$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer File: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer (raw, json) Hash identifier: G0vZkRr6kqwpfaxpQBtHvS7Ut8OGAELRUqFK33ZO5dA= Subject key identifier: 64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4C2A0E1990EF02E3DCF970E7FD8AE81A6D2BDB08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft caRepository: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 26 Apr 2025 04:07:54 +0000 Certificate not after: Sat 25 Apr 2026 04:12:54 +0000 Subordinate resources: IP: 103.158.208.0/23 IP: 2406:c240::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 14:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:2a:0e:19:90:ef:02:e3:dc:f9:70:e7:fd:8a:e8:1a:6d:2b:db:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 26 04:07:54 2025 GMT Not After : Apr 25 04:12:54 2026 GMT Subject: CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:32:51:73:3f:14:27:ac:fa:7b:d7:97:23:9e: 1f:80:9e:a2:fe:4c:48:1d:d8:62:29:95:99:a4:a4: 70:07:57:9b:63:2a:cf:65:be:33:42:57:13:1b:ef: df:40:c5:81:ec:e0:32:32:43:99:90:47:60:e4:0e: d9:7f:ec:84:7c:5f:fe:83:b4:d0:a2:2e:3f:fb:a4: 53:10:e1:97:06:83:d8:18:92:b6:70:0d:80:56:97: 75:de:4c:88:c4:41:11:bd:81:79:07:ea:97:89:73: 03:d4:ad:12:18:3a:46:e9:e1:67:81:e0:e2:ba:50: 13:f4:6c:d4:ea:52:f9:34:74:e0:c6:8a:b0:9b:22: 2c:81:88:fd:f1:a1:b2:88:b7:a0:72:3f:d9:1b:40: 04:84:f3:1a:cf:63:86:e6:92:2f:1f:19:4d:5e:c1: 29:ba:bf:67:9c:fd:fe:dc:d4:ac:0d:c6:b7:ca:45: 52:1d:78:b4:a6:1c:31:a8:d2:7d:5f:da:b0:a5:79: 4f:6f:8f:c2:c9:3b:b4:62:88:05:b2:54:5d:60:ad: 71:5e:1c:85:5f:8d:4e:11:48:6f:39:23:b5:6c:6d: ed:20:cd:28:c0:09:22:51:39:3b:0e:6d:09:af:ac: ec:86:c7:40:5c:97:20:84:99:25:bb:4c:35:e9:97: 62:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.208.0/23 IPv6: 2406:c240::/32 Signature Algorithm: sha256WithRSAEncryption 6a:c1:98:fd:06:2a:7b:5e:26:d1:c9:08:78:b1:08:e1:3f:68: a5:6e:ba:13:c8:0d:ee:4c:62:ec:c2:fb:10:6c:9a:cc:f4:f3: a0:8b:4b:63:4a:b1:7d:20:17:39:77:6e:e1:f5:40:0b:d0:11: 3d:4e:29:a4:16:ad:76:19:c9:89:ac:60:af:51:70:ec:f7:db: aa:94:ee:1c:cc:f5:e9:0d:db:25:68:a2:44:b7:51:bf:16:36: c7:65:e6:f5:61:11:3e:87:6a:e9:58:6d:8c:54:dd:df:67:5d: c0:9d:27:82:d8:e5:9d:1b:70:79:8d:b1:0d:ea:fc:4f:14:63: 55:e0:94:77:5d:33:92:03:ab:d6:27:49:2c:35:5c:35:40:77: b8:0b:75:eb:1e:bb:97:03:5f:99:5c:6a:5c:e2:00:4b:03:5e: 9f:b1:d9:96:60:3f:7f:8f:a0:19:cb:b0:58:83:02:dd:5c:f9: b0:e8:af:ef:e0:13:cc:9f:7d:1c:22:b8:be:7c:3c:91:b7:8c: 27:a0:76:f3:55:e4:75:40:c8:50:22:61:d4:b3:4b:4b:c4:f6: 41:1c:c8:6f:4d:5a:7e:d2:1d:5d:5d:33:aa:2c:28:89:48:98: b5:5c:8b:c1:aa:b1:f9:62:6a:f2:26:dd:a4:2c:81:e0:82:77: 84:44:09:bd -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUTCoOGZDvAuPc+XDn/YroGm0r2wgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQyNjA0MDc1NFoX DTI2MDQyNTA0MTI1NFowMzExMC8GA1UEAxMoNjRCNDY2NTFEN0IwQzc1N0U0QUVE RTAxNjkxRjA2MkZFRUYxNURCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANQyUXM/FCes+nvXlyOeH4Ceov5MSB3YYimVmaSkcAdXm2Mqz2W+M0JXExvv 30DFgezgMjJDmZBHYOQO2X/shHxf/oO00KIuP/ukUxDhlwaD2BiStnANgFaXdd5M iMRBEb2BeQfql4lzA9StEhg6RunhZ4Hg4rpQE/Rs1OpS+TR04MaKsJsiLIGI/fGh soi3oHI/2RtABITzGs9jhuaSLx8ZTV7BKbq/Z5z9/tzUrA3Gt8pFUh14tKYcMajS fV/asKV5T2+Pwsk7tGKIBbJUXWCtcV4chV+NThFIbzkjtWxt7SDNKMAJIlE5Ow5t Ca+s7IbHQFyXIISZJbtMNemXYpcCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGS0ZlHXsMdX5K7eAWkfBi/u8V22MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wZTcwNTkyNy1lYzY0LTQ0ZjUtOWM5ZS1jOWE1NWE1MjNiNjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlNzA1OTI3 LWVjNjQtNDRmNS05YzllLWM5YTU1YTUyM2I2NC8wLzY0QjQ2NjUxRDdCMEM3NTdF NEFFREUwMTY5MUYwNjJGRUVGMTVEQjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnntAwDQQCAAIwBwMFACQGwkAwDQYJKoZIhvcNAQELBQADggEBAGrBmP0GKnte JtHJCHixCOE/aKVuuhPIDe5MYuzC+xBsmsz086CLS2NKsX0gFzl3buH1QAvQET1O KaQWrXYZyYmsYK9RcOz326qU7hzM9ekN2yVookS3Ub8WNsdl5vVhET6HaulYbYxU 3d9nXcCdJ4LY5Z0bcHmNsQ3q/E8UY1XglHddM5IDq9YnSSw1XDVAd7gLdeseu5cD X5lcalziAEsDXp+x2ZZgP3+PoBnLsFiDAt1c+bDor+/gE8yffRwiuL58PJG3jCeg dvNV5HVAyFAiYdSzS0vE9kEcyG9NWn7SHV1dM6osKIlImLVci8GqsfliavIm3aQs geCCd4RECb0= -----END CERTIFICATE-----Generated at Fri May 9 10:09:01 2025 by rpki-client