$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/392522CAF6B8C736A70F65AB59157B110F5CE4A6.cer File: 392522CAF6B8C736A70F65AB59157B110F5CE4A6.cer (raw, json) Hash identifier: bT86IdC3pr93vhW/V7x1gy+vPVoMTL6a6bnhDXXA0zc= Subject key identifier: 39:25:22:CA:F6:B8:C7:36:A7:0F:65:AB:59:15:7B:11:0F:5C:E4:A6 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 5ED56AAA92EDC883C8FF120CFBA046A791248581 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/806d975f-8076-4899-9f8c-a8faa137870f/1/392522CAF6B8C736A70F65AB59157B110F5CE4A6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/806d975f-8076-4899-9f8c-a8faa137870f/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Mon 19 Oct 2026 03:39:56 +0000 Certificate not after: Mon 18 Oct 2027 03:44:56 +0000 Subordinate resources: IP: 157.15.214.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 12:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:d5:6a:aa:92:ed:c8:83:c8:ff:12:0c:fb:a0:46:a7:91:24:85:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Oct 19 03:39:56 2026 GMT Not After : Oct 18 03:44:56 2027 GMT Subject: CN=392522CAF6B8C736A70F65AB59157B110F5CE4A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:02:05:59:3d:ba:b5:65:3d:28:e3:e2:f3:9e: d4:04:4a:bb:c4:3e:35:80:e7:f5:b4:a7:92:97:67: 26:b8:dd:04:2d:ca:a7:bb:b2:e1:64:28:ea:8f:56: 0f:b2:dd:71:7b:7c:20:23:af:5b:55:d1:3f:40:c3: 60:97:6c:8e:3f:d1:7e:c7:1c:fd:49:26:0c:7e:67: a7:d0:b6:61:5e:d0:ec:d5:55:d1:c7:1e:b6:8c:5e: e3:4f:4b:ae:c5:31:d5:20:6c:f9:65:dd:17:c6:43: 40:2b:c5:54:f2:e5:df:71:33:04:7a:ca:42:6b:55: a9:63:95:2c:a0:c5:27:84:cb:0e:9f:ad:b8:1f:db: b4:88:88:39:37:06:bd:ad:80:38:1b:90:19:9c:c6: 08:2d:e0:0c:90:35:1b:6d:b2:9d:f7:a7:06:cc:3c: 59:22:39:9d:c8:2c:0d:00:8a:e6:8d:52:a1:28:03: b6:b3:3e:52:a2:db:19:0c:c2:f9:78:d8:3d:5a:47: e0:cc:a6:55:37:b4:52:08:30:36:56:90:06:22:52: e2:f1:4d:df:6b:92:89:42:4d:03:3f:16:39:02:3c: 4f:5e:73:e2:fb:6c:a7:a4:03:89:e4:83:3c:8e:3a: 7a:b0:38:87:76:9e:e5:a2:8c:41:88:d3:5b:13:11: c3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 39:25:22:CA:F6:B8:C7:36:A7:0F:65:AB:59:15:7B:11:0F:5C:E4:A6 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/806d975f-8076-4899-9f8c-a8faa137870f/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/806d975f-8076-4899-9f8c-a8faa137870f/1/392522CAF6B8C736A70F65AB59157B110F5CE4A6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.214.0/23 Signature Algorithm: sha256WithRSAEncryption 88:78:7b:b7:25:52:82:5a:ac:1d:80:8c:1c:c8:7f:c1:ad:74: fc:14:a7:44:16:45:0f:51:ec:64:60:5a:9e:59:aa:ae:ae:79: b2:eb:71:ca:1b:2d:26:ca:e5:1b:23:22:be:7f:47:69:6d:74: 4f:10:21:89:fd:12:aa:4b:db:b7:04:24:10:d6:5b:a1:e4:f2: 45:b9:7f:ac:e2:59:44:17:f5:6c:b1:24:5c:4b:77:03:d0:a5: 73:2c:2a:8a:17:db:20:64:a6:c5:62:52:bf:6e:53:7e:da:70: ff:85:95:a0:e0:31:fb:fe:bd:a2:17:d8:1f:a2:60:77:3b:f7: f6:55:6d:02:12:28:67:92:f9:7d:a4:1e:a1:3a:bb:c1:bb:16: 8b:a4:dc:32:3a:51:0f:f9:b1:50:60:cd:87:8a:ad:05:98:6a: 2a:66:16:4a:90:70:e5:a3:af:d1:15:07:9e:24:dc:d1:d9:40: b5:01:9f:0d:54:67:37:fb:65:6b:b7:43:46:b7:ec:5c:35:21: 2e:8c:db:d8:84:9b:63:fd:6f:97:93:55:96:4b:45:16:90:ca: b3:f5:2d:cc:53:46:5f:21:23:8c:b4:9b:4b:d0:3c:d8:c2:c9: ba:b1:64:e6:f9:fb:dc:4e:9b:d5:ff:16:f4:eb:61:49:22:34: c6:57:49:ad -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUXtVqqpLtyIPI/xIM+6BGp5EkhYEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MTAxOTAzMzk1NloX DTI3MTAxODAzNDQ1NlowMzExMC8GA1UEAxMoMzkyNTIyQ0FGNkI4QzczNkE3MEY2 NUFCNTkxNTdCMTEwRjVDRTRBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgCBVk9urVlPSjj4vOe1ARKu8Q+NYDn9bSnkpdnJrjdBC3Kp7uy4WQo6o9W D7LdcXt8ICOvW1XRP0DDYJdsjj/Rfscc/UkmDH5np9C2YV7Q7NVV0ccetoxe409L rsUx1SBs+WXdF8ZDQCvFVPLl33EzBHrKQmtVqWOVLKDFJ4TLDp+tuB/btIiIOTcG va2AOBuQGZzGCC3gDJA1G22ynfenBsw8WSI5ncgsDQCK5o1SoSgDtrM+UqLbGQzC +XjYPVpH4MymVTe0UggwNlaQBiJS4vFN32uSiUJNAz8WOQI8T15z4vtsp6QDieSD PI46erA4h3ae5aKMQYjTWxMRw3ECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDklIsr2uMc2pw9lq1kVexEPXOSmMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzgwNmQ5NzVmLTgwNzYtNDg5OS05ZjhjLWE4ZmFhMTM3ODcwZi8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84MDZkOTc1 Zi04MDc2LTQ4OTktOWY4Yy1hOGZhYTEzNzg3MGYvMS8zOTI1MjJDQUY2QjhDNzM2 QTcwRjY1QUI1OTE1N0IxMTBGNUNFNEE2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnQ/WMA0GCSqGSIb3DQEBCwUAA4IBAQCIeHu3JVKCWqwdgIwcyH/BrXT8FKdE FkUPUexkYFqeWaqurnmy63HKGy0myuUbIyK+f0dpbXRPECGJ/RKqS9u3BCQQ1luh 5PJFuX+s4llEF/VssSRcS3cD0KVzLCqKF9sgZKbFYlK/blN+2nD/hZWg4DH7/r2i F9gfomB3O/f2VW0CEihnkvl9pB6hOrvBuxaLpNwyOlEP+bFQYM2Hiq0FmGoqZhZK kHDlo6/RFQeeJNzR2UC1AZ8NVGc3+2Vrt0NGt+xcNSEujNvYhJtj/W+Xk1WWS0UW kMqz9S3MU0ZfISOMtJtL0DzYwsm6sWTm+fvcTpvV/xb062FJIjTGV0mt -----END CERTIFICATE-----Generated at Tue Nov 3 12:02:59 2026 by rpki-client