$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/6957BD591F986806CBC922522309E3C29A646240.cer File: 6957BD591F986806CBC922522309E3C29A646240.cer (raw, json) Hash identifier: wGGiopPkAowbuxz49Kt+jry13OQO/kY5qc0ICz/aW4w= Subject key identifier: 69:57:BD:59:1F:98:68:06:CB:C9:22:52:23:09:E3:C2:9A:64:62:40 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 02685FCFABBCD7031A87A709289A1D08F1AA6B56 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e173624b-9566-4833-ba9e-691b00184cf6/1/6957BD591F986806CBC922522309E3C29A646240.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e173624b-9566-4833-ba9e-691b00184cf6/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Wed 28 Oct 2026 04:02:22 +0000 Certificate not after: Wed 27 Oct 2027 04:07:22 +0000 Subordinate resources: IP: 157.10.192.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:68:5f:cf:ab:bc:d7:03:1a:87:a7:09:28:9a:1d:08:f1:aa:6b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Oct 28 04:02:22 2026 GMT Not After : Oct 27 04:07:22 2027 GMT Subject: CN=6957BD591F986806CBC922522309E3C29A646240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9b:fb:fa:95:d2:5d:9c:ce:e8:2d:da:f7:bd: 50:e6:ac:23:13:08:50:94:b3:2d:23:7a:e9:8b:e4: 62:d6:08:e8:48:55:61:86:e8:2f:66:30:15:d8:b0: d3:f7:58:30:e5:97:e6:88:73:07:0d:73:73:17:57: 45:2d:01:fb:05:e8:31:bb:19:08:c9:e8:3f:de:b5: 15:05:6e:d5:da:97:f6:02:a2:db:d2:7c:78:47:a2: 5d:c9:62:89:61:6c:6b:41:d1:7c:e8:0e:43:c3:ae: 50:df:6d:84:84:46:8c:56:7c:10:ac:da:d2:9b:b1: 31:3a:c6:ad:8e:9e:2c:13:67:7a:f0:e5:05:cc:cd: 72:de:b2:29:82:97:c7:ff:a5:ac:7f:74:42:f5:97: 43:a6:f0:f0:1c:e2:07:7c:1d:3a:c4:b4:82:26:4e: f9:f0:49:34:b4:8e:ac:a8:a4:7e:07:28:a0:a9:af: a8:32:d4:d7:b8:1d:85:af:c3:cb:b9:e3:6a:51:20: cd:79:78:3a:99:97:12:5c:c9:94:1e:2a:2e:ed:24: 1c:eb:06:4d:9d:7c:e5:42:36:ab:86:3f:d7:91:bf: 3b:15:c4:8e:5e:4e:d2:dc:dd:a4:76:e4:e7:30:e5: aa:80:f8:2e:0e:ef:73:4b:cd:8a:6c:66:7d:33:1e: c3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:57:BD:59:1F:98:68:06:CB:C9:22:52:23:09:E3:C2:9A:64:62:40 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e173624b-9566-4833-ba9e-691b00184cf6/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e173624b-9566-4833-ba9e-691b00184cf6/1/6957BD591F986806CBC922522309E3C29A646240.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.192.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:96:5a:95:bd:32:9c:81:3d:fe:5d:3c:a6:d7:86:3a:9b:bb: 63:83:a9:cf:a4:1c:36:01:04:83:9e:d0:68:ef:f2:1f:b4:fa: 9b:36:71:c2:57:12:02:9f:aa:cb:00:55:69:6e:88:fc:ef:cd: e3:51:b6:8e:48:02:3d:aa:5e:9b:fc:7c:bc:dc:32:a1:a3:b9: 42:85:5c:5b:98:a1:79:94:34:3c:b9:09:1a:d3:bc:f6:b7:ea: ba:78:ac:5b:a8:55:20:24:c4:45:19:fc:39:c6:ad:e0:4a:4e: d1:dd:c7:66:2f:98:d8:66:ff:a6:ed:26:03:42:36:e7:bf:82: d4:8c:9a:d8:25:f5:ee:50:8b:51:dd:b4:13:37:0c:02:75:75: b8:a8:0d:6f:60:dc:09:44:f4:c2:ba:74:a1:74:4e:7f:62:83: db:51:85:7d:e8:a1:b8:61:71:00:c3:5a:0b:fd:78:d5:76:63: 75:39:00:7a:e8:60:19:08:f1:1e:b9:9b:4d:22:f4:97:b2:e4: 2e:53:26:cf:12:f4:e4:99:1d:fd:bd:c4:6f:eb:d8:bd:3b:8f: e6:a6:22:e5:ab:d2:02:15:5d:4f:24:c5:af:61:14:0b:e7:fe: 89:6a:d9:1f:00:30:08:8b:e8:54:62:04:ea:df:c0:55:42:43: b0:af:b0:b9 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUAmhfz6u81wMah6cJKJodCPGqa1YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MTAyODA0MDIyMloX DTI3MTAyNzA0MDcyMlowMzExMC8GA1UEAxMoNjk1N0JENTkxRjk4NjgwNkNCQzky MjUyMjMwOUUzQzI5QTY0NjI0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKqb+/qV0l2czugt2ve9UOasIxMIUJSzLSN66YvkYtYI6EhVYYboL2YwFdiw 0/dYMOWX5ohzBw1zcxdXRS0B+wXoMbsZCMnoP961FQVu1dqX9gKi29J8eEeiXcli iWFsa0HRfOgOQ8OuUN9thIRGjFZ8EKza0puxMTrGrY6eLBNnevDlBczNct6yKYKX x/+lrH90QvWXQ6bw8BziB3wdOsS0giZO+fBJNLSOrKikfgcooKmvqDLU17gdha/D y7njalEgzXl4OpmXElzJlB4qLu0kHOsGTZ185UI2q4Y/15G/OxXEjl5O0tzdpHbk 5zDlqoD4Lg7vc0vNimxmfTMewwcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGlXvVkfmGgGy8kiUiMJ48KaZGJAMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2UxNzM2MjRiLTk1NjYtNDgzMy1iYTllLTY5MWIwMDE4NGNmNi8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lMTczNjI0 Yi05NTY2LTQ4MzMtYmE5ZS02OTFiMDAxODRjZjYvMS82OTU3QkQ1OTFGOTg2ODA2 Q0JDOTIyNTIyMzA5RTNDMjlBNjQ2MjQwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAnQrAMA0GCSqGSIb3DQEBCwUAA4IBAQB/llqVvTKcgT3+XTym14Y6m7tjg6nP pBw2AQSDntBo7/IftPqbNnHCVxICn6rLAFVpboj8783jUbaOSAI9ql6b/Hy83DKh o7lChVxbmKF5lDQ8uQka07z2t+q6eKxbqFUgJMRFGfw5xq3gSk7R3cdmL5jYZv+m 7SYDQjbnv4LUjJrYJfXuUItR3bQTNwwCdXW4qA1vYNwJRPTCunShdE5/YoPbUYV9 6KG4YXEAw1oL/XjVdmN1OQB66GAZCPEeuZtNIvSXsuQuUybPEvTkmR39vcRv69i9 O4/mpiLlq9ICFV1PJMWvYRQL5/6JatkfADAIi+hUYgTq38BVQkOwr7C5 -----END CERTIFICATE-----Generated at Mon Nov 2 14:32:44 2026 by rpki-client