$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5.cer File: CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5.cer (raw, json) Hash identifier: Ft2K0ru5s+XzYnS6ML5SbkLV7e0yhwWCp5ANrHcqTwg= Subject key identifier: CE:A0:E1:4B:52:5E:5A:73:96:4E:38:F8:B6:F1:8E:3C:CC:B1:AD:F5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 568199DEC94A28A1397526FBFDBD6A5F05D47F64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/02244416-0e80-4285-9e91-71758d89e1c0/0/CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/02244416-0e80-4285-9e91-71758d89e1c0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Mon 12 Oct 2026 02:18:07 +0000 Certificate not after: Mon 11 Oct 2027 02:23:07 +0000 Subordinate resources: AS: 139233 IP: 2001:df6:f7c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:81:99:de:c9:4a:28:a1:39:75:26:fb:fd:bd:6a:5f:05:d4:7f:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 12 02:18:07 2026 GMT Not After : Oct 11 02:23:07 2027 GMT Subject: CN=CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a1:d2:33:af:d6:c3:1a:5f:e3:54:5c:3f:da: b5:61:18:78:33:16:00:7a:2d:5a:c2:ca:07:c0:f0: d0:a6:49:b7:37:62:9f:97:1d:60:0c:d0:09:cb:96: 7d:76:11:02:ab:f8:d9:83:05:b0:02:c4:47:75:40: 48:06:2d:69:d3:68:9a:6e:8b:87:22:52:36:70:21: 40:f8:4a:f2:70:51:15:45:2e:25:a2:a8:5a:64:4c: ca:02:12:f2:2f:0b:99:bc:db:93:58:d8:31:5c:72: 8e:ae:ec:dc:85:8e:eb:f2:67:a8:7f:b0:07:aa:7d: c0:d1:32:f6:c1:20:26:1f:e9:89:19:30:4f:a5:9f: 5b:0e:6b:87:32:c9:38:63:be:1a:78:af:dc:2b:37: 65:0e:2a:18:a1:16:a9:cc:81:1c:9b:33:f6:f8:42: ac:fd:db:06:d4:b3:43:4c:3c:97:d8:c6:17:e1:42: f3:80:f3:ec:62:8a:71:5c:07:c5:01:3e:89:e9:00: 07:d8:10:fa:07:e4:2f:df:82:3a:4b:e2:6b:2b:ae: 4f:0f:d2:09:8c:2e:ca:08:fd:45:b7:9d:fd:db:bc: 8c:ee:9c:41:5e:97:9c:37:55:9d:19:14:67:07:7a: 74:42:4d:22:9d:c7:15:09:d3:0e:c3:91:f5:77:1a: bd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:A0:E1:4B:52:5E:5A:73:96:4E:38:F8:B6:F1:8E:3C:CC:B1:AD:F5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/02244416-0e80-4285-9e91-71758d89e1c0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/02244416-0e80-4285-9e91-71758d89e1c0/0/CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:f7c0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 139233 Signature Algorithm: sha256WithRSAEncryption 75:46:8c:ed:1d:1b:79:50:9f:d0:3d:de:93:ea:d0:24:b1:df: 63:0c:9c:51:15:26:3a:f7:42:e2:60:91:46:73:9f:44:c5:15: 90:48:ea:bf:bc:0f:ae:74:8c:80:73:51:b3:dd:f8:dc:e8:87: 83:e9:47:74:dc:bb:bf:59:33:c1:ed:be:c6:b4:4d:84:99:38: 97:78:66:35:a2:f3:03:d1:5f:c9:f2:1c:bc:d8:8d:6d:ea:94: fb:37:f6:fc:87:7b:99:e4:ac:ad:db:d3:38:65:36:81:df:4d: e2:2d:27:28:b6:ef:14:d5:14:fd:44:14:b7:e0:c5:c8:66:29: 68:4b:d5:7d:f6:5e:87:7e:ae:10:7b:e2:b7:32:6c:a2:6d:23: 3c:9d:9d:7e:f8:4d:15:cb:4c:e2:8b:55:97:df:8d:00:ad:98: d1:fa:86:d7:e6:db:ea:ae:58:b4:b8:42:41:06:07:52:0b:1f: 9a:77:a3:3b:dd:43:74:75:f4:1a:10:c8:e4:18:b9:09:b3:f3: 7e:10:50:0e:10:cc:82:49:71:2e:f2:5a:f9:fa:2e:13:f9:1f: bf:d5:47:36:29:0c:a0:21:f5:75:6b:08:e4:49:ac:a9:83:1a: 4d:be:c1:f7:06:32:91:6c:62:5d:a5:a0:ea:40:6e:f9:2d:62: e6:a7:a0:b7 -----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgIUVoGZ3slKKKE5dSb7/b1qXwXUf2QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAxMjAyMTgwN1oX DTI3MTAxMTAyMjMwN1owMzExMC8GA1UEAxMoQ0VBMEUxNEI1MjVFNUE3Mzk2NEUz OEY4QjZGMThFM0NDQ0IxQURGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIyh0jOv1sMaX+NUXD/atWEYeDMWAHotWsLKB8Dw0KZJtzdin5cdYAzQCcuW fXYRAqv42YMFsALER3VASAYtadNomm6LhyJSNnAhQPhK8nBRFUUuJaKoWmRMygIS 8i8Lmbzbk1jYMVxyjq7s3IWO6/JnqH+wB6p9wNEy9sEgJh/piRkwT6WfWw5rhzLJ OGO+Gniv3Cs3ZQ4qGKEWqcyBHJsz9vhCrP3bBtSzQ0w8l9jGF+FC84Dz7GKKcVwH xQE+iekAB9gQ+gfkL9+COkviayuuTw/SCYwuygj9Rbed/du8jO6cQV6XnDdVnRkU Zwd6dEJNIp3HFQnTDsOR9XcavTsCAwEAAaOCAtgwggLUMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM6g4UtSXlpzlk44+LbxjjzMsa31MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzAyMjQ0NDE2LTBlODAtNDI4NS05ZTkxLTcxNzU4ZDg5ZTFjMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wMjI0NDQx Ni0wZTgwLTQyODUtOWU5MS03MTc1OGQ4OWUxYzAvMC9DRUEwRTE0QjUyNUU1QTcz OTY0RTM4RjhCNkYxOEUzQ0NDQjFBREY1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN9vfAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIf4TANBgkqhkiG9w0B AQsFAAOCAQEAdUaM7R0beVCf0D3ek+rQJLHfYwycURUmOvdC4mCRRnOfRMUVkEjq v7wPrnSMgHNRs9343OiHg+lHdNy7v1kzwe2+xrRNhJk4l3hmNaLzA9FfyfIcvNiN beqU+zf2/Id7meSsrdvTOGU2gd9N4i0nKLbvFNUU/UQUt+DFyGYpaEvVffZeh36u EHvitzJsom0jPJ2dfvhNFctM4otVl9+NAK2Y0fqG1+bb6q5YtLhCQQYHUgsfmnej O91DdHX0GhDI5Bi5CbPzfhBQDhDMgklxLvJa+fouE/kfv9VHNikMoCH1dWsI5Ems qYMaTb7B9wYykWxiXaWg6kBu+S1i5qegtw== -----END CERTIFICATE-----Generated at Tue Nov 3 12:03:06 2026 by rpki-client