$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/3C1BD676DB8C33BE2E681409A4EA9D74881A265B.cer File: 3C1BD676DB8C33BE2E681409A4EA9D74881A265B.cer (raw, json) Hash identifier: FKSwxF0pgdqKPNxUN9rDJpniF6QgxTfuchfJHD5g9ig= Subject key identifier: 3C:1B:D6:76:DB:8C:33:BE:2E:68:14:09:A4:EA:9D:74:88:1A:26:5B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 395AB2DD44CC03A22D79B58B3C505B3BDEC62338 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6b290f50-d141-49c9-8ce6-746062bb5324/0/3C1BD676DB8C33BE2E681409A4EA9D74881A265B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6b290f50-d141-49c9-8ce6-746062bb5324/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Fri 25 Sep 2026 15:35:56 +0000 Certificate not after: Fri 24 Sep 2027 15:40:56 +0000 Subordinate resources: AS: 154915 IP: 163.52.160.0/23 IP: 2001:df7:7fc0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:5a:b2:dd:44:cc:03:a2:2d:79:b5:8b:3c:50:5b:3b:de:c6:23:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 25 15:35:56 2026 GMT Not After : Sep 24 15:40:56 2027 GMT Subject: CN=3C1BD676DB8C33BE2E681409A4EA9D74881A265B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:19:95:56:b3:16:cd:d6:ea:ea:fd:52:8d:a4: 6d:4c:04:83:e3:cd:f6:fe:cc:fc:91:6c:de:6d:a3: 50:26:48:c5:b3:f6:c4:77:c2:2b:cb:3b:b2:ea:f6: e3:3f:4c:96:b0:ee:10:55:f0:3c:d5:6f:fe:4f:fa: 69:56:e0:9c:41:89:ed:a2:b4:b5:41:3a:aa:a8:e2: 12:48:bc:d5:be:2f:f4:87:83:d5:b0:1a:e9:55:45: 61:9b:74:c4:f6:f4:4b:b1:1b:01:4c:e0:b5:91:b4: a5:b4:93:50:4b:3d:55:8d:3e:1c:37:7e:e2:43:73: de:f1:ab:55:b4:d7:e0:01:d5:12:8f:9e:f4:8f:62: b8:19:50:4f:19:9f:99:5b:ff:01:6d:1a:14:2c:f5: 9c:71:ae:bc:32:7b:06:0f:fb:c8:9a:68:64:c0:5e: 1f:26:c3:54:86:3c:77:05:75:a1:5b:40:07:0d:0c: ff:ce:24:8b:90:f8:d5:d4:94:6d:8e:cc:1a:d4:8f: 25:4c:5b:aa:aa:51:37:60:42:f7:59:3e:39:9d:ef: cf:d2:85:8b:df:0e:47:d7:71:f9:b5:a4:90:8f:fb: df:62:79:b3:9e:2b:6f:15:b1:67:37:03:fb:96:61: f1:df:3e:80:b7:72:a0:83:2a:69:33:fb:01:54:7e: 56:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:1B:D6:76:DB:8C:33:BE:2E:68:14:09:A4:EA:9D:74:88:1A:26:5B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6b290f50-d141-49c9-8ce6-746062bb5324/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6b290f50-d141-49c9-8ce6-746062bb5324/0/3C1BD676DB8C33BE2E681409A4EA9D74881A265B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.160.0/23 IPv6: 2001:df7:7fc0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 154915 