$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/3/947970103FC7D5D4259EE8037681B9B77A2850FE.cer File: 947970103FC7D5D4259EE8037681B9B77A2850FE.cer (raw, json) Hash identifier: pyV7Vl/JG9m/wFfzbgViDCEhFVjh81WOjs0E0iwKHsI= Subject key identifier: 94:79:70:10:3F:C7:D5:D4:25:9E:E8:03:76:81:B9:B7:7A:28:50:FE Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53 Certificate issuer: /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53 Certificate serial: 33752730E3AF96FDC9EF5D83E259CB670A2786A0 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9eeb7d27-6b6c-45ac-b37d-49ff95d3fcc8/0/947970103FC7D5D4259EE8037681B9B77A2850FE.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9eeb7d27-6b6c-45ac-b37d-49ff95d3fcc8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Thu 24 Sep 2026 03:27:00 +0000 Certificate not after: Thu 23 Sep 2027 03:32:00 +0000 Subordinate resources: IP: 151.158.236.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 06:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:75:27:30:e3:af:96:fd:c9:ef:5d:83:e2:59:cb:67:0a:27:86:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53 Validity Not Before: Sep 24 03:27:00 2026 GMT Not After : Sep 23 03:32:00 2027 GMT Subject: CN=947970103FC7D5D4259EE8037681B9B77A2850FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f0:4b:a2:27:e9:c2:e5:fb:b9:b3:8b:dd:11: 5e:7a:15:04:92:2d:ac:e8:f3:b7:8a:98:72:b1:f4: d3:0c:f3:43:b5:10:74:9a:6f:6d:dd:1b:4d:da:8e: 30:72:fb:6e:84:b1:80:3d:e1:58:b7:77:98:81:1d: ba:8b:c4:64:e7:8e:3c:fb:80:fe:a5:36:87:26:18: 60:74:a5:a7:27:53:55:32:36:8b:d1:97:6d:45:e4: 58:2b:59:7d:d6:08:cc:b0:41:86:7b:19:9a:17:2d: 6e:11:c0:39:66:7c:4b:95:6a:14:05:b5:38:82:d0: 81:82:2c:55:15:df:b1:c1:bb:f4:06:e3:db:c4:d4: a7:c0:0a:04:a1:98:db:f7:b4:f1:b6:e1:32:2c:34: c4:13:e3:97:e6:fd:2a:d9:65:f4:7d:d4:b5:c4:8b: 8a:af:bd:38:ce:d5:0d:16:e9:1e:f6:67:0a:83:60: 4f:c9:57:9f:cd:e3:5c:8b:84:f8:6e:8b:e4:02:d2: 69:3e:9a:f5:66:b8:a6:e0:c8:af:c2:1c:78:a5:4a: ef:4f:d1:a6:fc:09:96:2e:fc:73:81:a6:c2:a2:8d: 16:d6:4f:1f:91:45:ca:af:1c:e4:34:09:33:e4:29: 01:cf:f5:c4:6a:04:d4:8c:4e:9d:12:eb:fd:2e:86: 33:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 94:79:70:10:3F:C7:D5:D4:25:9E:E8:03:76:81:B9:B7:7A:28:50:FE X509v3 Authority Key Identifier: keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9eeb7d27-6b6c-45ac-b37d-49ff95d3fcc8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9eeb7d27-6b6c-45ac-b37d-49ff95d3fcc8/0/947970103FC7D5D4259EE8037681B9B77A2850FE.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.158.236.