$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/9600C6D40C9726C4902F405B1CB4D124466EEC1C.cer File: 9600C6D40C9726C4902F405B1CB4D124466EEC1C.cer (raw, json) Hash identifier: halIB/DvHWireBbOryK63+J+p922yAUoUQQYrwfE9bg= Subject key identifier: 96:00:C6:D4:0C:97:26:C4:90:2F:40:5B:1C:B4:D1:24:46:6E:EC:1C Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2CFEAD7C37505ADADD8F22818B82520A1D0D8F87 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0f4d45e1-7219-4c32-a202-aba86f4be0da/1/9600C6D40C9726C4902F405B1CB4D124466EEC1C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0f4d45e1-7219-4c32-a202-aba86f4be0da/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Tue 27 Oct 2026 04:40:44 +0000 Certificate not after: Tue 26 Oct 2027 04:45:44 +0000 Subordinate resources: IP: 160.236.18.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 07:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:fe:ad:7c:37:50:5a:da:dd:8f:22:81:8b:82:52:0a:1d:0d:8f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Oct 27 04:40:44 2026 GMT Not After : Oct 26 04:45:44 2027 GMT Subject: CN=9600C6D40C9726C4902F405B1CB4D124466EEC1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2c:0e:14:a8:e1:93:98:a4:83:cc:49:95:2f: 6c:89:7d:9f:ee:5d:09:d1:33:7c:5b:be:b6:9d:cb: fa:4a:49:8c:1b:c4:10:aa:47:58:77:7b:bc:09:61: ab:0b:95:8e:3e:c0:02:d0:be:59:68:57:7e:0f:09: 3d:a5:63:8f:02:43:b8:09:58:dd:f8:3f:a4:77:ee: 1e:85:19:03:86:a7:27:bf:9f:3b:d9:9b:44:99:91: ac:37:c3:4a:65:bb:75:66:9f:37:c5:aa:e0:72:e0: 9a:57:9c:90:a2:76:47:3d:af:67:c9:72:5f:db:68: 28:e3:9e:f2:3a:dd:be:ac:99:db:54:1d:68:19:24: 4d:8b:b7:ce:ea:97:ad:16:c2:c5:b2:2c:9a:b6:ff: 65:8d:e6:7b:a9:0b:11:4f:57:dd:7d:5c:03:11:59: 05:a8:41:d1:5b:eb:ec:57:11:5f:e0:20:ca:ca:ff: 33:d2:c7:ce:60:41:16:65:06:e0:01:b8:a4:a9:b5: 1b:47:d0:e3:99:d7:67:20:da:b7:a1:6b:a8:4d:38: 7e:1f:bf:5b:ed:46:f2:75:ff:99:98:97:41:b9:39: 26:02:fc:5b:2d:1b:33:43:8b:29:ac:3e:16:7f:bb: 77:06:e6:ad:1f:b9:e5:e2:f5:81:eb:e5:be:67:00: 46:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 96:00:C6:D4:0C:97:26:C4:90:2F:40:5B:1C:B4:D1:24:46:6E:EC:1C X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0f4d45e1-7219-4c32-a202-aba86f4be0da/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0f4d45e1-7219-4c32-a202-aba86f4be0da/1/9600C6D40C9726C4902F405B1CB4D124466EEC1C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.18.0/23 Signature Algorithm: sha256WithRSAEncryption 71:e8:6c:7f:dd:4f:31:0b:25:94:cc:d8:c8:24:dd:38:19:7b: b6:9f:c0:66:b3:f5:96:69:50:5e:6f:e6:0f:0e:5f:d1:ae:4f: 07:7a:9a:6e:cf:63:9e:25:88:98:77:fb:6c:9a:98:a2:07:b9: 33:78:39:c6:03:01:e8:e1:38:89:2e:b0:a7:ac:96:bb:4a:38: 2d:b7:80:23:39:54:c9:c2:8b:b6:b5:9d:b8:d1:6e:f4:1b:25: 4f:9c:bd:32:75:d5:4e:d9:62:da:73:60:a5:1a:92:93:82:5a: fa:30:a8:64:e9:68:68:43:c0:33:12:cf:85:75:9d:d0:00:d0: 6b:62:90:96:6f:65:27:33:21:52:8a:83:d1:f7:16:85:77:cf: 65:89:52:c9:f4:d1:47:ba:b1:e2:c2:cb:b8:3e:bb:f2:a7:95: 4f:d9:c5:2d:ed:ab:b3:59:fe:6f:78:dd:0d:67:ea:43:bc:18: 6f:67:b8:b3:2a:55:c2:2b:8d:4d:52:9d:13:71:fd:8b:25:37: 9c:95:9d:6b:69:41:a1:af:a1:a7:83:7c:80:b1:1e:04:26:3a: 54:3e:e3:fa:36:8c:62:50:01:ad:10:12:cf:c0:03:a4:d3:0a: 7c:69:16:31:72:20:56:e5:52:09:bf:f0:4f:34:13:be:bc:ff: 87:42:57:5b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIULP6tfDdQWtrdjyKBi4JSCh0Nj4cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MTAyNzA0NDA0NFoX DTI3MTAyNjA0NDU0NFowMzExMC8GA1UEAxMoOTYwMEM2RDQwQzk3MjZDNDkwMkY0 MDVCMUNCNEQxMjQ0NjZFRUMxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUsDhSo4ZOYpIPMSZUvbIl9n+5dCdEzfFu+tp3L+kpJjBvEEKpHWHd7vAlh qwuVjj7AAtC+WWhXfg8JPaVjjwJDuAlY3fg/pHfuHoUZA4anJ7+fO9mbRJmRrDfD SmW7dWafN8Wq4HLgmleckKJ2Rz2vZ8lyX9toKOOe8jrdvqyZ21QdaBkkTYu3zuqX rRbCxbIsmrb/ZY3me6kLEU9X3X1cAxFZBahB0Vvr7FcRX+Agysr/M9LHzmBBFmUG 4AG4pKm1G0fQ45nXZyDat6FrqE04fh+/W+1G8nX/mZiXQbk5JgL8Wy0bM0OLKaw+ Fn+7dwbmrR+55eL1gevlvmcARs8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJYAxtQMlybEkC9AWxy00SRGbuwcMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBmNGQ0NWUxLTcyMTktNGMzMi1hMjAyLWFiYTg2ZjRiZTBkYS8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wZjRkNDVl MS03MjE5LTRjMzItYTIwMi1hYmE4NmY0YmUwZGEvMS85NjAwQzZENDBDOTcyNkM0 OTAyRjQwNUIxQ0I0RDEyNDQ2NkVFQzFDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoOwSMA0GCSqGSIb3DQEBCwUAA4IBAQBx6Gx/3U8xCyWUzNjIJN04GXu2n8Bm s/WWaVBeb+YPDl/Rrk8Heppuz2OeJYiYd/tsmpiiB7kzeDnGAwHo4TiJLrCnrJa7 Sjgtt4AjOVTJwou2tZ240W70GyVPnL0yddVO2WLac2ClGpKTglr6MKhk6WhoQ8Az Es+FdZ3QANBrYpCWb2UnMyFSioPR9xaFd89liVLJ9NFHurHiwsu4Prvyp5VP2cUt 7auzWf5veN0NZ+pDvBhvZ7izKlXCK41NUp0Tcf2LJTeclZ1raUGhr6Gng3yAsR4E JjpUPuP6NoxiUAGtEBLPwAOk0wp8aRYxciBW5VIJv/BPNBO+vP+HQldb -----END CERTIFICATE-----Generated at Tue Nov 3 12:03:06 2026 by rpki-client