Signature Algorithm: sha256WithRSAEncryption 55:8c:5d:be:5b:20:32:8f:59:e5:04:bc:9e:b5:e4:6f:f2:97: 46:7d:9f:8b:c5:c0:d8:0b:a1:27:13:3a:64:c4:da:b6:0a:3e: 64:61:ae:54:56:00:f6:a3:f5:6f:d7:34:c5:c2:98:b4:6d:f0: 30:ce:79:fd:b3:00:eb:eb:8f:44:33:4e:c0:91:3c:59:7d:1f: 3f:43:ae:8c:80:51:52:96:8e:85:3c:10:e8:d6:4b:73:01:a8: 01:2b:74:94:69:79:6b:9c:ba:21:0f:dc:61:75:37:bd:f6:2f: 7c:9b:7f:1d:10:df:ed:91:62:d0:45:56:f0:25:1e:c1:43:13: 68:ca:7e:54:4f:f8:b8:12:ea:1b:70:98:3a:49:84:60:65:f1: fb:39:e5:72:82:e1:da:bc:a0:20:29:89:a0:dc:58:8b:d4:af: e0:16:01:a7:34:25:ad:0d:df:dd:67:a0:d4:02:9a:87:a0:1d: 89:7d:a6:79:90:17:64:81:fe:a2:a4:c5:0b:df:34:4f:f5:20: f9:08:d9:9a:21:ae:95:3d:13:f4:b0:66:8f:30:f9:3d:48:a2: 0f:41:d6:b5:4b:78:cd:50:dd:0b:c7:89:95:36:9b:d9:10:f6: 1e:80:d0:54:2e:4e:b1:ee:37:d9:77:36:89:8c:f7:5a:18:e3: 4d:a7:de:12 -----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgIUOVqy3UTMA6ItebWLPFBbO97GIzgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkyNTE1MzU1NloX DTI3MDkyNDE1NDA1NlowMzExMC8GA1UEAxMoM0MxQkQ2NzZEQjhDMzNCRTJFNjgx NDA5QTRFQTlENzQ4ODFBMjY1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJkZlVazFs3W6ur9Uo2kbUwEg+PN9v7M/JFs3m2jUCZIxbP2xHfCK8s7sur2 4z9MlrDuEFXwPNVv/k/6aVbgnEGJ7aK0tUE6qqjiEki81b4v9IeD1bAa6VVFYZt0 xPb0S7EbAUzgtZG0pbSTUEs9VY0+HDd+4kNz3vGrVbTX4AHVEo+e9I9iuBlQTxmf mVv/AW0aFCz1nHGuvDJ7Bg/7yJpoZMBeHybDVIY8dwV1oVtABw0M/84ki5D41dSU bY7MGtSPJUxbqqpRN2BC91k+OZ3vz9KFi98OR9dx+bWkkI/732J5s54rbxWxZzcD +5Zh8d8+gLdyoIMqaTP7AVR+VrsCAwEAAaOCAuYwggLiMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDwb1nbbjDO+LmgUCaTqnXSIGiZbMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZiMjkwZjUwLWQxNDEtNDljOS04Y2U2LTc0NjA2MmJiNTMyNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82YjI5MGY1 MC1kMTQxLTQ5YzktOGNlNi03NDYwNjJiYjUzMjQvMC8zQzFCRDY3NkRCOEMzM0JF MkU2ODE0MDlBNEVBOUQ3NDg4MUEyNjVCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBozSgMA8EAgACMAkDBwAgAQ33f8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Al0jMA0GCSqGSIb3DQEBCwUAA4IBAQBVjF2+WyAyj1nlBLyeteRv8pdGfZ+LxcDY C6EnEzpkxNq2Cj5kYa5UVgD2o/Vv1zTFwpi0bfAwznn9swDr649EM07AkTxZfR8/ Q66MgFFSlo6FPBDo1ktzAagBK3SUaXlrnLohD9xhdTe99i98m38dEN/tkWLQRVbw JR7BQxNoyn5UT/i4EuobcJg6SYRgZfH7OeVyguHavKAgKYmg3FiL1K/gFgGnNCWt Dd/dZ6DUApqHoB2JfaZ5kBdkgf6ipMUL3zRP9SD5CNmaIa6VPRP0sGaPMPk9SKIP Qda1S3jNUN0Lx4mVNpvZEPYegNBULk6x7jfZdzaJjPdaGONNp94S -----END CERTIFICATE-----Generated at Sat Oct 24 07:10:06 2026 by rpki-client