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:7c:b2:92:b3:b2:73:b5:e6:ea:22:0c:f2:be:31:36:de:b5: bb:c8:00:bf:8a:d0:af:bf:55:b2:8c:48:af:f1:79:14:e8:46: 0e:db:cd:45:0b:27:c4:2a:2d:2d:69:c1:ac:92:d8:fc:9b:c3: 23:e7:2b:c5:17:5b:87:03:6c:9f:99:79:3b:ac:88:cc:dd:22: 62:db:a5:48:5e:7e:dc:46:e1:88:0a:0b:5a:85:cd:8e:79:e7: cb:47:af:d6:89:c9:e9:29:89:64:70:95:d9:ea:59:fe:d6:a5: 1e:85:8d:a7:9f:3d:7f:91:4c:16:72:9d:9f:2e:b8:3f:a9:88: 17:3f:0c:64:34:07:18:bb:8d:81:67:18:b0:00:9b:bf:f5:51: 48:fa:93:96:98:60:a6:3e:87:83:d3:c4:74:ec:d8:3b:98:89: b8:0f:01:a0:bf:02:2b:a5:13:b9:9f:49:1e:01:36:ce:f4:65: dd:fe:c5:b3:7b:92:23:a3:d5:2a:62:9d:1d:7f:08:3b:25:b2: c6:1d:d3:0b:b6:19:91:d8:01:b8:e7:a8:36:12:28:8b:56:2f: ba:c6:13:0a:f0:d0:c8:cb:61:b8:da:c1:45:0c:8f:64:d5:ea: 36:c9:ba:f8:86:93:06:d7:6c:b1:75:d4:9b:b4:44:f1:3e:a0: 6f:f5:b1:d8 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUM3UnMOOvlv3J712D4lnLZwonhqAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhGOTI3REYzODQ4 QUJBQkNBODhGRjNEOTVBMUU1QjE2NzU0QzYzQTUzMB4XDTI2MDkyNDAzMjcwMFoX DTI3MDkyMzAzMzIwMFowMzExMC8GA1UEAxMoOTQ3OTcwMTAzRkM3RDVENDI1OUVF ODAzNzY4MUI5Qjc3QTI4NTBGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAITwS6In6cLl+7mzi90RXnoVBJItrOjzt4qYcrH00wzzQ7UQdJpvbd0bTdqO MHL7boSxgD3hWLd3mIEduovEZOeOPPuA/qU2hyYYYHSlpydTVTI2i9GXbUXkWCtZ fdYIzLBBhnsZmhctbhHAOWZ8S5VqFAW1OILQgYIsVRXfscG79Abj28TUp8AKBKGY 2/e08bbhMiw0xBPjl+b9Ktll9H3UtcSLiq+9OM7VDRbpHvZnCoNgT8lXn83jXIuE +G6L5ALSaT6a9Wa4puDIr8IceKVK70/RpvwJli78c4GmwqKNFtZPH5FFyq8c5DQJ M+QpAc/1xGoE1IxOnRLr/S6GM/0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJR5cBA/x9XUJZ7oA3aBubd6KFD+MB8GA1UdIwQYMBaAFPkn 3zhIq6vKiP89laHlsWdUxjpTMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMy9G OTI3REYzODQ4QUJBQkNBODhGRjNEOTVBMUU1QjE2NzU0QzYzQTUzLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CMzIyQTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi8tU2Zm T0VpcnE4cUlfejJWb2VXeFoxVEdPbE0uY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzllZWI3ZDI3LTZiNmMtNDVhYy1iMzdkLTQ5ZmY5NWQzZmNjOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85ZWViN2Qy Ny02YjZjLTQ1YWMtYjM3ZC00OWZmOTVkM2ZjYzgvMC85NDc5NzAxMDNGQzdENUQ0 MjU5RUU4MDM3NjgxQjlCNzdBMjg1MEZFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBl57sMA0GCSqGSIb3DQEBCwUAA4IBAQALfLKSs7JztebqIgzyvjE23rW7yAC/ itCvv1WyjEiv8XkU6EYO281FCyfEKi0tacGsktj8m8Mj5yvFF1uHA2yfmXk7rIjM 3SJi26VIXn7cRuGICgtahc2OeefLR6/WicnpKYlkcJXZ6ln+1qUehY2nnz1/kUwW cp2fLrg/qYgXPwxkNAcYu42BZxiwAJu/9VFI+pOWmGCmPoeD08R07Ng7mIm4DwGg vwIrpRO5n0keATbO9GXd/sWze5Ijo9UqYp0dfwg7JbLGHdMLthmR2AG456g2EiiL Vi+6xhMK8NDIy2G42sFFDI9k1eo2ybr4hpMG12yxddSbtETxPqBv9bHY -----END CERTIFICATE-----Generated at Wed Oct 14 06:44:27 2026 by rpki-client