$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/3/7240F0DFEB7D589B1B6D2C99BBEFA654E9D9036E.cer File: 7240F0DFEB7D589B1B6D2C99BBEFA654E9D9036E.cer (raw, json) Hash identifier: sZgXnYGmQtrCOQLZPMHJmI1iTUnWB63UAVxRMNEbss8= Subject key identifier: 72:40:F0:DF:EB:7D:58:9B:1B:6D:2C:99:BB:EF:A6:54:E9:D9:03:6E Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53 Certificate issuer: /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53 Certificate serial: 02D7E6C804059215108CC95B319BBA0BDBCDA5BC Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer CRL Distribution Point: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl Manifest: rsync://rpki-rsync.idnic.net/repo/cb4f1529-d41d-4bc7-8278-ac481d805608/1/7240F0DFEB7D589B1B6D2C99BBEFA654E9D9036E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/cb4f1529-d41d-4bc7-8278-ac481d805608/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 14 Nov 2026 14:46:34 +0000 Certificate not after: Sat 13 Nov 2027 14:51:34 +0000 Subordinate resources: IP: 141.229.2.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 15:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:d7:e6:c8:04:05:92:15:10:8c:c9:5b:31:9b:ba:0b:db:cd:a5:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53 Validity Not Before: Nov 14 14:46:34 2026 GMT Not After : Nov 13 14:51:34 2027 GMT Subject: CN=7240F0DFEB7D589B1B6D2C99BBEFA654E9D9036E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cd:ad:83:ce:27:3c:18:42:ea:8e:db:1d:90: 65:bc:36:d4:9f:3e:eb:ca:af:05:ed:4d:c6:69:18: 87:b1:42:a6:26:67:e0:55:7d:a2:0b:bf:40:8f:f2: 1e:28:84:33:30:6b:f9:63:b7:30:54:0f:07:a4:a5: 74:7c:3b:91:3c:64:04:2e:cb:83:28:c4:36:96:6e: 4b:cc:f8:a0:16:ae:e7:94:29:ab:23:9b:4e:f2:c8: c0:20:f6:4d:a8:a9:0a:e4:35:f8:40:4f:7c:14:6f: 84:fb:c2:4c:ef:78:57:9d:ad:bc:f0:62:79:a4:61: 5d:a5:78:1a:5b:a2:f2:b6:2a:0d:01:c4:e1:e7:1d: 54:17:00:91:4e:93:7e:55:12:be:c4:5b:bc:c8:5c: f3:3d:bd:a9:00:d3:ae:3f:5a:c1:13:5a:55:63:df: ed:e0:94:33:b7:2f:9c:3d:b9:91:f0:02:fe:98:75: c9:03:bd:67:5d:af:c5:8b:9e:d2:c1:7a:b1:70:96: 4f:e8:e5:50:35:49:f2:ce:6b:97:ac:23:ab:77:b1: d2:c9:0f:f6:45:71:98:1d:b9:c9:e7:76:f3:96:34: 16:0b:05:34:8d:f7:f5:69:65:e7:50:b0:af:c7:84: e6:89:b9:a3:a4:e0:e6:5c:b7:86:16:fd:6b:84:60: d2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 72:40:F0:DF:EB:7D:58:9B:1B:6D:2C:99:BB:EF:A6:54:E9:D9:03:6E X509v3 Authority Key Identifier: keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/cb4f1529-d41d-4bc7-8278-ac481d805608/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/cb4f1529-d41d-4bc7-8278-ac481d805608/1/7240F0DFEB7D589B1B6D2C99BBEFA654E9D9036E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.229.2.0/23 Signature Algorithm: