$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.cer File: 46F8F0A6E74A5056E63C041AECC551723DE9FC1F.cer (raw, json) Hash identifier: VGE2H1MsaqiTJVs6JTgdf8JcVNlQ/kiszGvUCiNW32s= Subject key identifier: 46:F8:F0:A6:E7:4A:50:56:E6:3C:04:1A:EC:C5:51:72:3D:E9:FC:1F Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 0668A7447AD91837AE831979160B958FA93455A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:49:26 +0000 Certificate not after: Sat 01 May 2027 23:54:26 +0000 Subordinate resources: IP: 157.66.131.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:68:a7:44:7a:d9:18:37:ae:83:19:79:16:0b:95:8f:a9:34:55:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 23:49:26 2026 GMT Not After : May 1 23:54:26 2027 GMT Subject: CN=46F8F0A6E74A5056E63C041AECC551723DE9FC1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c9:34:df:cc:17:83:6f:ff:23:d6:1f:0b:c7: 41:66:5e:03:a3:88:d7:e9:37:df:f0:ea:7e:65:08: 48:c2:d7:c1:00:13:c0:36:28:f1:2a:5f:73:91:88: 14:79:7c:8b:3f:e7:c0:e6:66:65:c9:f0:bc:de:52: ce:a9:db:be:23:1f:55:ee:51:49:fa:cb:64:bf:9b: 39:41:2d:d1:da:6c:74:50:ab:53:a7:ee:d2:40:b5: ae:89:8b:1a:14:3f:08:0d:af:f6:f3:00:38:4c:73: 01:d5:9c:e4:d1:5c:ed:0e:e0:df:71:04:13:94:d4: 3c:76:25:57:c1:b2:18:99:7a:3b:b7:c2:d2:fa:f9: da:45:1b:ed:6e:da:f9:a7:72:7e:e5:50:a1:09:df: 9c:8c:4d:8f:a6:10:c5:31:32:ff:2d:73:f1:1a:c1: a4:86:50:92:6c:a3:ed:6f:89:e3:d1:39:65:8c:2e: f3:80:96:0e:ee:d1:39:ff:0d:19:ae:4b:54:44:f3: 9e:20:7c:16:24:00:4f:4b:5e:18:31:90:41:2e:ee: 31:7b:23:fb:01:ba:36:e1:7f:e1:f2:60:b5:83:02: 5f:46:1c:5b:1c:b5:71:58:cf:04:38:62:83:f7:9b: 63:a4:99:d7:46:fa:5b:98:ae:f4:80:fd:3b:5d:d1: 8b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:F8:F0:A6:E7:4A:50:56:E6:3C:04:1A:EC:C5:51:72:3D:E9:FC:1F X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/46F8F0A6E74A5056E63C041AECC551723DE9FC1F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.131.0/24 Signature Algorithm: sha256WithRSAEncryption 56:80:ea:e3:c2:c5:a8:6d:3e:97:af:7f:59:ff:fd:a2:02:09: 8b:aa:a4:d4:d3:f1:24:87:91:8d:df:07:93:4d:92:ec:c0:11: ac:39:5d:9a:69:9f:55:07:e0:16:64:69:de:03:99:a0:c9:e5: c1:b4:0c:63:5d:64:ab:95:87:14:ec:91:6a:0d:8c:67:49:c7: eb:a4:8c:ec:e6:10:43:6e:fb:5c:35:a1:d3:43:a8:d0:21:11: ff:4e:45:6a:c9:9a:99:e7:68:de:f7:60:a5:8c:ff:75:05:f3: bd:26:5b:b7:f9:42:5c:87:4a:c3:68:d0:bc:41:89:d2:16:6d: be:65:4a:40:78:47:5b:a4:af:a3:90:f1:29:8e:33:cb:d7:47: 94:15:c1:0c:18:9f:9f:a9:1b:a8:6b:66:18:79:76:0b:a9:c6: 96:77:59:26:11:a0:eb:51:45:2c:d3:e0:d1:8a:d2:17:ce:f4: 57:9e:33:da:6c:10:0f:86:45:1d:c1:0a:ff:e3:14:1f:98:1d: 55:69:1a:84:ff:f4:a5:d0:20:ae:51:f7:9b:e3:e2:49:a0:14: 8c:76:79:01:5e:a8:ce:a2:d2:ba:b0:4e:6b:70:cf:45:82:a5: 31:49:5a:e9:56:6e:2a:7c:18:f0:1d:e1:18:4c:fc:af:a5:da: a8:f9:f5:5d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUBminRHrZGDeugxl5FguVj6k0VaIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjIzNDkyNloX DTI3MDUwMTIzNTQyNlowMzExMC8GA1UEAxMoNDZGOEYwQTZFNzRBNTA1NkU2M0Mw NDFBRUNDNTUxNzIzREU5RkMxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANzJNN/MF4Nv/yPWHwvHQWZeA6OI1+k33/DqfmUISMLXwQATwDYo8Spfc5GI FHl8iz/nwOZmZcnwvN5SzqnbviMfVe5RSfrLZL+bOUEt0dpsdFCrU6fu0kC1romL GhQ/CA2v9vMAOExzAdWc5NFc7Q7g33EEE5TUPHYlV8GyGJl6O7fC0vr52kUb7W7a +adyfuVQoQnfnIxNj6YQxTEy/y1z8RrBpIZQkmyj7W+J49E5ZYwu84CWDu7ROf8N Ga5LVETzniB8FiQAT0teGDGQQS7uMXsj+wG6NuF/4fJgtYMCX0YcWxy1cVjPBDhi g/ebY6SZ10b6W5iu9ID9O13Ri0UCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEb48KbnSlBW5jwEGuzFUXI96fwfMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBmOGQ4MjRkLWQ2YTEtNDU0My05Y2YwLWQ5OTI2ODMyZjI5Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wZjhkODI0 ZC1kNmExLTQ1NDMtOWNmMC1kOTkyNjgzMmYyOWYvMC80NkY4RjBBNkU3NEE1MDU2 RTYzQzA0MUFFQ0M1NTE3MjNERTlGQzFGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAnUKDMA0GCSqGSIb3DQEBCwUAA4IBAQBWgOrjwsWobT6Xr39Z//2iAgmLqqTU 0/Ekh5GN3weTTZLswBGsOV2aaZ9VB+AWZGneA5mgyeXBtAxjXWSrlYcU7JFqDYxn ScfrpIzs5hBDbvtcNaHTQ6jQIRH/TkVqyZqZ52je92CljP91BfO9Jlu3+UJch0rD aNC8QYnSFm2+ZUpAeEdbpK+jkPEpjjPL10eUFcEMGJ+fqRuoa2YYeXYLqcaWd1km EaDrUUUs0+DRitIXzvRXnjPabBAPhkUdwQr/4xQfmB1VaRqE//Sl0CCuUfeb4+JJ oBSMdnkBXqjOotK6sE5rcM9FgqUxSVrpVm4qfBjwHeEYTPyvpdqo+fVd -----END CERTIFICATE-----Generated at Tue May 12 22:15:56 2026 by rpki-client