$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.cer File: CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.cer (raw, json) Hash identifier: dnya/5vTPb/LWOxI5BgyzOAAu/aPcO53lf8Wjgkv2gw= Subject key identifier: CF:D4:6F:59:BF:CE:8E:07:99:7F:F3:88:E7:D3:D8:D6:EF:7E:62:65 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3D0859FE560A9C4689FBCA8BC1952B3511234527 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 17 Oct 2026 23:12:57 +0000 Certificate not after: Sat 16 Oct 2027 23:17:57 +0000 Subordinate resources: IP: 45.249.220.0/22 IP: 103.236.148.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:08:59:fe:56:0a:9c:46:89:fb:ca:8b:c1:95:2b:35:11:23:45:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 17 23:12:57 2026 GMT Not After : Oct 16 23:17:57 2027 GMT Subject: CN=CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a3:e4:16:6e:36:e4:00:32:73:26:27:a4:3b: 63:36:d8:1b:a4:04:82:1f:58:50:f5:93:06:0d:13: 23:19:9c:5c:85:b6:5c:fe:47:ee:26:2d:c4:cc:d1: 24:d2:30:e5:ee:4a:00:a8:ae:5c:9b:f2:7a:d2:5e: 78:83:03:40:eb:75:16:e7:fc:c7:dd:fd:c3:3b:d4: b6:42:8f:89:00:cd:af:63:02:4b:75:c9:ce:d2:27: d7:02:6a:85:44:df:65:49:1c:06:47:3f:23:8f:c6: d9:e2:f2:42:ea:7b:40:6d:89:1c:f9:4b:a5:07:38: d8:3e:74:bf:ca:39:55:02:53:73:de:5b:1c:0b:c3: 2f:a8:da:5a:ad:f0:9e:f3:64:9c:ec:74:29:3c:37: ef:82:d8:ca:99:b5:0e:ba:3f:15:be:2b:ad:be:43: 5f:ea:0c:5f:72:7a:30:3e:5c:dd:50:d2:8b:cd:3c: 15:cf:64:c3:4c:89:0f:97:50:c0:e6:7a:e7:05:8c: ba:3c:15:be:30:c0:60:32:58:ae:ab:2b:64:ca:15: 16:2d:91:e8:d5:91:ab:f4:38:ba:a3:5b:d0:19:f6: 43:3b:f0:9c:a4:3a:36:07:d7:c9:e6:36:9e:46:04: 98:2b:b4:76:ca:e9:e3:f5:95:ca:25:2b:05:78:f8: 86:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:D4:6F:59:BF:CE:8E:07:99:7F:F3:88:E7:D3:D8:D6:EF:7E:62:65 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.249.220.0/22 103.236.148.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:79:2c:b7:a0:5c:28:1f:d1:85:ab:5c:80:75:cc:77:91:c6: 68:87:27:d6:96:6f:ef:4a:68:cb:a5:1b:b2:1d:5c:29:d7:de: f2:e8:42:0a:18:4b:ec:c8:a3:98:42:03:bc:35:11:69:bd:c4: 9f:92:83:16:0c:57:61:86:d8:24:7a:f3:b1:f3:c1:3c:f2:4d: 5f:32:8d:9f:49:88:38:01:0d:44:d7:d2:e5:97:55:47:dd:67: fa:01:50:5d:bc:1a:fc:c7:9b:2a:65:1b:f0:e8:04:f1:33:84: d7:87:79:ff:cd:ff:22:ef:aa:ad:ae:e9:13:7f:fb:d4:14:9a: 89:2c:ab:2c:2b:38:3e:c8:49:f2:18:9c:02:22:82:05:49:4f: e9:5a:c5:fd:01:cb:ca:29:de:6b:10:36:57:25:6d:d4:f1:bc: 07:e1:ec:54:c7:b3:11:83:5e:cc:23:55:fb:42:d3:10:13:7f: 6b:e3:8b:a8:c2:24:18:4d:99:ba:02:2d:ca:42:e3:84:bb:2e: fd:34:14:c8:3a:99:ae:99:bf:72:fe:ce:b5:98:c3:37:d3:3c: af:99:ab:48:62:9e:e0:4f:9d:05:43:75:54:d1:5e:e2:34:2e: 61:d0:57:7f:0f:e1:29:40:79:c1:ef:68:31:41:a1:f4:c9:94: ae:32:27:ed -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUPQhZ/lYKnEaJ+8qLwZUrNREjRScwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAxNzIzMTI1N1oX DTI3MTAxNjIzMTc1N1owMzExMC8GA1UEAxMoQ0ZENDZGNTlCRkNFOEUwNzk5N0ZG Mzg4RTdEM0Q4RDZFRjdFNjI2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOmj5BZuNuQAMnMmJ6Q7YzbYG6QEgh9YUPWTBg0TIxmcXIW2XP5H7iYtxMzR JNIw5e5KAKiuXJvyetJeeIMDQOt1Fuf8x939wzvUtkKPiQDNr2MCS3XJztIn1wJq hUTfZUkcBkc/I4/G2eLyQup7QG2JHPlLpQc42D50v8o5VQJTc95bHAvDL6jaWq3w nvNknOx0KTw374LYypm1Dro/Fb4rrb5DX+oMX3J6MD5c3VDSi808Fc9kw0yJD5dQ wOZ65wWMujwVvjDAYDJYrqsrZMoVFi2R6NWRq/Q4uqNb0Bn2QzvwnKQ6NgfXyeY2 nkYEmCu0dsrp4/WVyiUrBXj4hg8CAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM/Ub1m/zo4HmX/ziOfT2NbvfmJlMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZhMzc3OTg5LTcxNmYtNDhhNS05MDhlLTE5ODQwMDJmMzIzZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82YTM3Nzk4 OS03MTZmLTQ4YTUtOTA4ZS0xOTg0MDAyZjMyM2QvMC9DRkQ0NkY1OUJGQ0U4RTA3 OTk3RkYzODhFN0QzRDhENkVGN0U2MjY1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQCLfncAwQCZ+yUMA0GCSqGSIb3DQEBCwUAA4IBAQA8eSy3oFwoH9GFq1yAdcx3 kcZohyfWlm/vSmjLpRuyHVwp197y6EIKGEvsyKOYQgO8NRFpvcSfkoMWDFdhhtgk evOx88E88k1fMo2fSYg4AQ1E19Lll1VH3Wf6AVBdvBr8x5sqZRvw6ATxM4TXh3n/ zf8i76qtrukTf/vUFJqJLKssKzg+yEnyGJwCIoIFSU/pWsX9AcvKKd5rEDZXJW3U 8bwH4exUx7MRg17MI1X7QtMQE39r44uowiQYTZm6Ai3KQuOEuy79NBTIOpmumb9y /s61mMM30zyvmatIYp7gT50FQ3VU0V7iNC5h0Fd/D+EpQHnB72gxQaH0yZSuMift -----END CERTIFICATE-----Generated at Tue Nov 3 12:03:08 2026 by rpki-client