$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer File: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer (raw, json) Hash identifier: CAAM/o9+lEDYECC6ZXPRhwnHqWi30uKkOQ/n7+egIH8= Subject key identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7D7CDCA0F9631F5469703D6590A5BB0BE7BE4034 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft caRepository: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 05:13:42 +0000 Certificate not after: Tue 02 Jun 2026 05:18:42 +0000 Subordinate resources: IP: 103.41.192.0/22 IP: 117.53.144.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 08:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:7c:dc:a0:f9:63:1f:54:69:70:3d:65:90:a5:bb:0b:e7:be:40:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 05:13:42 2025 GMT Not After : Jun 2 05:18:42 2026 GMT Subject: CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b5:ec:0f:3e:e4:c8:bc:2c:79:57:1d:77:a0: ed:1d:99:8e:77:d9:72:50:33:b0:f2:a8:40:3d:41: c1:2f:97:30:1a:a8:11:3e:1e:7f:f1:d2:82:79:3f: 35:bb:c0:fe:f1:85:1b:a8:b9:be:1d:64:25:25:d9: a0:73:5e:e8:ed:f5:f4:3b:d2:bb:6f:b5:fa:8a:f8: e9:39:79:4a:b5:de:a3:92:ac:06:ad:55:98:e0:54: 44:ae:ba:93:a2:bf:6a:16:5a:74:8f:53:55:c9:b8: b3:cb:30:28:8f:ee:17:15:ea:12:3c:5b:fa:70:4f: 06:ea:8a:9a:1a:d7:68:e2:88:db:fd:48:c4:3a:88: ee:d5:2d:70:6b:38:6f:a7:80:a7:39:0b:d2:76:ec: 75:4f:d1:fc:90:dd:e0:44:9e:7d:2b:db:9f:92:7d: c2:f7:42:e9:70:6a:84:fc:82:32:d3:ee:1c:60:dd: 18:90:6c:70:84:99:aa:24:ee:73:f7:f0:f6:df:38: b6:26:62:b4:e7:2a:51:83:10:c8:f8:a5:58:da:f0: b3:90:6d:c7:90:9c:74:9a:72:03:45:c8:25:fa:a1: 27:40:4e:4d:ce:86:60:34:19:49:59:b0:a4:f0:99: 2a:ac:0b:e2:79:39:21:6f:df:7d:95:8e:eb:c0:61: 46:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.41.192.0/22 117.53.144.0/22 Signature Algorithm: sha256WithRSAEncryption 71:a2:8d:f9:60:da:e6:ce:d9:55:66:40:1d:51:23:42:ea:6c: 59:ff:a7:f6:a5:44:f1:b5:be:0b:5d:ad:de:20:43:c0:30:ad: 1a:7a:57:09:ff:78:37:92:71:c8:32:2b:99:bc:6e:e9:55:c1: c0:59:14:9a:75:0d:ab:a5:c0:7b:9a:bf:d8:0c:e0:7b:23:21: 7a:f9:71:83:ac:94:22:31:56:99:64:2e:ff:27:b1:d3:9a:df: 5c:5d:2c:1f:7c:f3:f2:27:eb:a1:f8:d2:d4:45:0e:c3:54:a3: b2:57:d2:16:07:a1:1a:01:e5:ec:fc:7d:0d:42:a7:a9:97:37: 24:a4:57:80:91:58:96:40:ad:01:7e:85:64:65:7c:2c:af:58: 11:09:2a:e6:d5:97:05:68:4d:b3:e5:4b:62:40:cd:a4:21:98: 54:ac:0d:63:3f:c9:20:9b:3e:8b:48:ae:9d:da:9d:36:10:14: 3d:2f:6e:c7:87:0d:d8:69:67:67:77:2d:26:21:6c:10:df:dd: cb:f4:d6:70:01:14:c2:70:6f:79:25:9c:c2:f4:02:b2:ac:3b: b7:ea:36:f7:04:ee:f2:a2:7d:d3:1d:6e:99:aa:17:8d:a0:a2: c1:42:ea:43:c5:38:e1:08:b0:d2:28:ce:a0:66:69:88:38:4f: 6e:e7:a2:e5 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUfXzcoPljH1RpcD1lkKW7C+e+QDQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzA1MTM0MloX DTI2MDYwMjA1MTg0MlowMzExMC8GA1UEAxMoNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1 Q0Y5QjJBODFFMjIzOTI1QTg5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANe17A8+5Mi8LHlXHXeg7R2ZjnfZclAzsPKoQD1BwS+XMBqoET4ef/HSgnk/ NbvA/vGFG6i5vh1kJSXZoHNe6O319DvSu2+1+or46Tl5SrXeo5KsBq1VmOBURK66 k6K/ahZadI9TVcm4s8swKI/uFxXqEjxb+nBPBuqKmhrXaOKI2/1IxDqI7tUtcGs4 b6eApzkL0nbsdU/R/JDd4ESefSvbn5J9wvdC6XBqhPyCMtPuHGDdGJBscISZqiTu c/fw9t84tiZitOcqUYMQyPilWNrws5Btx5CcdJpyA0XIJfqhJ0BOTc6GYDQZSVmw pPCZKqwL4nk5IW/ffZWO68BhRlUCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEmLRreJNh0qqk5c+bKoHiI5JaifMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81MTkxNjZhMS0xOGNkLTQ0ZDMtYTZlMC0yZWY4MmY3NjBkMjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUxOTE2NmEx LTE4Y2QtNDRkMy1hNmUwLTJlZjgyZjc2MGQyOC8wLzQ5OEI0NkI3ODkzNjFEMkFB QTRFNUNGOUIyQTgxRTIyMzkyNUE4OUYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAJnKcADBAJ1NZAwDQYJKoZIhvcNAQELBQADggEBAHGijflg2ubO2VVmQB1RI0Lq bFn/p/alRPG1vgtdrd4gQ8AwrRp6Vwn/eDeSccgyK5m8bulVwcBZFJp1DaulwHua v9gM4HsjIXr5cYOslCIxVplkLv8nsdOa31xdLB988/In66H40tRFDsNUo7JX0hYH oRoB5ez8fQ1Cp6mXNySkV4CRWJZArQF+hWRlfCyvWBEJKubVlwVoTbPlS2JAzaQh mFSsDWM/ySCbPotIrp3anTYQFD0vbseHDdhpZ2d3LSYhbBDf3cv01nABFMJwb3kl nML0ArKsO7fqNvcE7vKifdMdbpmqF42gosFC6kPFOOEIsNIozqBmaYg4T27nouU= -----END CERTIFICATE-----Generated at Thu Jul 3 08:52:36 2025 by rpki-client