$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer File: 46E596CAE0AEADA8B4135425216E8783D92E6C76.cer (raw, json) Hash identifier: xKWqKghc91JbTTnCLrggz4SbUKBocFf5T0Dv7oNvD68= Subject key identifier: 46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 667743CA06972F5DF3EFCE7318BB23273D643E5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft caRepository: rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 19:23:55 +0000 Certificate not after: Tue 02 Jun 2026 19:28:55 +0000 Subordinate resources: IP: 103.242.79.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:77:43:ca:06:97:2f:5d:f3:ef:ce:73:18:bb:23:27:3d:64:3e:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 19:23:55 2025 GMT Not After : Jun 2 19:28:55 2026 GMT Subject: CN=46E596CAE0AEADA8B4135425216E8783D92E6C76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a7:bb:72:ad:a3:ee:40:ab:09:07:37:96:c7: 64:ea:0d:fe:84:86:34:05:73:57:18:fe:fe:70:61: 5f:1d:c2:c1:17:45:c2:02:fc:b9:49:a4:ed:a0:94: 6e:1a:98:af:5b:44:28:c8:5c:51:68:ca:13:4c:a8: 79:76:70:c8:7c:ab:25:03:38:97:85:30:f7:22:4a: 4c:cd:2b:d2:b8:b5:b0:13:18:65:1c:b3:47:e7:ee: 71:23:30:3b:58:4a:df:c1:51:e0:01:d1:b7:08:e5: ba:46:71:a9:19:a6:e7:63:85:e8:2f:65:95:e4:24: 90:87:d7:dc:20:0b:93:12:1b:49:0a:5c:cf:82:d4: 92:72:41:64:9f:25:71:93:7f:9a:5c:d5:b4:39:b5: f5:3d:75:78:4c:30:c0:51:48:48:01:23:e1:5d:16: b2:b4:e7:cd:42:81:d1:8f:44:82:53:ee:08:d8:66: 66:d8:1f:c9:15:8f:bb:2a:b2:c9:35:6c:23:e1:16: 75:08:13:3d:dc:49:36:25:db:83:6b:78:9a:5c:a5: 3a:16:d5:53:49:b9:8c:46:3a:ce:fe:0d:8f:f2:a1: 5c:a0:8d:c4:53:ab:5e:a9:62:0c:04:22:15:44:6e: b8:80:5c:10:ff:58:96:09:6b:17:cb:40:d8:95:a7: 02:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.242.79.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:b5:d9:02:05:ff:54:b1:e1:23:cb:40:81:c6:0d:f6:13:b2: 6e:cf:f0:28:44:07:ef:db:00:3e:2c:24:72:f5:bd:3f:f2:6d: ca:17:c7:1d:f7:b2:61:6f:8c:4d:07:1b:a4:03:16:6a:8a:01: 1e:c2:1a:31:96:e1:a6:f0:5b:87:30:4c:26:af:9f:9e:76:38: 3f:27:e4:56:21:78:d8:9d:3c:48:ec:53:5e:4b:21:af:ff:9a: ae:35:0f:d2:84:7d:bc:c4:4b:f9:1c:49:71:9f:5b:33:6a:4e: 5a:b4:60:11:01:35:c7:eb:69:b7:23:e4:b7:53:c2:c7:b6:9c: 2d:c0:15:ab:17:b3:70:a3:34:b3:e5:33:c1:21:6d:c1:3e:d2: 42:0b:92:8b:cf:af:54:bc:af:3f:f7:85:29:57:ad:6a:23:45: 8d:3e:73:e8:e6:d5:93:d8:8c:68:53:56:f8:7c:1c:05:f6:6c: 02:41:99:7b:2a:85:57:35:4b:93:1b:e7:61:8a:70:ac:6a:b0: 40:a9:42:8f:af:ad:f7:b0:b6:dc:e0:27:db:cc:a0:f8:19:68: 5c:3a:5b:df:69:cb:59:c6:96:bb:5c:b4:31:35:48:38:25:29: 39:6d:9e:11:d3:96:ca:a8:e2:20:c3:34:90:a9:87:78:d0:93: ef:91:b3:8b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZndDygaXL13z785zGLsjJz1kPl4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzE5MjM1NVoX DTI2MDYwMjE5Mjg1NVowMzExMC8GA1UEAxMoNDZFNTk2Q0FFMEFFQURBOEI0MTM1 NDI1MjE2RTg3ODNEOTJFNkM3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGnu3Kto+5AqwkHN5bHZOoN/oSGNAVzVxj+/nBhXx3CwRdFwgL8uUmk7aCU bhqYr1tEKMhcUWjKE0yoeXZwyHyrJQM4l4Uw9yJKTM0r0ri1sBMYZRyzR+fucSMw O1hK38FR4AHRtwjlukZxqRmm52OF6C9lleQkkIfX3CALkxIbSQpcz4LUknJBZJ8l cZN/mlzVtDm19T11eEwwwFFISAEj4V0WsrTnzUKB0Y9EglPuCNhmZtgfyRWPuyqy yTVsI+EWdQgTPdxJNiXbg2t4mlylOhbVU0m5jEY6zv4Nj/KhXKCNxFOrXqliDAQi FURuuIBcEP9YlglrF8tA2JWnAgsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEbllsrgrq2otBNUJSFuh4PZLmx2MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yMDQ4MWU0OS1mNGMxLTRjMTMtOTRiNy0wNzAxYzkyYzM0NTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwNDgxZTQ5 LWY0YzEtNGMxMy05NGI3LTA3MDFjOTJjMzQ1MC8wLzQ2RTU5NkNBRTBBRUFEQThC NDEzNTQyNTIxNkU4NzgzRDkyRTZDNzYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn8k8wDQYJKoZIhvcNAQELBQADggEBAG212QIF/1Sx4SPLQIHGDfYTsm7P8ChE B+/bAD4sJHL1vT/ybcoXxx33smFvjE0HG6QDFmqKAR7CGjGW4abwW4cwTCavn552 OD8n5FYheNidPEjsU15LIa//mq41D9KEfbzES/kcSXGfWzNqTlq0YBEBNcfrabcj 5LdTwse2nC3AFasXs3CjNLPlM8EhbcE+0kILkovPr1S8rz/3hSlXrWojRY0+c+jm 1ZPYjGhTVvh8HAX2bAJBmXsqhVc1S5Mb52GKcKxqsECpQo+vrfewttzgJ9vMoPgZ aFw6W99py1nGlrtctDE1SDglKTltnhHTlsqo4iDDNJCph3jQk++Rs4s= -----END CERTIFICATE-----Generated at Wed Jun 4 00:10:56 2025 by rpki-client