$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer File: 49E141888BC2948405FED00F49F101FAF7483662.cer (raw, json) Hash identifier: kebi6Nxn7dKEqjkrgCX9i7Drsw8yiNQ4kuFlHfmSpts= Subject key identifier: 49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 191117BAA747EBB1EDC46504F7FE5189A40EECF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft caRepository: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 18 Jul 2025 07:53:41 +0000 Certificate not after: Fri 17 Jul 2026 07:58:41 +0000 Subordinate resources: IP: 103.146.182.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 20:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:11:17:ba:a7:47:eb:b1:ed:c4:65:04:f7:fe:51:89:a4:0e:ec:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 18 07:53:41 2025 GMT Not After : Jul 17 07:58:41 2026 GMT Subject: CN=49E141888BC2948405FED00F49F101FAF7483662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:34:bc:63:47:b3:81:f1:54:c6:a8:3e:47:87: b6:99:96:4b:b9:8e:f9:c0:fb:0a:63:65:f1:d7:68: 99:d0:9b:7b:50:40:71:cd:58:4e:ab:8c:06:40:de: ca:4d:7a:10:6e:6e:ff:19:b1:b8:08:a7:aa:ad:bb: 19:f9:7c:b0:d3:5a:47:ba:1e:d3:f8:f2:f8:c2:f5: 02:6c:47:9f:70:14:1e:d5:64:10:e2:3d:0d:18:89: 39:ca:f1:82:76:52:1a:69:2b:14:57:72:c7:06:de: 55:8a:eb:d6:35:24:0f:58:dc:1f:f6:62:2f:d1:41: d1:de:58:f0:e5:42:4b:06:2f:a2:b0:2a:62:df:68: 6c:92:30:fb:e1:be:86:b7:66:a9:b7:52:18:ad:32: 7a:5a:20:4a:e3:6a:19:25:21:d3:e1:e5:31:07:ae: 8b:d0:d2:74:52:4f:f5:77:82:cb:1f:fe:24:ae:a2: 9e:68:4a:70:75:d6:7e:e7:76:7b:78:20:6a:dd:a3: 33:b1:14:be:c5:b9:c9:e3:ae:36:2c:e5:3f:2b:96: f1:53:43:d4:c3:a7:02:86:6e:6c:c6:c6:68:6a:ab: 6c:fc:0e:75:94:48:cc:a4:ea:57:1e:82:f7:9c:38: 7e:d2:e3:2d:5a:8e:41:aa:52:f5:5e:c5:8f:2c:aa: 60:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.182.0/23 Signature Algorithm: sha256WithRSAEncryption 60:44:ad:db:84:f7:68:5e:99:65:bf:18:f3:61:01:19:87:6f: 35:62:b9:2e:f1:39:89:fe:15:27:f2:03:1d:fc:f9:a8:3d:c9: 47:8a:10:f7:b2:ad:82:74:98:1c:4d:9e:f7:f5:59:25:2a:e7: 25:93:10:ec:d3:6a:c0:f1:b6:af:6d:93:62:99:bc:15:e0:e7: 07:5f:8f:df:80:a6:63:bb:cc:bf:5e:e9:52:04:6a:ca:87:54: b7:9c:00:e4:48:a2:bb:f4:e9:55:c9:79:b5:63:87:9f:e5:18: 16:d3:24:2e:bf:86:9f:db:87:6e:2e:e3:91:56:34:2d:a1:77: 63:6e:30:fb:25:63:f5:d3:c2:ca:67:78:ee:0a:14:59:db:d9: 56:a1:61:43:73:70:3a:6d:86:d7:a9:be:bd:1c:29:c9:fe:ff: 4f:21:ab:45:47:b3:7f:6c:1c:4b:43:bd:cf:ae:2a:e4:b1:53: 3b:07:5d:bf:21:9f:9f:6e:c4:52:76:9f:ad:76:18:24:7c:b5: 3b:a9:27:5c:91:fd:aa:3e:f7:7b:ee:8a:14:45:4f:38:48:19: 15:d0:0b:b8:b2:bd:9b:52:55:fe:73:a1:52:fc:cd:70:79:a0: cd:f5:24:d2:f4:e5:be:6f:e8:c2:f7:aa:4c:92:39:da:a2:4b: df:4e:70:10 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUGREXuqdH67HtxGUE9/5RiaQO7PQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcxODA3NTM0MVoX DTI2MDcxNzA3NTg0MVowMzExMC8GA1UEAxMoNDlFMTQxODg4QkMyOTQ4NDA1RkVE MDBGNDlGMTAxRkFGNzQ4MzY2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO80vGNHs4HxVMaoPkeHtpmWS7mO+cD7CmNl8ddomdCbe1BAcc1YTquMBkDe yk16EG5u/xmxuAinqq27Gfl8sNNaR7oe0/jy+ML1AmxHn3AUHtVkEOI9DRiJOcrx gnZSGmkrFFdyxwbeVYrr1jUkD1jcH/ZiL9FB0d5Y8OVCSwYvorAqYt9obJIw++G+ hrdmqbdSGK0yelogSuNqGSUh0+HlMQeui9DSdFJP9XeCyx/+JK6inmhKcHXWfud2 e3ggat2jM7EUvsW5yeOuNizlPyuW8VND1MOnAoZubMbGaGqrbPwOdZRIzKTqVx6C 95w4ftLjLVqOQapS9V7FjyyqYH8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEnhQYiLwpSEBf7QD0nxAfr3SDZiMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81MTZhOGFkNC0wNmU2LTQwYzMtOThlNC1mYTkzYWZjNGE3NzIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUxNmE4YWQ0 LTA2ZTYtNDBjMy05OGU0LWZhOTNhZmM0YTc3Mi8wLzQ5RTE0MTg4OEJDMjk0ODQw NUZFRDAwRjQ5RjEwMUZBRjc0ODM2NjIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnkrYwDQYJKoZIhvcNAQELBQADggEBAGBErduE92hemWW/GPNhARmHbzViuS7x OYn+FSfyAx38+ag9yUeKEPeyrYJ0mBxNnvf1WSUq5yWTEOzTasDxtq9tk2KZvBXg 5wdfj9+ApmO7zL9e6VIEasqHVLecAORIorv06VXJebVjh5/lGBbTJC6/hp/bh24u 45FWNC2hd2NuMPslY/XTwspneO4KFFnb2VahYUNzcDpthtepvr0cKcn+/08hq0VH s39sHEtDvc+uKuSxUzsHXb8hn59uxFJ2n612GCR8tTupJ1yR/ao+93vuihRFTzhI GRXQC7iyvZtSVf5zoVL8zXB5oM31JNL05b5v6ML3qkySOdqiS99OcBA= -----END CERTIFICATE-----Generated at Mon Jul 21 12:31:10 2025 by rpki-client