$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer File: 46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer (raw, json) Hash identifier: Ctl/iWuEF0EhhvMyyD6pRm+3IYjZakQj01zmmp/PDKU= Subject key identifier: 46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3B9C88F2E3984DE4D885BA7AE1DE600C4EE7C877 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:59:03 +0000 Certificate not after: Sun 02 May 2027 00:04:03 +0000 Subordinate resources: IP: 103.142.254.0/23 IP: 2001:df1:6380::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9c:88:f2:e3:98:4d:e4:d8:85:ba:7a:e1:de:60:0c:4e:e7:c8:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:59:03 2026 GMT Not After : May 2 00:04:03 2027 GMT Subject: CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ca:37:e0:6b:43:1f:70:86:64:3e:39:88:37: 8b:b3:8b:78:20:17:d9:99:fe:5f:e9:9f:8c:65:28: 42:08:a5:90:64:71:66:d1:8d:17:ef:80:e7:f3:71: c5:bc:bb:e6:c0:d1:f1:9f:0c:d2:cc:d7:8f:c2:43: 0f:f2:91:76:c8:ef:9b:87:ed:29:b5:3b:b0:fd:97: 8e:e2:1b:9b:e4:92:2e:b3:86:ed:10:bf:c7:96:23: 39:fb:8e:0c:2b:f6:d6:e8:7a:9b:a5:46:0d:13:51: a9:31:08:e8:f8:a9:25:50:bf:77:b1:8c:79:65:d5: 95:6f:15:85:b6:30:71:ec:48:d2:d6:1e:c8:09:61: 47:32:f5:d7:e0:13:95:d1:75:bf:5a:7e:f4:10:48: 5f:90:9b:4b:7c:1b:54:c1:85:69:ee:b7:f6:a8:85: 24:a0:3e:bc:59:37:18:de:a1:27:b3:c3:3c:81:f5: d0:22:07:b6:e3:15:ed:1a:f8:b0:8f:fb:e6:80:8e: 12:42:90:2e:27:fc:d8:58:f4:26:7b:9f:7f:c0:59: 14:76:c4:06:4b:82:27:0d:d8:93:f3:bb:22:b7:64: a7:35:7e:90:d8:56:f5:b9:95:42:25:f0:6b:0a:ac: 4d:d7:6e:d1:0b:66:22:90:2a:9c:01:d5:61:c6:3b: 4c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.254.0/23 IPv6: 2001:df1:6380::/48 Signature Algorithm: sha256WithRSAEncryption 76:86:a9:b3:a4:61:1d:bd:d7:8d:a2:22:69:51:3a:bc:bb:48: 32:b7:4d:0d:9a:36:fb:d9:10:c4:63:cb:8e:fe:ff:14:2c:a7: e4:60:1c:29:12:93:0e:5f:75:5c:a1:ec:3f:b2:cc:51:fd:f0: c3:6b:bd:85:8b:8d:db:7f:b3:a6:ca:59:64:c4:ed:68:60:83: 67:a0:6a:58:76:4b:66:0b:5e:c0:56:74:57:df:e3:89:53:ac: c5:db:1c:12:ce:5e:c0:99:7e:00:83:6b:8d:4e:4c:d1:38:c6: 9c:9b:84:71:15:d2:98:ee:79:0d:33:6a:c6:fa:46:5f:c4:45: 05:5e:c6:41:18:8f:06:d8:d9:98:8e:5b:23:0e:a3:fe:1c:3d: 80:96:bb:1c:20:8e:39:bf:06:90:ed:98:3d:d9:21:86:13:1f: c5:4c:28:a0:09:51:4d:cc:3d:59:9f:f2:7e:9a:7c:8a:86:18: 6c:49:d0:f0:57:9f:b5:f0:8e:5a:0c:6e:dd:ec:4f:4b:5f:10: 2f:7f:a8:dd:fd:ea:f0:47:27:8b:fa:1a:19:ad:b6:75:e4:4d: e8:9c:9e:d7:dd:7b:69:d2:fd:87:d0:f2:ff:25:a6:4a:fb:1d: ac:43:cd:65:61:03:2f:27:4e:7f:1c:94:07:bd:b9:aa:85:51: 24:82:f1:72 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUO5yI8uOYTeTYhbp64d5gDE7nyHcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTkwM1oX DTI3MDUwMjAwMDQwM1owMzExMC8GA1UEAxMoNDY2NjkzNTVFQkIwRkUzQUU2QzA2 QzhERjdBOTE3QkVCNDg4NDlBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPKN+BrQx9whmQ+OYg3i7OLeCAX2Zn+X+mfjGUoQgilkGRxZtGNF++A5/Nx xby75sDR8Z8M0szXj8JDD/KRdsjvm4ftKbU7sP2XjuIbm+SSLrOG7RC/x5YjOfuO DCv21uh6m6VGDRNRqTEI6PipJVC/d7GMeWXVlW8VhbYwcexI0tYeyAlhRzL11+AT ldF1v1p+9BBIX5CbS3wbVMGFae639qiFJKA+vFk3GN6hJ7PDPIH10CIHtuMV7Rr4 sI/75oCOEkKQLif82Fj0Jnuff8BZFHbEBkuCJw3Yk/O7IrdkpzV+kNhW9bmVQiXw awqsTddu0QtmIpAqnAHVYcY7TDMCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEZmk1XrsP465sBsjfepF760iEmgMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFkZGMxZGQ4LTZkMjUtNDdjNy1hYWE0LWJkZGYxYjlkNjc3ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xZGRjMWRk OC02ZDI1LTQ3YzctYWFhNC1iZGRmMWI5ZDY3N2UvMC80NjY2OTM1NUVCQjBGRTNB RTZDMDZDOERGN0E5MTdCRUI0ODg0OUEwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ47+MA8EAgACMAkDBwAgAQ3xY4AwDQYJKoZIhvcNAQELBQADggEBAHaGqbOk YR29142iImlROry7SDK3TQ2aNvvZEMRjy47+/xQsp+RgHCkSkw5fdVyh7D+yzFH9 8MNrvYWLjdt/s6bKWWTE7Whgg2egalh2S2YLXsBWdFff44lTrMXbHBLOXsCZfgCD a41OTNE4xpybhHEV0pjueQ0zasb6Rl/ERQVexkEYjwbY2ZiOWyMOo/4cPYCWuxwg jjm/BpDtmD3ZIYYTH8VMKKAJUU3MPVmf8n6afIqGGGxJ0PBXn7XwjloMbt3sT0tf EC9/qN396vBHJ4v6GhmttnXkTeicntfde2nS/YfQ8v8lpkr7HaxDzWVhAy8nTn8c lAe9uaqFUSSC8XI= -----END CERTIFICATE-----Generated at Tue May 12 22:03:09 2026 by rpki-client