$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer File: 46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer (raw, json) Hash identifier: PL41Y05m68XGSHmGu8I+p/M2oqx8UCXAQ/yWG2s4h70= Subject key identifier: 46:E3:14:81:2F:B3:0D:E0:13:6C:C8:7F:00:EF:98:BA:4A:8F:7F:4F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2E95FC58B0D481706810A46897B1401A878B3A1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:09:49 +0000 Certificate not after: Sun 02 May 2027 01:14:49 +0000 Subordinate resources: IP: 103.11.106.0/23 IP: 103.29.184.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:95:fc:58:b0:d4:81:70:68:10:a4:68:97:b1:40:1a:87:8b:3a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:09:49 2026 GMT Not After : May 2 01:14:49 2027 GMT Subject: CN=46E314812FB30DE0136CC87F00EF98BA4A8F7F4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7f:da:d4:61:49:27:ea:a4:1d:36:fc:13:2a: 70:63:9a:3a:b9:63:b1:bb:7e:10:7a:50:6c:f0:17: 82:85:ed:4a:cf:22:3d:22:1a:01:15:a2:82:fb:29: a4:02:e4:d1:0b:82:e1:a1:fe:d9:b2:19:11:bd:e8: 68:67:f2:10:79:a5:0f:21:39:51:fb:f1:13:dd:75: 87:ee:ab:37:20:13:33:10:48:5f:84:b3:14:81:3f: 0b:4a:97:e3:aa:b2:f2:dc:94:c3:fa:0d:d5:43:93: f7:e1:f0:d2:2f:a8:1b:92:45:d2:cc:8d:d7:82:44: ea:56:a8:d3:d5:53:37:c1:aa:79:00:53:df:ba:93: 99:03:13:66:d1:3d:97:62:29:6d:24:a1:ed:9f:6f: 87:b0:43:9c:e1:98:b8:e3:93:b0:5b:66:16:10:19: bd:c3:18:b0:7f:73:02:77:ce:93:9b:f8:a3:39:5a: a4:2f:2a:9a:ac:40:3a:f3:51:dc:c0:40:f4:82:f9: d0:1b:ce:19:27:c5:39:be:9d:9c:38:f7:a7:62:40: d7:e3:b2:2d:ab:b0:3b:62:49:6f:11:fe:66:08:3e: 5d:3c:5b:aa:8b:38:8b:ea:c4:8d:5f:49:47:33:fe: 67:c7:12:da:70:f9:8d:93:e8:6c:22:6d:0f:ad:63: 52:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:E3:14:81:2F:B3:0D:E0:13:6C:C8:7F:00:EF:98:BA:4A:8F:7F:4F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.11.106.0/23 103.29.184.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:d2:24:e2:65:ad:1a:cc:84:6a:ed:7c:29:1b:b4:5f:fd:ac: a6:b3:e4:02:32:37:81:52:e8:9b:cc:ef:aa:16:0d:1f:ca:3c: 19:b0:c8:f4:3b:5d:cd:cb:be:92:da:51:84:15:a5:4b:98:3b: 88:83:82:d1:08:05:fd:ed:7c:86:8d:a8:f4:2f:b1:08:81:1f: 85:84:3a:47:c6:b5:c4:af:25:78:9d:20:cc:a9:4d:7b:13:3a: 65:e1:cd:e1:b1:00:a0:c1:09:e2:4c:be:d6:4d:a4:38:4d:87: e9:80:26:40:f0:49:b0:42:62:63:46:66:7d:a6:16:86:ff:33: af:73:03:a1:12:4c:86:dd:28:18:07:3f:4b:75:83:5c:d4:13: 7e:96:5a:a5:dd:2e:5b:f1:62:d1:c3:4b:e1:2c:20:fa:65:18: a5:53:b6:df:f7:0b:ba:f0:4d:ab:5b:c1:05:a6:39:b2:f3:0a: 62:61:70:88:f0:1d:16:6c:41:3d:6b:13:e4:42:fa:1f:9f:b2: fc:48:79:1c:97:bc:b3:77:4f:84:a8:12:7b:bb:b2:1e:aa:76: 1c:93:7c:3c:74:27:e4:1a:e9:5b:f7:e3:bc:93:1e:0f:7a:6c: 4b:0e:06:17:c9:cf:d1:89:80:56:3b:ac:9f:d9:19:d3:1f:6c: 33:9f:e6:f8 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIULpX8WLDUgXBoEKRol7FAGoeLOh8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDk0OVoX DTI3MDUwMjAxMTQ0OVowMzExMC8GA1UEAxMoNDZFMzE0ODEyRkIzMERFMDEzNkND ODdGMDBFRjk4QkE0QThGN0Y0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANR/2tRhSSfqpB02/BMqcGOaOrljsbt+EHpQbPAXgoXtSs8iPSIaARWigvsp pALk0QuC4aH+2bIZEb3oaGfyEHmlDyE5UfvxE911h+6rNyATMxBIX4SzFIE/C0qX 46qy8tyUw/oN1UOT9+Hw0i+oG5JF0syN14JE6lao09VTN8GqeQBT37qTmQMTZtE9 l2IpbSSh7Z9vh7BDnOGYuOOTsFtmFhAZvcMYsH9zAnfOk5v4ozlapC8qmqxAOvNR 3MBA9IL50BvOGSfFOb6dnDj3p2JA1+OyLauwO2JJbxH+Zgg+XTxbqos4i+rEjV9J RzP+Z8cS2nD5jZPobCJtD61jUskCAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEbjFIEvsw3gE2zIfwDvmLpKj39PMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg1ZjJjNjZjLTFmODctNGQ5OC1hNDY3LTMyMThiNjQ1YjNhYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84NWYyYzY2 Yy0xZjg3LTRkOTgtYTQ2Ny0zMjE4YjY0NWIzYWMvMC80NkUzMTQ4MTJGQjMwREUw MTM2Q0M4N0YwMEVGOThCQTRBOEY3RjRGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQBZwtqAwQBZx24MA0GCSqGSIb3DQEBCwUAA4IBAQBa0iTiZa0azIRq7XwpG7Rf /ayms+QCMjeBUuibzO+qFg0fyjwZsMj0O13Ny76S2lGEFaVLmDuIg4LRCAX97XyG jaj0L7EIgR+FhDpHxrXEryV4nSDMqU17Ezpl4c3hsQCgwQniTL7WTaQ4TYfpgCZA 8EmwQmJjRmZ9phaG/zOvcwOhEkyG3SgYBz9LdYNc1BN+llql3S5b8WLRw0vhLCD6 ZRilU7bf9wu68E2rW8EFpjmy8wpiYXCI8B0WbEE9axPkQvofn7L8SHkcl7yzd0+E qBJ7u7IeqnYck3w8dCfkGulb9+O8kx4PemxLDgYXyc/RiYBWO6yf2RnTH2wzn+b4 -----END CERTIFICATE-----Generated at Wed May 13 01:07:11 2026 by rpki-client