$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer File: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer (raw, json) Hash identifier: W1J7EDUj/wPF/47WMIa1GZeeIBv1VsRcmUmqOkCiqI8= Subject key identifier: 4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 79929D080A5C304B6896200F7E126268441DBC93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft caRepository: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 18 Aug 2025 16:18:45 +0000 Certificate not after: Mon 17 Aug 2026 16:23:45 +0000 Subordinate resources: IP: 103.234.208.0/22 IP: 2001:df7:3c00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 17:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:92:9d:08:0a:5c:30:4b:68:96:20:0f:7e:12:62:68:44:1d:bc:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 18 16:18:45 2025 GMT Not After : Aug 17 16:23:45 2026 GMT Subject: CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:eb:e1:79:65:6e:2a:2e:21:34:bb:9c:59:72: b2:2c:ae:8f:47:13:5e:b9:25:20:ca:54:e4:e9:1f: ed:24:8d:9f:48:14:68:88:4e:4b:1a:16:4d:58:82: f0:86:e7:3d:85:3c:b8:f6:41:74:ee:a2:94:5b:44: 27:c9:d8:f5:c9:09:87:6b:bf:52:a3:a5:17:2a:0a: aa:08:0b:8c:a0:a8:ef:e3:82:a9:fe:4a:5a:10:6c: e9:a5:32:cc:9f:1c:6f:e9:dd:56:0c:be:6e:96:1c: b9:44:be:eb:29:db:bc:b4:6a:99:ad:72:21:d4:c5: 00:d6:5e:c1:85:ac:f4:73:65:81:b3:c1:c7:86:12: c6:fe:27:f5:d8:3f:72:13:56:60:cf:7f:73:5d:39: 54:62:73:d2:52:ad:0f:3e:2f:04:c6:85:5c:4d:05: e0:e9:67:56:a9:c7:b9:b6:92:89:18:4c:9d:46:9d: fc:f1:43:48:0d:a2:5d:1f:71:89:96:e4:3b:39:ba: 91:a7:19:2a:bd:cf:3e:8b:40:2a:e5:3d:e4:54:6a: 84:67:6b:14:b5:50:97:2c:77:1b:d4:cf:64:9a:e3: c1:7b:b9:bb:c4:eb:51:94:3f:5e:58:a3:57:ae:a2: de:eb:10:ad:7b:9f:f6:5a:f6:77:40:fb:e9:87:26: 7b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.234.208.0/22 IPv6: 2001:df7:3c00::/48 Signature Algorithm: sha256WithRSAEncryption 34:bd:91:b9:33:78:7c:de:c9:49:f6:d0:b8:64:c1:b6:da:49: 89:2f:ad:5d:f7:de:84:64:87:44:91:65:cb:78:b9:61:b3:27: ad:43:7a:8b:5d:9e:2d:c6:d7:f4:2b:a2:86:09:42:13:54:4a: aa:32:b5:6a:8d:07:c4:61:28:d4:bb:3a:c1:9a:4c:8d:2e:82: 20:39:56:4f:ff:7e:93:29:2d:b7:e8:96:24:10:89:80:ff:fa: d1:72:a2:0d:10:20:0d:a9:17:18:f4:92:1b:ce:4c:e5:42:fb: 33:c3:7a:28:9e:20:9f:74:e1:e6:50:ad:25:38:eb:43:d6:8d: 8e:ae:14:40:5b:49:1a:8c:c1:e8:e7:5b:53:e9:f0:61:4e:1e: 8e:18:01:a1:f6:9c:04:84:71:cb:22:c2:44:e3:63:1d:3c:83: 27:96:02:91:c9:a1:87:e5:15:62:50:b5:10:c5:ed:54:11:1b: be:7d:15:9f:ef:7c:f6:8c:d9:0f:76:69:d8:80:c8:02:10:7a: 0f:db:e0:dd:7a:d3:e7:88:62:b2:7f:2c:e1:c4:f8:b3:61:0c: 52:1e:ee:27:9d:ef:59:6b:4a:e5:e7:77:4a:27:7b:c6:50:9c: b3:7b:62:5f:26:e5:3a:e7:83:4f:e5:88:1b:b4:b1:07:51:04: 7b:37:1a:0f -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUeZKdCApcMEtoliAPfhJiaEQdvJMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxODE2MTg0NVoX DTI2MDgxNzE2MjM0NVowMzExMC8GA1UEAxMoNEI2QUY3MzM1RUMwN0ZFNzQ2QkMy QTM2ODMwMjQzNkVGNkIxQjlFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALvr4XllbiouITS7nFlysiyuj0cTXrklIMpU5Okf7SSNn0gUaIhOSxoWTViC 8IbnPYU8uPZBdO6ilFtEJ8nY9ckJh2u/UqOlFyoKqggLjKCo7+OCqf5KWhBs6aUy zJ8cb+ndVgy+bpYcuUS+6ynbvLRqma1yIdTFANZewYWs9HNlgbPBx4YSxv4n9dg/ chNWYM9/c105VGJz0lKtDz4vBMaFXE0F4OlnVqnHubaSiRhMnUad/PFDSA2iXR9x iZbkOzm6kacZKr3PPotAKuU95FRqhGdrFLVQlyx3G9TPZJrjwXu5u8TrUZQ/Xlij V66i3usQrXuf9lr2d0D76Ycme6cCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEtq9zNewH/nRrwqNoMCQ272sbnrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMDdjZjIwMi1mNWVjLTQxMDEtODA4NS1jZWI4NmVhNjViM2UvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwN2NmMjAy LWY1ZWMtNDEwMS04MDg1LWNlYjg2ZWE2NWIzZS8wLzRCNkFGNzMzNUVDMDdGRTc0 NkJDMkEzNjgzMDI0MzZFRjZCMUI5RUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJn6tAwDwQCAAIwCQMHACABDfc8ADANBgkqhkiG9w0BAQsFAAOCAQEANL2RuTN4 fN7JSfbQuGTBttpJiS+tXffehGSHRJFly3i5YbMnrUN6i12eLcbX9CuihglCE1RK qjK1ao0HxGEo1Ls6wZpMjS6CIDlWT/9+kyktt+iWJBCJgP/60XKiDRAgDakXGPSS G85M5UL7M8N6KJ4gn3Th5lCtJTjrQ9aNjq4UQFtJGozB6OdbU+nwYU4ejhgBofac BIRxyyLCRONjHTyDJ5YCkcmhh+UVYlC1EMXtVBEbvn0Vn+989ozZD3Zp2IDIAhB6 D9vg3XrT54hisn8s4cT4s2EMUh7uJ53vWWtK5ed3Sid7xlCcs3tiXyblOueDT+WI G7SxB1EEezcaDw== -----END CERTIFICATE-----Generated at Sat Aug 23 10:33:41 2025 by rpki-client