$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/CD42D1C3D45836B586FB32BA9024E94DD38711C4.cer File: CD42D1C3D45836B586FB32BA9024E94DD38711C4.cer (raw, json) Hash identifier: PxoYa3VCacg5DsF28Lp+Qy6QBjf6scUFgE8jhPTbVqs= Subject key identifier: CD:42:D1:C3:D4:58:36:B5:86:FB:32:BA:90:24:E9:4D:D3:87:11:C4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5970D46CCA1D87304ABE773023024634C14B2F7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9eeb7d27-6b6c-45ac-b37d-49ff95d3fcc8/1/CD42D1C3D45836B586FB32BA9024E94DD38711C4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9eeb7d27-6b6c-45ac-b37d-49ff95d3fcc8/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Thu 24 Sep 2026 03:26:57 +0000 Certificate not after: Thu 23 Sep 2027 03:31:57 +0000 Subordinate resources: AS: 154523 IP: 2001:df6:c340::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 03:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:70:d4:6c:ca:1d:87:30:4a:be:77:30:23:02:46:34:c1:4b:2f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 24 03:26:57 2026 GMT Not After : Sep 23 03:31:57 2027 GMT Subject: CN=CD42D1C3D45836B586FB32BA9024E94DD38711C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:6e:1a:8d:e3:23:b8:22:fb:38:ae:74:cf:af: c3:b4:0c:c0:82:4b:ae:a9:6e:50:2f:c5:9b:28:61: 5a:00:e9:70:9b:ff:e5:fe:61:ed:65:21:97:55:c0: 70:25:e9:72:19:91:63:d4:11:76:02:06:68:b9:4a: e4:36:d0:36:20:b9:f1:58:f9:6a:d6:04:86:6a:85: fb:42:56:59:e4:ed:de:44:e2:4a:94:50:99:4b:55: ae:93:f0:b9:a5:4d:cd:54:b2:d8:0d:0c:eb:e5:99: 97:bf:bd:47:5c:6f:5c:44:b5:a3:4f:01:aa:8c:63: 78:cf:b8:fe:31:43:83:44:20:f3:17:11:ad:42:71: 43:ac:db:cc:31:8c:77:fe:15:76:67:86:15:44:4a: 50:02:c2:77:55:ad:5c:01:9f:2e:a9:41:c5:3a:e7: bd:e1:5f:fb:b0:0a:46:ea:f7:0e:a9:a5:59:d7:ef: 15:0e:2b:7b:3b:19:b7:57:d5:8c:51:ce:85:41:9f: bd:f6:9b:94:7a:d9:cb:fd:b7:d5:98:98:f1:92:42: 88:a8:f1:87:89:4d:01:8c:b8:87:1c:64:a7:4d:89: 70:5b:68:08:4b:a9:84:5c:9b:96:ea:92:ef:31:59: 6a:6d:5e:22:0e:f0:8c:28:83:5e:04:7f:22:17:07: b0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:42:D1:C3:D4:58:36:B5:86:FB:32:BA:90:24:E9:4D:D3:87:11:C4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9eeb7d27-6b6c-45ac-b37d-49ff95d3fcc8/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9eeb7d27-6b6c-45ac-b37d-49ff95d3fcc8/1/CD42D1C3D45836B586FB32BA9024E94DD38711C4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:c340::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 154523 Signature Algorithm: sha256WithRSAEncryption 20:1d:bc:eb:db:a6:8b:38:07:f9:eb:75:21:a8:7f:c5:b0:f2: 61:b4:b3:7a:36:3b:92:58:82:4f:b1:88:77:33:2a:51:b2:a7: b7:eb:80:82:c5:73:61:3e:fa:ad:fc:d8:4a:73:56:0d:ef:ae: 76:d6:87:e5:b1:fa:01:49:14:d3:e6:18:98:08:35:37:83:61: 56:b0:0a:b2:09:b9:93:b6:6e:7c:dc:79:40:21:98:79:25:c7: d0:78:16:3e:73:b2:d7:d1:f0:70:9f:49:4a:2a:41:a5:28:96: d1:09:32:d5:d0:2a:bd:37:08:8e:66:62:0e:a7:2b:83:5a:14: f5:c7:7e:70:b7:d3:76:df:63:76:6d:88:34:85:32:65:0c:f6: 0f:20:2f:1a:2d:bb:ce:6e:65:20:da:7f:d3:49:f2:9e:2f:80: 50:7e:9e:20:3e:66:4d:a8:95:61:ac:58:1c:a1:31:a1:ee:7f: a4:24:28:50:dd:eb:48:f4:16:6b:d8:db:c1:33:a2:32:1c:af: 76:f2:ac:5f:7a:4a:b6:35:75:94:67:41:b8:00:0c:78:be:c6: a2:27:cd:ac:e5:2f:b7:97:ab:c5:89:d3:eb:22:04:8f:66:47: 04:bc:52:51:77:82:60:07:8c:20:c9:21:6a:74:d5:12:8d:cf: 32:96:4a:11 -----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgIUWXDUbModhzBKvncwIwJGNMFLL3owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkyNDAzMjY1N1oX DTI3MDkyMzAzMzE1N1owMzExMC8GA1UEAxMoQ0Q0MkQxQzNENDU4MzZCNTg2RkIz MkJBOTAyNEU5NEREMzg3MTFDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPBuGo3jI7gi+ziudM+vw7QMwIJLrqluUC/FmyhhWgDpcJv/5f5h7WUhl1XA cCXpchmRY9QRdgIGaLlK5DbQNiC58Vj5atYEhmqF+0JWWeTt3kTiSpRQmUtVrpPw uaVNzVSy2A0M6+WZl7+9R1xvXES1o08BqoxjeM+4/jFDg0Qg8xcRrUJxQ6zbzDGM d/4VdmeGFURKUALCd1WtXAGfLqlBxTrnveFf+7AKRur3DqmlWdfvFQ4rezsZt1fV jFHOhUGfvfablHrZy/231ZiY8ZJCiKjxh4lNAYy4hxxkp02JcFtoCEuphFybluqS 7zFZam1eIg7wjCiDXgR/IhcHsC0CAwEAAaOCAtgwggLUMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM1C0cPUWDa1hvsyupAk6U3ThxHEMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzllZWI3ZDI3LTZiNmMtNDVhYy1iMzdkLTQ5ZmY5NWQzZmNjOC8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85ZWViN2Qy Ny02YjZjLTQ1YWMtYjM3ZC00OWZmOTVkM2ZjYzgvMS9DRDQyRDFDM0Q0NTgzNkI1 ODZGQjMyQkE5MDI0RTk0REQzODcxMUM0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN9sNAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJbmzANBgkqhkiG9w0B AQsFAAOCAQEAIB2869umizgH+et1Iah/xbDyYbSzejY7kliCT7GIdzMqUbKnt+uA gsVzYT76rfzYSnNWDe+udtaH5bH6AUkU0+YYmAg1N4NhVrAKsgm5k7ZufNx5QCGY eSXH0HgWPnOy19HwcJ9JSipBpSiW0Qky1dAqvTcIjmZiDqcrg1oU9cd+cLfTdt9j dm2INIUyZQz2DyAvGi27zm5lINp/00nyni+AUH6eID5mTaiVYaxYHKExoe5/pCQo UN3rSPQWa9jbwTOiMhyvdvKsX3pKtjV1lGdBuAAMeL7GoifNrOUvt5erxYnT6yIE j2ZHBLxSUXeCYAeMIMkhanTVEo3PMpZKEQ== -----END CERTIFICATE-----Generated at Fri Sep 25 06:10:10 2026 by rpki-client