$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.cer File: 3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.cer (raw, json) Hash identifier: 5SoTYoreKmiU/lscomnir9e3csYP/4SD8bgPqRYj4sc= Subject key identifier: 3A:F8:4E:5F:2C:C0:FA:70:13:2F:88:67:3D:C1:AD:1B:AE:46:0E:24 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 704F7DC791466940DD04D6D407ECECA3518C08BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/1/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Mon 05 Oct 2026 10:27:10 +0000 Certificate not after: Mon 04 Oct 2027 10:32:10 +0000 Subordinate resources: IP: 160.236.62.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:4f:7d:c7:91:46:69:40:dd:04:d6:d4:07:ec:ec:a3:51:8c:08:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Oct 5 10:27:10 2026 GMT Not After : Oct 4 10:32:10 2027 GMT Subject: CN=3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:77:25:60:47:73:80:b7:9a:95:9b:0e:6d:65: ee:5f:de:fc:d5:ce:07:ac:29:a3:e4:cb:3e:34:e5: 28:ae:98:83:85:de:b3:17:01:e4:13:aa:90:0b:d2: 10:d7:da:90:12:2c:b0:a1:ce:53:41:b0:de:bb:83: 65:6b:f2:f9:0d:e0:01:7d:9f:19:60:99:dd:65:df: ed:5c:9a:e1:c7:98:6f:32:d2:63:ac:fb:ca:55:04: 22:43:57:26:20:fe:25:a4:ea:ab:46:22:8d:df:d3: 23:8e:56:c8:de:28:d9:36:7f:56:72:b0:1b:f3:91: 1c:40:fd:69:a9:ee:ba:3d:f0:4d:f5:bf:97:8e:fc: 38:18:5f:0f:7e:99:2b:57:22:b8:8a:27:c2:e8:56: 70:39:4a:d2:e1:ad:ab:45:20:b5:96:40:e8:a8:fd: 4b:3d:8a:ae:67:0d:0e:73:51:6f:05:a5:8c:1d:72: ad:76:4b:41:76:cd:81:8d:e9:95:54:df:6b:d0:7f: 54:1c:27:fb:0c:9b:37:db:1f:95:bd:bc:9d:21:1f: 3d:d0:e8:80:2d:09:0d:39:23:d2:7f:ec:08:72:c2: 5f:23:e8:6c:93:c2:fe:01:37:e5:91:57:c2:58:cc: 52:24:3d:c1:ec:40:03:59:e0:9c:b8:15:48:14:5b: e1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3A:F8:4E:5F:2C:C0:FA:70:13:2F:88:67:3D:C1:AD:1B:AE:46:0E:24 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/1/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.62.0/24 Signature Algorithm: sha256WithRSAEncryption 85:9a:e9:a1:96:c1:5c:26:55:f3:f5:fe:ed:6d:fb:d2:0e:d1: 17:1e:2f:3b:2c:1e:b0:47:c1:fe:31:ef:07:67:bd:96:35:c8: 17:b1:73:04:e4:6a:48:75:7d:ff:ec:01:74:3a:94:9d:5d:fe: 59:10:f4:71:d0:d0:1c:2d:d3:18:5f:a2:ab:26:bd:ed:c7:05: c1:ac:b1:4f:2c:f6:f6:a7:78:d5:6c:0f:36:52:44:67:ec:a7: b4:00:51:2f:9e:ff:10:23:44:d7:cb:17:e0:52:14:04:6b:9d: 38:82:82:2e:f5:57:4f:d3:b8:8a:d2:e5:72:92:4c:fd:44:f5: e3:31:31:df:d8:e4:63:62:31:59:4a:5b:c5:70:77:28:a9:c6: d5:bd:8d:56:cd:33:69:90:6d:57:a5:5f:66:59:cb:7a:e4:c0: ba:b5:e1:98:ab:60:88:39:18:1c:9d:a0:d0:bf:53:33:69:7e: da:3a:c3:4f:58:99:89:12:66:42:e8:38:83:9b:97:14:2a:f0: a4:ce:dd:33:df:80:98:86:59:e4:75:5d:1c:59:b9:b9:88:07: d1:96:16:12:19:38:f6:2e:03:ee:12:8e:b7:b4:40:aa:e1:c0: 2c:7b:bd:10:0e:83:c8:a1:55:81:92:04:20:36:15:65:c7:8c: 91:f2:5b:8b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUcE99x5FGaUDdBNbUB+zso1GMCLowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MTAwNTEwMjcxMFoX DTI3MTAwNDEwMzIxMFowMzExMC8GA1UEAxMoM0FGODRFNUYyQ0MwRkE3MDEzMkY4 ODY3M0RDMUFEMUJBRTQ2MEUyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALF3JWBHc4C3mpWbDm1l7l/e/NXOB6wpo+TLPjTlKK6Yg4XesxcB5BOqkAvS ENfakBIssKHOU0Gw3ruDZWvy+Q3gAX2fGWCZ3WXf7Vya4ceYbzLSY6z7ylUEIkNX JiD+JaTqq0Yijd/TI45WyN4o2TZ/VnKwG/ORHED9aanuuj3wTfW/l478OBhfD36Z K1ciuIonwuhWcDlK0uGtq0UgtZZA6Kj9Sz2KrmcNDnNRbwWljB1yrXZLQXbNgY3p lVTfa9B/VBwn+wybN9sflb28nSEfPdDogC0JDTkj0n/sCHLCXyPobJPC/gE35ZFX wljMUiQ9wexAA1ngnLgVSBRb4QkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDr4Tl8swPpwEy+IZz3BrRuuRg4kMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M4NTI5NDVlLWZhMzUtNDE2OS04ODVkLWRmYjdjYjEzOTM2NC8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jODUyOTQ1 ZS1mYTM1LTQxNjktODg1ZC1kZmI3Y2IxMzkzNjQvMS8zQUY4NEU1RjJDQzBGQTcw MTMyRjg4NjczREMxQUQxQkFFNDYwRTI0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoOw+MA0GCSqGSIb3DQEBCwUAA4IBAQCFmumhlsFcJlXz9f7tbfvSDtEXHi87 LB6wR8H+Me8HZ72WNcgXsXME5GpIdX3/7AF0OpSdXf5ZEPRx0NAcLdMYX6KrJr3t xwXBrLFPLPb2p3jVbA82UkRn7Ke0AFEvnv8QI0TXyxfgUhQEa504goIu9VdP07iK 0uVykkz9RPXjMTHf2ORjYjFZSlvFcHcoqcbVvY1WzTNpkG1XpV9mWct65MC6teGY q2CIORgcnaDQv1MzaX7aOsNPWJmJEmZC6DiDm5cUKvCkzt0z34CYhlnkdV0cWbm5 iAfRlhYSGTj2LgPuEo63tECq4cAse70QDoPIoVWBkgQgNhVlx4yR8luL -----END CERTIFICATE-----Generated at Sat Oct 24 07:10:04 2026 by rpki-client