$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/CDA698011D10F436E3BBC31664239B3150C53C19.cer File: CDA698011D10F436E3BBC31664239B3150C53C19.cer (raw, json) Hash identifier: vOvl4OS4fJt4eOytTDu93CcFtFr60RsEiGuWWT4VeEc= Subject key identifier: CD:A6:98:01:1D:10:F4:36:E3:BB:C3:16:64:23:9B:31:50:C5:3C:19 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 5661AB628E3686B91AEB352A2B07FA5F833483EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/CDA698011D10F436E3BBC31664239B3150C53C19.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Wed 21 Oct 2026 02:13:12 +0000 Certificate not after: Wed 20 Oct 2027 02:18:12 +0000 Subordinate resources: IP: 160.20.128.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:61:ab:62:8e:36:86:b9:1a:eb:35:2a:2b:07:fa:5f:83:34:83:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Oct 21 02:13:12 2026 GMT Not After : Oct 20 02:18:12 2027 GMT Subject: CN=CDA698011D10F436E3BBC31664239B3150C53C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2e:c6:65:3c:71:7d:43:2f:c9:7e:79:65:95: f6:9d:b6:66:ef:44:8c:ed:53:cd:c1:dc:09:4c:8b: dd:34:51:64:dc:81:b6:4b:ea:16:bb:91:01:51:4c: 08:10:0c:02:2e:d5:91:73:2b:dd:94:ad:38:b5:f3: 1c:9f:78:b4:8c:fb:91:0d:e8:c3:ea:89:50:47:9e: b9:dd:af:68:50:ca:50:27:cd:fe:ce:84:81:1c:9a: 36:dd:f8:92:70:b7:25:91:94:01:7c:8c:1b:f6:ec: 80:0d:94:95:24:31:d9:3f:17:65:61:da:b1:46:f8: d4:d2:ba:ae:65:b1:ac:c1:45:09:57:cf:58:bc:d2: 8c:93:25:ba:e2:99:05:b2:6f:4f:20:6f:2a:66:73: 8f:41:69:d2:ce:15:d4:50:70:06:4f:ef:ae:a8:d8: 0b:79:66:72:8b:49:5d:2a:04:03:86:96:01:a0:2f: c9:c9:03:b2:77:25:41:96:ba:97:da:ee:96:b4:03: 96:46:81:37:39:12:82:b8:1b:73:77:4a:fa:62:b1: 30:b1:1e:0d:61:34:95:05:39:dc:11:ed:23:dd:60: 4c:0f:e1:80:5d:ff:b6:3e:e7:93:8c:e5:33:d4:4e: 84:63:19:29:ce:39:aa:6c:28:b8:0d:cf:83:48:b8: a9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:A6:98:01:1D:10:F4:36:E3:BB:C3:16:64:23:9B:31:50:C5:3C:19 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/CDA698011D10F436E3BBC31664239B3150C53C19.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.128.0/23 Signature Algorithm: sha256WithRSAEncryption 60:9e:d6:b3:74:d7:f0:ab:4e:cf:90:10:d2:0d:e7:5e:31:6a: cd:b7:01:3b:dc:3a:6c:cd:b4:1f:88:06:7c:c6:d9:33:95:9a: bd:e5:b9:78:69:3b:f6:51:25:d4:48:89:1f:94:f8:93:4c:84: d9:89:6b:d5:7f:7f:d8:d3:e1:bb:40:02:ba:d2:e3:19:e3:52: 6f:45:2a:c3:a0:c6:64:1d:a8:e1:42:32:31:17:36:39:59:e5: 67:94:5d:4b:15:3d:2b:48:55:f5:45:11:78:f0:04:33:61:bc: a0:e5:16:27:2a:7d:50:49:c1:26:ec:d6:a3:0b:d2:09:8c:ac: 05:00:4e:a3:9c:67:ad:39:b1:e7:e9:03:03:6d:56:a5:58:13: 17:49:7d:69:0b:48:23:ac:44:13:32:a5:c0:c0:51:12:0d:0e: 38:ce:ba:6d:6e:0d:4e:44:e1:bc:db:1e:06:34:d9:83:d8:9e: 89:57:7b:f4:a6:93:dd:42:f2:38:26:7b:0e:5b:d5:38:4d:25: 1f:b7:e4:90:2f:46:57:c2:53:dc:0e:c7:ce:7b:2a:2b:3a:f8: ca:75:23:db:dc:91:0d:df:bc:c2:ea:8a:71:ec:52:f5:e6:f8: 7a:93:69:32:e7:82:d7:2b:56:14:61:88:5e:0c:e5:78:c7:41: 4c:ff:84:b7 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUVmGrYo42hrka6zUqKwf6X4M0g+swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MTAyMTAyMTMxMloX DTI3MTAyMDAyMTgxMlowMzExMC8GA1UEAxMoQ0RBNjk4MDExRDEwRjQzNkUzQkJD MzE2NjQyMzlCMzE1MEM1M0MxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMuxmU8cX1DL8l+eWWV9p22Zu9EjO1TzcHcCUyL3TRRZNyBtkvqFruRAVFM CBAMAi7VkXMr3ZStOLXzHJ94tIz7kQ3ow+qJUEeeud2vaFDKUCfN/s6EgRyaNt34 knC3JZGUAXyMG/bsgA2UlSQx2T8XZWHasUb41NK6rmWxrMFFCVfPWLzSjJMluuKZ BbJvTyBvKmZzj0Fp0s4V1FBwBk/vrqjYC3lmcotJXSoEA4aWAaAvyckDsnclQZa6 l9rulrQDlkaBNzkSgrgbc3dK+mKxMLEeDWE0lQU53BHtI91gTA/hgF3/tj7nk4zl M9ROhGMZKc45qmwouA3Pg0i4qdkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM2mmAEdEPQ247vDFmQjmzFQxTwZMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZiMDFiODk1LTUzYzYtNGEyMS1hMmMwLTg5OWRmMmYyZDg5Yy8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82YjAxYjg5 NS01M2M2LTRhMjEtYTJjMC04OTlkZjJmMmQ4OWMvMS9DREE2OTgwMTFEMTBGNDM2 RTNCQkMzMTY2NDIzOUIzMTUwQzUzQzE5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBSAMA0GCSqGSIb3DQEBCwUAA4IBAQBgntazdNfwq07PkBDSDedeMWrNtwE7 3DpszbQfiAZ8xtkzlZq95bl4aTv2USXUSIkflPiTTITZiWvVf3/Y0+G7QAK60uMZ 41JvRSrDoMZkHajhQjIxFzY5WeVnlF1LFT0rSFX1RRF48AQzYbyg5RYnKn1QScEm 7NajC9IJjKwFAE6jnGetObHn6QMDbValWBMXSX1pC0gjrEQTMqXAwFESDQ44zrpt bg1OROG82x4GNNmD2J6JV3v0ppPdQvI4JnsOW9U4TSUft+SQL0ZXwlPcDsfOeyor OvjKdSPb3JEN37zC6opx7FL15vh6k2ky54LXK1YUYYheDOV4x0FM/4S3 -----END CERTIFICATE-----Generated at Tue Nov 3 02:43:20 2026 by rpki-client