: rsync://rpki-rsync.idnic.net/repo/aa659217-caa2-45ed-87b4-da0dadcfa087/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Wed 23 Sep 2026 12:56:32 +0000 Certificate not after: Wed 22 Sep 2027 13:01:32 +0000 Subordinate resources: AS: 131205 IP: 45.249.180.0/23 IP: 2001:df7:5940::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 13:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:fa:24:ac:2c:6e:ea:ff:2f:2e:04:8d:b9:c1:1b:72:90:53:37:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 23 12:56:32 2026 GMT Not After : Sep 22 13:01:32 2027 GMT Subject: CN=C70C382573B502FF29482CE28573DCCF10C0C0DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:82:92:32:11:40:35:3d:cc:ca:29:ce:7b:36: f8:08:4d:3b:8f:ae:66:a0:8a:47:d0:a5:f5:74:08: 6c:46:99:10:aa:55:38:2e:5d:1e:75:42:25:65:a9: ea:3b:51:fa:f8:51:12:67:b3:b9:b6:f7:e1:38:bc: bb:06:4d:0f:16:24:12:1a:9a:4e:1d:8e:d0:f7:47: fd:23:48:55:bf:8b:b3:1d:ed:02:2a:c4:18:23:12: 35:61:b5:fb:b1:66:31:e6:7b:63:38:3e:db:88:24: 75:03:6e:1a:13:a0:53:49:e2:d2:e9:64:70:6b:71: 97:88:b0:82:21:62:6a:84:eb:d9:44:6c:b8:cb:c4: 6e:d2:fd:0a:47:5e:40:8c:4d:3a:3b:6d:96:9e:2d: 72:34:6e:9f:d1:5b:27:ea:c3:16:aa:36:0f:0a:8b: cd:82:c5:1f:df:28:37:62:89:79:99:4b:71:fe:f8: b9:6e:3a:aa:71:b8:11:f3:03:4f:53:da:0b:68:a4: 94:94:99:d9:38:99:f2:23:5d:b5:d6:04:c7:9a:ec: 1e:ba:6a:ae:43:a2:6c:10:16:41:d8:c9:9f:d9:01: 03:69:4c:2e:24:70:31:0e:52:ac:2c:72:00:2f:28: d1:b0:4c:af:aa:62:5d:6b:f1:39:5e:45:04:0d:48: a9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:0C:38:25:73:B5:02:FF:29:48:2C:E2:85:73:DC:CF:10:C0:C0:DE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/aa659217-caa2-45ed-87b4-da0dadcfa087/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/aa659217-caa2-45ed-87b4-da0dadcfa087/0/C70C382573B502FF29482CE28573DCCF10C0C0DE.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.249.180.0/23 IPv6: 2001:df7:5940::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131205 Signature Algorithm: sha256WithRSAEncryption 5a:10:81:27:36:9e:90:85:1c:6f:45:e7:85:65:25:7c:85:f4: 74:b6:5b:72:82:36:94:c9:d2:f5:3f:4b:60:94:4c:c8:6f:d0: bb:ae:e8:20:97:68:67:3a:e4:f6:2e:ef:d3:76:d2:71:06:e8: c8:bf:48:ca:40:53:4b:0a:8b:bb:4b:66:9e:a6:77:96:7b:d9: 7b:ca:54:ac:de:54:7c:bf:15:e1:bc:f2:7f:c6:c2:4f:f2:7b: 5f:ee:72:4b:02:04:fd:3c:dc:b2:e3:33:24:ae:11:c7:e0:16: 02:71:08:2c:66:2c:7f:ef:aa:eb:69:e1:82:67:58:6b:5d:0a: 73:b5:e5:50:6a:f7:65:e4:df:b0:6b:ff:2f:38:c5:f7:de:5b: 24:32:04:d7:d7:81:ff:de:f2:2c:9f:52:6d:50:db:d9:0f:cb: d2:0c:23:9e:f7:71:d4:18:ee:45:a7:bc:20:54:38:ec:fc:2a: 5e:b2:68:fc:81:ae:27:d7:29:5d:df:50:57:ff:31:fa:60:33: 5c:75:54:ab:e2:77:18:1f:89:ee:d4:64:15:c7:ca:05:13:05: dd:18:74:7e:62:84:ff:29:94:27:2e:29:33:00:43:bb:f8:0e: ea:ab:1c:52:36:a9:e0:2c:67:26:ca:d3:d2:98:18:82:92:f0: bc:65:4e:c5 -----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgIUVvokrCxu6v8vLgSNucEbcpBTN/AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkyMzEyNTYzMloX DTI3MDkyMjEzMDEzMlowMzExMC8GA1UEAxMoQzcwQzM4MjU3M0I1MDJGRjI5NDgy Q0UyODU3M0RDQ0YxMEMwQzBERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ6CkjIRQDU9zMopzns2+AhNO4+uZqCKR9Cl9XQIbEaZEKpVOC5dHnVCJWWp 6jtR+vhREmezubb34Ti8uwZNDxYkEhqaTh2O0PdH/SNIVb+Lsx3tAirEGCMSNWG1 +7FmMeZ7Yzg+24gkdQNuGhOgU0ni0ulkcGtxl4iwgiFiaoTr2URsuMvEbtL9Ckde QIxNOjttlp4tcjRun9FbJ+rDFqo2DwqLzYLFH98oN2KJeZlLcf74uW46qnG4EfMD T1PaC2iklJSZ2TiZ8iNdtdYEx5rsHrpqrkOibBAWQdjJn9kBA2lMLiRwMQ5SrCxy AC8o0bBMr6piXWvxOV5FBA1Iqe8CAwEAAaOCAuYwggLiMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMcMOCVztQL/KUgs4oVz3M8QwMDeMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FhNjU5MjE3LWNhYTItNDVlZC04N2I0LWRhMGRhZGNmYTA4Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hYTY1OTIx Ny1jYWEyLTQ1ZWQtODdiNC1kYTBkYWRjZmEwODcvMC9DNzBDMzgyNTczQjUwMkZG Mjk0ODJDRTI4NTczRENDRjEwQzBDMERFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBLfm0MA8EAgACMAkDBwAgAQ33WUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AgCFMA0GCSqGSIb3DQEBCwUAA4IBAQBaEIEnNp6QhRxvReeFZSV8hfR0tltygjaU ydL1P0tglEzIb9C7ruggl2hnOuT2Lu/TdtJxBujIv0jKQFNLCou7S2aepneWe9l7 ylSs3lR8vxXhvPJ/xsJP8ntf7nJLAgT9PNyy4zMkrhHH4BYCcQgsZix/76rraeGC Z1hrXQpzteVQavdl5N+wa/8vOMX33lskMgTX14H/3vIsn1JtUNvZD8vSDCOe93HU GO5Fp7wgVDjs/Cpesmj8ga4n1yld31BX/zH6YDNcdVSr4ncYH4nu1GQVx8oFEwXd GHR+YoT/KZQnLikzAEO7+A7qqxxSNqngLGcmytPSmBiCkvC8ZU7F -----END CERTIFICATE-----Generated at Fri Sep 25 12:58:43 2026 by rpki-client