sha256WithRSAEncryption 44:3a:3a:84:a6:9d:fb:fc:98:36:5a:9f:d6:51:fe:5f:c1:59: a2:6c:d3:0d:c7:7b:87:e5:02:32:3b:33:12:df:6f:dd:18:6c: 9b:67:0b:b5:e2:fb:66:92:9f:36:b0:81:97:47:c8:de:49:74: f7:22:da:a3:47:7e:6c:6c:98:6b:cb:e4:59:2b:ab:7f:5b:05: d4:da:30:36:07:58:4e:3c:49:c4:cd:34:43:19:b7:b4:34:49: 4e:00:5e:86:c0:e6:01:ef:79:05:b7:b2:8f:2e:e1:d2:34:30: 6b:14:01:7c:38:a4:fb:74:37:c6:2f:72:3e:3d:05:00:a2:99: ef:c5:09:1b:01:ee:95:b0:45:8c:7f:0f:d6:bc:57:28:7b:36: 78:52:52:a1:d7:a8:d3:e7:72:f3:e4:4c:51:cb:6c:3b:f8:5b: 91:db:e8:f2:27:21:e4:58:99:8f:31:54:5b:40:c7:db:d5:cf: f6:f7:bf:a2:3f:f2:8e:8e:ca:bf:07:8e:1a:ae:12:86:f9:4f: 35:c0:f8:f2:bd:16:fc:ee:0b:d6:00:5c:fd:28:cd:21:b4:f9: f5:13:cb:e5:4d:03:4c:6a:8f:7a:e9:25:59:9d:1f:e0:4c:42: 4d:ee:13:fc:a7:d9:f1:c0:37:2a:fe:21:37:7d:8d:1f:54:49: 44:c9:74:6c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUAtfmyAQFkhUQjMlbMZu6C9vNpbwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhGOTI3REYzODQ4 QUJBQkNBODhGRjNEOTVBMUU1QjE2NzU0QzYzQTUzMB4XDTI2MTExNDE0NDYzNFoX DTI3MTExMzE0NTEzNFowMzExMC8GA1UEAxMoNzI0MEYwREZFQjdENTg5QjFCNkQy Qzk5QkJFRkE2NTRFOUQ5MDM2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANLNrYPOJzwYQuqO2x2QZbw21J8+68qvBe1NxmkYh7FCpiZn4FV9ogu/QI/y HiiEMzBr+WO3MFQPB6SldHw7kTxkBC7LgyjENpZuS8z4oBau55QpqyObTvLIwCD2 TaipCuQ1+EBPfBRvhPvCTO94V52tvPBieaRhXaV4Glui8rYqDQHE4ecdVBcAkU6T flUSvsRbvMhc8z29qQDTrj9awRNaVWPf7eCUM7cvnD25kfAC/ph1yQO9Z12vxYue 0sF6sXCWT+jlUDVJ8s5rl6wjq3ex0skP9kVxmB25yed285Y0FgsFNI339Wll51Cw r8eE5om5o6Tg5ly3hhb9a4Rg0g0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHJA8N/rfVibG20smbvvplTp2QNuMB8GA1UdIwQYMBaAFPkn 3zhIq6vKiP89laHlsWdUxjpTMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMy9G OTI3REYzODQ4QUJBQkNBODhGRjNEOTVBMUU1QjE2NzU0QzYzQTUzLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CMzIyQTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi8tU2Zm T0VpcnE4cUlfejJWb2VXeFoxVEdPbE0uY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NiNGYxNTI5LWQ0MWQtNGJjNy04Mjc4LWFjNDgxZDgwNTYwOC8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jYjRmMTUy OS1kNDFkLTRiYzctODI3OC1hYzQ4MWQ4MDU2MDgvMS83MjQwRjBERkVCN0Q1ODlC MUI2RDJDOTlCQkVGQTY1NEU5RDkwMzZFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBjeUCMA0GCSqGSIb3DQEBCwUAA4IBAQBEOjqEpp37/Jg2Wp/WUf5fwVmibNMN x3uH5QIyOzMS32/dGGybZwu14vtmkp82sIGXR8jeSXT3ItqjR35sbJhry+RZK6t/ WwXU2jA2B1hOPEnEzTRDGbe0NElOAF6GwOYB73kFt7KPLuHSNDBrFAF8OKT7dDfG L3I+PQUAopnvxQkbAe6VsEWMfw/WvFcoezZ4UlKh16jT53Lz5ExRy2w7+FuR2+jy JyHkWJmPMVRbQMfb1c/297+iP/KOjsq/B44arhKG+U81wPjyvRb87gvWAFz9KM0h tPn1E8vlTQNMao966SVZnR/gTEJN7hP8p9nxwDcq/iE3fY0fVElEyXRs -----END CERTIFICATE-----Generated at Sat Nov 14 23:25:19 2026 by rpki-client