$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer File: 0A40D86EAE29C558B2406A52DF151128A596DFEF.cer (raw, json) Hash identifier: hgE5+Yng6dzHgFWongjzCX36pRbQOZ+JS+dkGXf3zlA= Subject key identifier: 0A:40:D8:6E:AE:29:C5:58:B2:40:6A:52:DF:15:11:28:A5:96:DF:EF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7117352613DFAFD2D74D02A72A78560EA5734F12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Fri 16 Oct 2026 09:18:48 +0000 Certificate not after: Fri 15 Oct 2027 09:23:48 +0000 Subordinate resources: AS: 45715 AS: 59137 IP: 45.250.100.0/22 IP: 103.252.20.0/22 IP: 2001:df2:3200::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:17:35:26:13:df:af:d2:d7:4d:02:a7:2a:78:56:0e:a5:73:4f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 16 09:18:48 2026 GMT Not After : Oct 15 09:23:48 2027 GMT Subject: CN=0A40D86EAE29C558B2406A52DF151128A596DFEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d4:b4:94:a7:2a:9b:c7:cf:7b:40:e4:f2:70: b3:83:96:e7:ce:a4:d7:38:6b:7c:e5:5a:76:83:23: 0d:72:60:77:ca:23:d5:fd:ed:5c:db:26:9f:6e:fa: e4:83:b0:d5:45:3a:0a:0d:47:d6:ba:f4:88:c8:67: 45:51:f1:09:e2:e3:9d:2b:eb:01:4a:a2:0a:66:e0: 0e:06:3d:cb:d9:86:7e:b1:b3:57:1a:80:71:b3:42: 76:c5:25:8f:3d:77:98:23:2e:4a:23:d0:87:84:bf: 47:12:6e:8a:6a:11:69:d0:de:74:39:73:31:7b:65: b7:7f:b4:51:ae:8b:e8:47:72:b7:d6:a6:3c:4b:57: a3:93:33:1b:31:61:1b:41:5c:86:c9:6b:cb:10:be: ff:0b:6b:b8:1c:46:9c:4a:f3:d1:c9:7f:82:ac:5e: 3a:60:a7:6c:5e:02:c0:30:22:4f:97:c2:25:57:c1: ea:a6:f0:95:9b:78:37:b2:5c:e6:2e:44:94:b6:64: b8:ad:d4:02:36:0a:5f:9f:4a:4b:a5:d6:01:98:a9: 0f:44:bb:d6:17:ab:fa:d2:8e:28:62:58:b1:41:8a: 7b:09:aa:ef:9d:f3:6f:74:8f:b2:5d:72:75:54:2b: 9c:e0:e5:9c:03:a0:12:18:40:28:cc:0a:5d:98:12: 80:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0A:40:D8:6E:AE:29:C5:58:B2:40:6A:52:DF:15:11:28:A5:96:DF:EF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.250.100.0/22 103.252.20.0/22 IPv6: 2001:df2:3200::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 45715 59137 Signature Algorithm: sha256WithRSAEncryption 0d:16:55:2f:be:e4:53:96:dc:62:67:af:3e:c0:94:0a:b9:3c: f7:91:e4:ae:ad:06:a3:65:13:a2:93:95:10:39:99:87:42:3a: 87:b3:ff:cc:48:2f:ef:04:be:21:36:8a:59:3a:da:24:b4:23: 9c:e0:4d:9a:37:a2:13:ae:74:86:1f:6d:98:12:87:07:25:85: 79:cb:07:ed:a2:0a:6a:a5:24:42:3d:94:83:09:62:9e:78:9f: eb:c1:4e:75:80:2e:f3:ae:64:81:93:db:4c:cd:d8:16:a9:40: d0:f2:fa:68:76:22:1c:11:a8:64:ee:76:ac:ae:00:ae:7d:56: 7e:bd:b9:0b:30:57:f7:d3:c4:a0:cc:fe:52:d6:04:34:00:ef: a3:43:e3:21:64:d9:f1:21:11:00:81:9f:5d:87:f2:d0:fa:82: f9:8d:71:38:2e:17:a1:9c:80:47:f9:51:c2:44:17:92:65:4e: 8b:b3:77:7d:c5:41:62:78:72:dc:fd:57:73:97:7c:23:b5:29: 43:98:3d:3b:f2:59:62:e4:5d:cc:f0:e2:a6:9f:6e:d3:95:8f: 58:a9:d5:1a:b3:a1:24:ec:82:a9:39:56:33:55:39:d0:8a:13: b3:c5:d6:f2:b3:ed:8d:5b:b2:d0:35:f2:28:88:e0:26:18:db: 99:00:ff:4f -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIUcRc1JhPfr9LXTQKnKnhWDqVzTxIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAxNjA5MTg0OFoX DTI3MTAxNTA5MjM0OFowMzExMC8GA1UEAxMoMEE0MEQ4NkVBRTI5QzU1OEIyNDA2 QTUyREYxNTExMjhBNTk2REZFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJzUtJSnKpvHz3tA5PJws4OW586k1zhrfOVadoMjDXJgd8oj1f3tXNsmn276 5IOw1UU6Cg1H1rr0iMhnRVHxCeLjnSvrAUqiCmbgDgY9y9mGfrGzVxqAcbNCdsUl jz13mCMuSiPQh4S/RxJuimoRadDedDlzMXtlt3+0Ua6L6Edyt9amPEtXo5MzGzFh G0FchslryxC+/wtruBxGnErz0cl/gqxeOmCnbF4CwDAiT5fCJVfB6qbwlZt4N7Jc 5i5ElLZkuK3UAjYKX59KS6XWAZipD0S71her+tKOKGJYsUGKewmq753zb3SPsl1y dVQrnODlnAOgEhhAKMwKXZgSgB0CAwEAAaOCAvEwggLtMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFApA2G6uKcVYskBqUt8VESillt/vMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY2NGE3MzRmLTk4NGUtNDljYi1iNGIwLTdjMWQ3OTIzN2NiMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82NjRhNzM0 Zi05ODRlLTQ5Y2ItYjRiMC03YzFkNzkyMzdjYjEvMC8wQTQwRDg2RUFFMjlDNTU4 QjI0MDZBNTJERjE1MTEyOEE1OTZERkVGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQCLfpkAwQCZ/wUMA8EAgACMAkDBwAgAQ3yMgAwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDALKTAgMA5wEwDQYJKoZIhvcNAQELBQADggEBAA0WVS++5FOW3GJnrz7A lAq5PPeR5K6tBqNlE6KTlRA5mYdCOoez/8xIL+8EviE2ilk62iS0I5zgTZo3ohOu dIYfbZgShwclhXnLB+2iCmqlJEI9lIMJYp54n+vBTnWALvOuZIGT20zN2BapQNDy +mh2IhwRqGTudqyuAK59Vn69uQswV/fTxKDM/lLWBDQA76ND4yFk2fEhEQCBn12H 8tD6gvmNcTguF6GcgEf5UcJEF5JlTouzd33FQWJ4ctz9V3OXfCO1KUOYPTvyWWLk Xczw4qafbtOVj1ip1RqzoSTsgqk5VjNVOdCKE7PF1vKz7Y1bstA18iiI4CYY25kA /08= -----END CERTIFICATE-----Generated at Mon Oct 26 05:37:32 2026 by rpki-client