$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/46F8E3AC44B2F2208037674979268378CA60B901.cer File: 46F8E3AC44B2F2208037674979268378CA60B901.cer (raw, json) Hash identifier: VclciARpyWpH0/vnl8HX5c80Rx78U66x/s33w/mNCHw= Subject key identifier: 46:F8:E3:AC:44:B2:F2:20:80:37:67:49:79:26:83:78:CA:60:B9:01 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6424B669434805B54FD3D69787FC5D5A3F1863E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.mft caRepository: rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 00:53:14 +0000 Certificate not after: Thu 28 Jan 2027 00:58:14 +0000 Subordinate resources: IP: 157.20.218.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:24:b6:69:43:48:05:b5:4f:d3:d6:97:87:fc:5d:5a:3f:18:63:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 29 00:53:14 2026 GMT Not After : Jan 28 00:58:14 2027 GMT Subject: CN=46F8E3AC44B2F2208037674979268378CA60B901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:16:59:fa:61:f7:1e:8b:b3:ec:ad:dd:b6:8e: d0:36:9e:d5:e0:38:50:d3:ab:ec:55:37:b2:3d:c1: 9c:12:a2:f3:d0:7b:33:a9:79:23:a6:84:c6:a1:e6: 1f:5d:b5:43:df:39:14:1d:45:07:a6:ec:32:8f:fb: 9c:79:a8:b8:7f:99:83:97:52:84:b9:80:11:8e:de: cb:52:b1:62:02:50:96:c4:35:26:1b:13:ed:45:32: f1:b3:f3:26:d3:b7:1d:c3:a9:79:38:69:dd:5c:eb: 18:a5:3e:3b:51:99:3a:6f:1f:19:41:7d:0c:15:24: 35:8d:16:02:5c:43:a6:21:30:ad:93:d6:0a:e2:20: 0c:2a:cc:a1:c1:26:46:3a:33:5f:38:65:8b:35:0b: f1:45:8e:4a:7e:c2:bd:56:1a:a2:b4:e0:0a:f6:19: 9b:c3:d9:f0:1b:e8:23:81:b8:04:95:dc:71:e6:c8: 61:54:f5:6e:8a:a5:ad:c8:30:e9:f7:1e:45:2d:73: 30:85:fb:40:4f:f4:48:ef:d7:b2:ad:27:23:ed:49: de:f9:6b:a1:a8:5e:e0:a3:f2:ce:06:7f:08:37:58: 20:da:63:c4:86:fd:13:35:fe:e1:86:c7:43:77:5c: 96:d6:b5:fc:ed:9d:39:37:b1:0f:cf:ef:14:d5:ea: 49:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:F8:E3:AC:44:B2:F2:20:80:37:67:49:79:26:83:78:CA:60:B9:01 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.218.0/23 Signature Algorithm: sha256WithRSAEncryption 65:83:2e:a6:c9:82:e6:67:99:54:e0:0c:1a:81:55:16:c4:96: 3f:66:7e:41:fa:34:9e:0c:67:69:0f:96:b4:0f:22:b0:40:69: 8a:fe:4b:47:fe:e6:04:3b:15:87:28:db:5d:43:2e:ee:3b:d5: ed:9e:85:24:f9:3a:df:40:59:90:c3:be:cf:1b:e5:6d:fb:7a: 9d:90:e0:ed:32:1b:18:cb:36:f0:30:7d:e0:5c:86:48:42:67: 96:51:11:b0:e3:28:63:26:6f:88:73:7c:64:16:34:87:ba:70: 37:2d:19:73:28:88:cc:80:10:c0:e1:99:fc:7c:00:ff:c5:5e: 86:a2:67:34:c0:2f:9a:d6:7b:9a:97:1e:33:bb:49:6d:d2:30: 20:ee:56:d6:aa:e4:b8:30:b3:d7:9e:6e:c0:6f:d3:84:36:d2: 02:e2:b1:fe:ab:ee:9a:f9:82:1e:13:81:13:ee:d0:fe:1c:04: a1:e6:14:1c:f4:e4:8d:f6:77:03:46:83:b6:8c:f9:bc:0b:10: 9a:30:67:dc:35:e6:20:b3:14:b5:ff:d1:b8:cb:2d:39:a9:6a: 32:40:e9:c5:3f:a0:20:13:47:68:49:f9:a0:65:fb:58:4a:31: 06:2b:38:8e:6b:85:8d:b3:39:da:39:bb:32:64:ea:c9:7d:8d: b1:3e:62:3b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZCS2aUNIBbVP09aXh/xdWj8YY+UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEyOTAwNTMxNFoX DTI3MDEyODAwNTgxNFowMzExMC8GA1UEAxMoNDZGOEUzQUM0NEIyRjIyMDgwMzc2 NzQ5NzkyNjgzNzhDQTYwQjkwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANYWWfph9x6Ls+yt3baO0Dae1eA4UNOr7FU3sj3BnBKi89B7M6l5I6aExqHm H121Q985FB1FB6bsMo/7nHmouH+Zg5dShLmAEY7ey1KxYgJQlsQ1JhsT7UUy8bPz JtO3HcOpeThp3VzrGKU+O1GZOm8fGUF9DBUkNY0WAlxDpiEwrZPWCuIgDCrMocEm RjozXzhlizUL8UWOSn7CvVYaorTgCvYZm8PZ8BvoI4G4BJXccebIYVT1boqlrcgw 6fceRS1zMIX7QE/0SO/Xsq0nI+1J3vlroahe4KPyzgZ/CDdYINpjxIb9EzX+4YbH Q3dclta1/O2dOTexD8/vFNXqSUkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEb446xEsvIggDdnSXkmg3jKYLkBMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lMmU4M2FmZS0zYmRjLTQ0YjItYTcwMi1iNDU1NWRhYTY1ZWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UyZTgzYWZl LTNiZGMtNDRiMi1hNzAyLWI0NTU1ZGFhNjVlYS8wLzQ2RjhFM0FDNDRCMkYyMjA4 MDM3Njc0OTc5MjY4Mzc4Q0E2MEI5MDEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFNowDQYJKoZIhvcNAQELBQADggEBAGWDLqbJguZnmVTgDBqBVRbElj9mfkH6 NJ4MZ2kPlrQPIrBAaYr+S0f+5gQ7FYco211DLu471e2ehST5Ot9AWZDDvs8b5W37 ep2Q4O0yGxjLNvAwfeBchkhCZ5ZREbDjKGMmb4hzfGQWNIe6cDctGXMoiMyAEMDh mfx8AP/FXoaiZzTAL5rWe5qXHjO7SW3SMCDuVtaq5Lgws9eebsBv04Q20gLisf6r 7pr5gh4TgRPu0P4cBKHmFBz05I32dwNGg7aM+bwLEJowZ9w15iCzFLX/0bjLLTmp ajJA6cU/oCATR2hJ+aBl+1hKMQYrOI5rhY2zOdo5uzJk6sl9jbE+Yjs= -----END CERTIFICATE-----Generated at Mon Mar 2 13:20:41 2026 by rpki-client