$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer File: 46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer (raw, json) Hash identifier: fWBHEXMCCpgLI7AINPcI665xFbq06fPekDqNT8QmoOs= Subject key identifier: 46:BF:7D:69:07:C7:E3:57:26:A4:18:0F:0B:C5:F1:33:F6:C5:AD:93 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0E82EC280C7CA38C992748993824A461EADE3D5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft caRepository: rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 16 May 2025 19:03:51 +0000 Certificate not after: Fri 15 May 2026 19:08:51 +0000 Subordinate resources: IP: 103.60.90.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:82:ec:28:0c:7c:a3:8c:99:27:48:99:38:24:a4:61:ea:de:3d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 16 19:03:51 2025 GMT Not After : May 15 19:08:51 2026 GMT Subject: CN=46BF7D6907C7E35726A4180F0BC5F133F6C5AD93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:26:44:cf:f3:c6:e6:fe:5f:01:83:92:08:b4: f0:df:5b:a6:ab:f5:85:2a:af:76:03:79:5f:ca:31: 09:65:25:5e:25:37:7b:d1:b0:e3:de:3f:6b:c5:b1: 31:2a:4d:ab:f7:5c:9b:dd:63:f3:03:47:63:96:35: e3:ef:77:6f:6a:f5:13:02:80:f7:ed:08:7a:51:c1: e7:e8:4c:47:f3:a5:b0:76:9a:6a:c8:cb:b3:09:12: df:28:7b:22:0e:7d:bf:53:2e:b6:17:4d:26:d5:f5: 00:29:34:a7:60:07:ec:2a:47:32:63:bc:76:0f:4e: e5:18:2f:4c:2f:6f:6a:3c:b0:e6:75:e8:d4:36:fc: cc:47:cc:82:61:16:38:69:53:7a:f1:c6:68:51:93: dd:e2:43:4c:90:53:0a:55:02:cf:91:4f:57:e0:bc: 5d:5f:fd:1f:50:bf:03:69:59:4b:4a:c8:c6:a0:35: eb:02:28:a5:ce:9f:d8:b4:91:06:fd:ff:09:0f:6b: 4a:6a:17:f3:63:37:b7:6e:ad:46:c6:e3:18:06:40: bb:06:71:6b:0f:96:d3:10:43:fd:c8:96:5b:84:4c: b9:8d:8a:df:c2:6f:36:e8:12:68:b1:be:03:b9:1d: e4:92:18:24:34:7f:bf:49:fe:8b:01:26:8a:b1:e0: 0d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:BF:7D:69:07:C7:E3:57:26:A4:18:0F:0B:C5:F1:33:F6:C5:AD:93 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.60.90.0/24 Signature Algorithm: sha256WithRSAEncryption 81:8e:61:6b:e9:41:d2:43:93:f3:75:1e:54:48:09:c7:33:09: be:20:e3:5c:13:fc:0b:a5:38:f9:8b:22:43:fc:ca:ea:a7:83: 8a:41:24:f1:86:07:ab:b1:61:1c:b9:d6:18:2c:06:c9:64:e0: 1e:36:e4:10:f3:c9:88:66:c1:ee:29:ad:38:00:e3:96:39:a5: 8d:27:24:4f:25:8a:99:2c:61:73:f0:b3:fe:0b:81:6c:fd:bd: 86:e2:f3:0a:06:29:7a:80:8c:b3:33:fe:d0:8b:b8:eb:69:cf: 25:54:76:fd:7c:97:49:3f:70:b6:83:51:92:92:68:e6:7f:2d: c9:78:1b:cc:a1:3b:be:33:95:bc:c1:50:4b:2c:f3:7f:40:f6: 68:bb:bd:6b:3e:f5:3b:10:e5:8a:69:b9:e3:cf:6f:e1:8d:9d: 5c:96:41:37:09:89:63:c6:df:6d:8d:12:f3:c2:f0:94:10:55: 83:3f:69:9c:7c:3e:42:66:0c:d0:6a:f8:91:03:15:58:b1:65: f3:2a:e3:aa:c3:16:b9:a7:1a:f4:35:b2:01:b7:ed:43:99:06: cb:94:70:f6:d5:4e:e9:8b:3d:54:e2:c6:21:a1:dd:6d:6b:d2: 44:8c:fd:d2:5c:9d:e0:8c:40:c2:17:c6:85:f9:55:92:b1:c5: 6a:4c:a9:af -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUDoLsKAx8o4yZJ0iZOCSkYerePVowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUxNjE5MDM1MVoX DTI2MDUxNTE5MDg1MVowMzExMC8GA1UEAxMoNDZCRjdENjkwN0M3RTM1NzI2QTQx ODBGMEJDNUYxMzNGNkM1QUQ5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMwmRM/zxub+XwGDkgi08N9bpqv1hSqvdgN5X8oxCWUlXiU3e9Gw494/a8Wx MSpNq/dcm91j8wNHY5Y14+93b2r1EwKA9+0IelHB5+hMR/OlsHaaasjLswkS3yh7 Ig59v1MuthdNJtX1ACk0p2AH7CpHMmO8dg9O5RgvTC9vajyw5nXo1Db8zEfMgmEW OGlTevHGaFGT3eJDTJBTClUCz5FPV+C8XV/9H1C/A2lZS0rIxqA16wIopc6f2LSR Bv3/CQ9rSmoX82M3t26tRsbjGAZAuwZxaw+W0xBD/ciWW4RMuY2K38JvNugSaLG+ A7kd5JIYJDR/v0n+iwEmirHgDX0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEa/fWkHx+NXJqQYDwvF8TP2xa2TMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wMTQ2NjMyYS1iMmUxLTQyMGEtYTg5NS1jNGExZTIyMTdkYTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAxNDY2MzJh LWIyZTEtNDIwYS1hODk1LWM0YTFlMjIxN2RhMy8wLzQ2QkY3RDY5MDdDN0UzNTcy NkE0MTgwRjBCQzVGMTMzRjZDNUFEOTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnPFowDQYJKoZIhvcNAQELBQADggEBAIGOYWvpQdJDk/N1HlRICcczCb4g41wT /AulOPmLIkP8yuqng4pBJPGGB6uxYRy51hgsBslk4B425BDzyYhmwe4prTgA45Y5 pY0nJE8lipksYXPws/4LgWz9vYbi8woGKXqAjLMz/tCLuOtpzyVUdv18l0k/cLaD UZKSaOZ/Lcl4G8yhO74zlbzBUEss839A9mi7vWs+9TsQ5YppuePPb+GNnVyWQTcJ iWPG322NEvPC8JQQVYM/aZx8PkJmDNBq+JEDFVixZfMq46rDFrmnGvQ1sgG37UOZ BsuUcPbVTumLPVTixiGh3W1r0kSM/dJcneCMQMIXxoX5VZKxxWpMqa8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:44:56 2025 by rpki-client