$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.cer File: A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.cer (raw, json) Hash identifier: eT+Ho95xvFvUPZtd1KfVUdfxmpf18LEcZbzdmvrXuS8= Subject key identifier: A2:A5:5E:F8:A6:D2:DB:E3:C6:A4:6F:E8:9F:AF:F5:06:EE:6E:BE:C6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6B3607FB4AA738168571E630ABE2FC337A68B986 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7868119d-e012-4fb4-9650-b3afd2629b4e/0/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7868119d-e012-4fb4-9650-b3afd2629b4e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Thu 01 Oct 2026 04:22:39 +0000 Certificate not after: Thu 30 Sep 2027 04:27:39 +0000 Subordinate resources: AS: 154833 IP: 203.201.190.0/23 IP: 2001:df7:5a40::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:36:07:fb:4a:a7:38:16:85:71:e6:30:ab:e2:fc:33:7a:68:b9:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 1 04:22:39 2026 GMT Not After : Sep 30 04:27:39 2027 GMT Subject: CN=A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a1:2c:79:64:92:40:f6:bd:85:21:f1:72:38: 44:32:22:92:de:1e:f9:1b:c6:64:be:4d:cd:d0:c8: 2e:93:8e:f5:73:9d:06:64:45:92:9f:1f:e3:6b:77: 2c:20:e0:09:bc:cb:4d:fe:e9:fe:2d:fe:37:9c:b7: e8:33:8c:0a:c4:f2:39:4c:da:18:d7:ae:62:52:76: 9a:fd:df:24:53:45:f3:07:cb:6f:e2:9d:1b:2c:d0: 37:9c:b9:a5:67:37:09:a4:c0:64:fd:a3:fe:e0:33: 0e:05:89:ed:b0:51:cd:5a:06:c7:1c:b0:ba:9a:a7: ad:b0:cc:c2:40:56:58:05:a7:d0:63:8c:79:25:6f: c4:9f:0a:1b:e8:9f:0f:e6:6d:1a:48:fc:96:80:9c: b4:6c:ca:39:de:ab:d9:6a:c0:8e:f0:57:d6:64:1c: 9a:40:d0:27:35:eb:9f:cf:08:31:6e:2f:d8:5d:71: ad:81:7f:51:f1:f2:82:b8:78:15:8b:a3:3e:ab:43: df:ca:f6:7f:7c:78:c3:8c:62:18:6c:08:5c:0a:86: 8c:75:96:87:fc:59:68:a7:f5:96:2f:d7:b9:30:d2: 47:28:d1:14:a4:b5:ec:8a:09:93:0a:00:3e:cc:2f: 6c:41:95:55:07:59:ae:e1:6c:51:0f:4a:21:38:a7: fb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:A5:5E:F8:A6:D2:DB:E3:C6:A4:6F:E8:9F:AF:F5:06:EE:6E:BE:C6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7868119d-e012-4fb4-9650-b3afd2629b4e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7868119d-e012-4fb4-9650-b3afd2629b4e/0/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.201.190.0/23 IPv6: 2001:df7:5a40::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 154833 Signature Algorithm: sha256WithRSAEncryption 4c:59:96:e1:2f:40:90:fd:57:45:5d:f4:35:01:c1:ad:15:4c: ff:fe:aa:2a:ba:c9:a6:ca:32:03:50:90:74:2f:29:84:bd:3c: f5:e7:5a:c0:7c:48:62:55:f4:55:e6:c4:a1:ea:3b:6d:b1:15: 85:80:67:52:68:fa:e1:49:56:e9:1c:1b:c3:8d:30:a6:36:67: 3f:bd:c3:c6:f6:fa:16:7e:58:99:b4:7b:16:ea:fd:d7:ad:3f: a8:db:d6:55:57:ab:57:e3:af:48:c7:8d:90:8f:d8:cb:77:f3: a4:1b:b4:c5:f6:8d:51:be:ba:50:4b:8f:e6:cf:f5:a9:d0:fa: 1e:9a:eb:68:2b:9d:b8:7a:72:52:ff:50:24:c9:72:69:c7:8e: 63:0d:07:aa:cd:93:1c:99:d1:2d:ef:be:ef:c8:a0:46:cb:c3: 19:a0:ce:f4:0c:c8:48:31:d9:07:00:0c:50:fa:51:27:8d:bf: c0:25:fc:7e:bb:d1:8e:01:a8:64:fa:e4:f0:3e:6f:36:53:16: 43:ca:dc:79:3b:7c:c3:15:f8:7d:55:8b:39:fb:11:34:68:61: 8a:64:82:77:ba:71:aa:3d:9f:83:e5:fa:aa:80:b4:8c:d2:61: 2f:00:9a:06:dc:bd:d9:28:bd:f2:94:30:5f:40:59:fc:21:90: 3f:19:e3:11 -----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgIUazYH+0qnOBaFceYwq+L8M3pouYYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAwMTA0MjIzOVoX DTI3MDkzMDA0MjczOVowMzExMC8GA1UEAxMoQTJBNTVFRjhBNkQyREJFM0M2QTQ2 RkU4OUZBRkY1MDZFRTZFQkVDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJShLHlkkkD2vYUh8XI4RDIikt4e+RvGZL5NzdDILpOO9XOdBmRFkp8f42t3 LCDgCbzLTf7p/i3+N5y36DOMCsTyOUzaGNeuYlJ2mv3fJFNF8wfLb+KdGyzQN5y5 pWc3CaTAZP2j/uAzDgWJ7bBRzVoGxxywupqnrbDMwkBWWAWn0GOMeSVvxJ8KG+if D+ZtGkj8loCctGzKOd6r2WrAjvBX1mQcmkDQJzXrn88IMW4v2F1xrYF/UfHygrh4 FYujPqtD38r2f3x4w4xiGGwIXAqGjHWWh/xZaKf1li/XuTDSRyjRFKS17IoJkwoA PswvbEGVVQdZruFsUQ9KITin+zECAwEAAaOCAuYwggLiMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKKlXvim0tvjxqRv6J+v9Qbubr7GMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc4NjgxMTlkLWUwMTItNGZiNC05NjUwLWIzYWZkMjYyOWI0ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ODY4MTE5 ZC1lMDEyLTRmYjQtOTY1MC1iM2FmZDI2MjliNGUvMC9BMkE1NUVGOEE2RDJEQkUz QzZBNDZGRTg5RkFGRjUwNkVFNkVCRUM2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBy8m+MA8EAgACMAkDBwAgAQ33WkAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AlzRMA0GCSqGSIb3DQEBCwUAA4IBAQBMWZbhL0CQ/VdFXfQ1AcGtFUz//qoqusmm yjIDUJB0LymEvTz151rAfEhiVfRV5sSh6jttsRWFgGdSaPrhSVbpHBvDjTCmNmc/ vcPG9voWfliZtHsW6v3XrT+o29ZVV6tX469Ix42Qj9jLd/OkG7TF9o1RvrpQS4/m z/Wp0PoemutoK524enJS/1AkyXJpx45jDQeqzZMcmdEt777vyKBGy8MZoM70DMhI MdkHAAxQ+lEnjb/AJfx+u9GOAahk+uTwPm82UxZDytx5O3zDFfh9VYs5+xE0aGGK ZIJ3unGqPZ+D5fqqgLSM0mEvAJoG3L3ZKL3ylDBfQFn8IZA/GeMR -----END CERTIFICATE-----Generated at Sat Oct 24 07:10:01 2026 by rpki-client