$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/87357D7017B31FB08B42DD4ECE6B29F36D937E74.cer File: 87357D7017B31FB08B42DD4ECE6B29F36D937E74.cer (raw, json) Hash identifier: Wruj1bY8g3o9O4BQ6c0pT17xcU5Pur4qy+YqhY/38oY= Subject key identifier: 87:35:7D:70:17:B3:1F:B0:8B:42:DD:4E:CE:6B:29:F3:6D:93:7E:74 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 060F4FC122ED02A99C03AEAE32353CFBF8575DE6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/87357D7017B31FB08B42DD4ECE6B29F36D937E74.mft caRepository: rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Wed 30 Sep 2026 14:51:58 +0000 Certificate not after: Wed 29 Sep 2027 14:56:58 +0000 Subordinate resources: IP: 144.79.229.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:0f:4f:c1:22:ed:02:a9:9c:03:ae:ae:32:35:3c:fb:f8:57:5d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Sep 30 14:51:58 2026 GMT Not After : Sep 29 14:56:58 2027 GMT Subject: CN=87357D7017B31FB08B42DD4ECE6B29F36D937E74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:69:ce:78:3f:f5:7a:fb:a7:9e:62:e4:85:f9: 9d:d2:58:08:1d:e9:14:87:df:8d:40:8d:4d:0f:ea: 73:d0:0d:74:1c:05:54:fc:54:28:94:20:8d:4a:5e: 1d:65:6d:16:06:c0:3b:b7:f0:c5:c1:bf:b2:37:fa: b9:df:44:77:f6:9a:b9:34:b5:af:bf:65:69:8a:13: fa:7b:f8:3c:b4:37:c2:27:38:3c:7e:fd:0f:4c:69: e5:07:fa:6a:73:8b:0e:2a:d5:1a:81:5f:04:19:77: 44:bb:a8:44:79:72:fb:bb:d4:e0:fe:e8:47:46:fc: 5f:7b:fc:fa:10:f9:42:86:9b:40:38:1d:a4:64:7b: 37:88:78:27:10:82:d2:00:f1:23:99:d9:7f:2c:6b: 26:02:82:89:c1:3e:c2:3c:b7:fb:25:e4:ab:91:95: 3b:89:9d:38:51:bf:c7:17:e1:13:c0:a4:25:f1:b5: 34:95:c3:83:70:73:4c:7b:f8:55:52:e9:70:e9:a5: 3f:51:cf:9e:dc:ae:89:54:7d:80:79:86:c3:c9:be: 17:81:5f:d5:f7:41:1e:f4:54:62:ca:5d:fb:9b:14: 58:0e:ac:a4:00:38:9b:81:9b:31:31:a7:95:fb:be: f3:95:dd:a9:8b:a3:1e:31:2a:92:bc:11:75:3e:e8: 1e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:35:7D:70:17:B3:1F:B0:8B:42:DD:4E:CE:6B:29:F3:6D:93:7E:74 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/87357D7017B31FB08B42DD4ECE6B29F36D937E74.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.229.0/24 Signature Algorithm: sha256WithRSAEncryption 50:03:fa:03:b9:ed:f3:9d:d0:89:df:f6:4b:07:82:1a:f3:31: bc:4c:22:fb:20:12:7b:9e:d4:37:8b:68:74:3a:87:e4:12:fd: c8:2f:f0:b6:59:06:0e:86:47:49:7c:38:ab:80:06:bf:8a:3e: 12:4a:ef:91:1d:89:a7:2e:cb:1b:d0:c7:e9:fa:96:a9:a0:46: 1e:bb:ea:3e:29:52:b9:95:76:d0:17:b7:67:84:a0:70:24:4f: 6b:b6:ab:ed:19:64:1b:95:99:f2:cb:e0:9d:ff:75:46:dc:39: 80:27:0b:03:f3:6a:c0:85:cc:cd:d0:03:89:1c:e5:1a:8b:a1: bf:85:85:71:2f:09:f8:ca:21:ba:d0:4a:f0:67:fb:f2:81:21: 71:7f:76:ce:f3:c4:1d:6d:c9:4a:57:3a:46:b1:8c:3e:b1:76: 36:9a:27:97:e0:f7:f9:26:69:1c:62:80:37:55:b0:92:e9:88: 8c:68:99:c3:b9:61:32:c9:ab:ac:b8:80:94:1b:0a:f6:82:42: 1c:d1:4f:f9:1d:31:02:0f:a3:5b:01:07:21:9a:f1:f3:99:07: 39:8c:da:e4:6a:06:ba:ab:db:f7:a5:03:4b:8d:df:82:85:ff: 7e:d3:95:56:96:8f:90:74:41:18:26:98:bf:f4:35:89:0f:7c: e3:23:12:ad -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUBg9PwSLtAqmcA66uMjU8+/hXXeYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDkzMDE0NTE1OFoX DTI3MDkyOTE0NTY1OFowMzExMC8GA1UEAxMoODczNTdENzAxN0IzMUZCMDhCNDJE RDRFQ0U2QjI5RjM2RDkzN0U3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANNpzng/9Xr7p55i5IX5ndJYCB3pFIffjUCNTQ/qc9ANdBwFVPxUKJQgjUpe HWVtFgbAO7fwxcG/sjf6ud9Ed/aauTS1r79laYoT+nv4PLQ3wic4PH79D0xp5Qf6 anOLDirVGoFfBBl3RLuoRHly+7vU4P7oR0b8X3v8+hD5QoabQDgdpGR7N4h4JxCC 0gDxI5nZfyxrJgKCicE+wjy3+yXkq5GVO4mdOFG/xxfhE8CkJfG1NJXDg3BzTHv4 VVLpcOmlP1HPntyuiVR9gHmGw8m+F4Ff1fdBHvRUYspd+5sUWA6spAA4m4GbMTGn lfu+85XdqYujHjEqkrwRdT7oHiUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIc1fXAXsx+wi0LdTs5rKfNtk350MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM1N2QwN2FlLTNjNzQtNDU3ZC04OTdmLTViODA2YmVkZWE4Ny8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zNTdkMDdh ZS0zYzc0LTQ1N2QtODk3Zi01YjgwNmJlZGVhODcvMS84NzM1N0Q3MDE3QjMxRkIw OEI0MkRENEVDRTZCMjlGMzZEOTM3RTc0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAkE/lMA0GCSqGSIb3DQEBCwUAA4IBAQBQA/oDue3zndCJ3/ZLB4Ia8zG8TCL7 IBJ7ntQ3i2h0OofkEv3IL/C2WQYOhkdJfDirgAa/ij4SSu+RHYmnLssb0Mfp+pap oEYeu+o+KVK5lXbQF7dnhKBwJE9rtqvtGWQblZnyy+Cd/3VG3DmAJwsD82rAhczN 0AOJHOUai6G/hYVxLwn4yiG60ErwZ/vygSFxf3bO88QdbclKVzpGsYw+sXY2mieX 4Pf5JmkcYoA3VbCS6YiMaJnDuWEyyausuICUGwr2gkIc0U/5HTECD6NbAQchmvHz mQc5jNrkaga6q9v3pQNLjd+Chf9+05VWlo+QdEEYJpi/9DWJD3zjIxKt -----END CERTIFICATE-----Generated at Sat Oct 24 07:10:04 2026 by rpki-client