$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer File: 146B42876A5C2AB0705F67F1A3918D76984989AF.cer (raw, json) Hash identifier: W/BHMXpAdFEGiyauRa2xTaJIXd5H56R31HTtAV0h4ns= Subject key identifier: 14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 03D1F26B9C6B32BE7133AB5A233EF339D3448E46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft caRepository: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 14 Apr 2026 23:43:53 +0000 Certificate not after: Tue 13 Apr 2027 23:48:53 +0000 Subordinate resources: IP: 103.190.30.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d1:f2:6b:9c:6b:32:be:71:33:ab:5a:23:3e:f3:39:d3:44:8e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 14 23:43:53 2026 GMT Not After : Apr 13 23:48:53 2027 GMT Subject: CN=146B42876A5C2AB0705F67F1A3918D76984989AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d5:0d:e3:18:94:b4:1c:ee:22:bf:b9:84:62: c8:4a:5f:50:ac:a7:01:e7:1c:36:25:07:5b:a0:43: aa:0b:ee:90:ba:76:80:38:57:71:08:bd:f6:61:16: e2:c1:18:53:b0:cf:75:fb:16:b1:2d:29:c8:d8:87: 88:78:be:50:c3:fa:09:23:f4:e6:d9:4d:08:c2:7e: 58:84:d5:5d:c6:51:6f:0f:0c:92:f9:16:17:97:33: f4:89:ef:32:f1:2c:ed:07:39:b1:9c:8f:0b:13:b7: 47:3d:86:31:b6:01:5e:c1:68:b0:e0:4a:23:0d:f4: 87:cb:57:46:13:74:e4:0a:3c:8b:9a:51:c2:8c:3d: 3a:bf:4f:a4:bb:7d:12:28:8b:0a:f7:23:72:5f:91: b5:c4:95:e9:a1:3f:ae:81:5d:4f:d2:9f:f8:74:ab: 78:b8:e5:ba:8f:6c:ac:26:56:f5:4f:2a:4d:d8:31: 04:38:28:11:8d:ed:95:e1:82:d2:d2:47:d6:d9:96: 16:45:9a:d6:d5:9e:c5:e1:de:31:aa:01:33:bb:72: 48:ca:77:66:86:b1:14:10:ea:3e:7e:b9:5c:f9:d9: 3c:70:a9:c5:6c:70:e6:b3:f4:4e:8e:5a:e3:53:fe: 54:21:c5:f7:22:93:9e:42:f4:f9:b0:ee:67:08:eb: e8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.30.0/23 Signature Algorithm: sha256WithRSAEncryption 64:b0:e4:37:1f:20:77:88:a2:ae:ac:d0:41:9a:fe:59:b4:3a: b1:fd:54:bd:8d:7f:9b:00:38:cc:f1:a4:b4:e2:98:95:10:3c: da:de:15:11:57:78:0e:32:ed:d0:92:dd:dc:2a:e2:93:42:38: 7d:35:03:a3:80:16:3c:6e:e2:ca:b3:5f:93:97:f6:1f:3d:57: b6:41:9d:4e:e8:bd:35:cf:da:7b:be:8a:64:f5:27:ff:44:52: 31:e2:ba:2b:e5:bd:4b:b1:85:8d:95:ee:8d:b6:8a:86:36:22: 44:5e:33:e2:38:6f:fb:fa:de:a5:87:1c:ee:bc:c8:9e:0f:7a: dd:6c:49:ca:d5:d1:65:47:79:03:91:88:a0:07:1b:16:79:54: 96:ac:02:66:a6:96:4a:1e:98:61:49:9d:95:13:7c:4e:29:ef: 5a:bb:88:3a:9f:cd:76:09:fa:42:e6:e5:a5:f8:de:ad:5c:c3: d8:41:72:0e:0e:17:dc:f4:9b:a8:0a:00:6d:ba:9e:83:50:b8: 3b:32:d9:29:09:e3:08:46:4a:2e:a8:38:66:2d:ee:f2:18:79: 90:1a:61:29:f3:21:ae:ac:9a:a3:10:19:73:51:56:5b:85:2b: d4:b0:71:94:56:09:ae:37:c8:60:aa:08:53:8f:81:60:fe:b3: 18:10:04:2e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUA9Hya5xrMr5xM6taIz7zOdNEjkYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQxNDIzNDM1M1oX DTI3MDQxMzIzNDg1M1owMzExMC8GA1UEAxMoMTQ2QjQyODc2QTVDMkFCMDcwNUY2 N0YxQTM5MThENzY5ODQ5ODlBRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJbVDeMYlLQc7iK/uYRiyEpfUKynAeccNiUHW6BDqgvukLp2gDhXcQi99mEW 4sEYU7DPdfsWsS0pyNiHiHi+UMP6CSP05tlNCMJ+WITVXcZRbw8MkvkWF5cz9Inv MvEs7Qc5sZyPCxO3Rz2GMbYBXsFosOBKIw30h8tXRhN05Ao8i5pRwow9Or9PpLt9 EiiLCvcjcl+RtcSV6aE/roFdT9Kf+HSreLjluo9srCZW9U8qTdgxBDgoEY3tleGC 0tJH1tmWFkWa1tWexeHeMaoBM7tySMp3ZoaxFBDqPn65XPnZPHCpxWxw5rP0To5a 41P+VCHF9yKTnkL0+bDuZwjr6DECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBRrQodqXCqwcF9n8aORjXaYSYmvMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xZGVlMTI2Zi04MTkyLTRkMjgtYjI1ZS1kZWFiZGI3OWViMjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWUxMjZm LTgxOTItNGQyOC1iMjVlLWRlYWJkYjc5ZWIyMS8wLzE0NkI0Mjg3NkE1QzJBQjA3 MDVGNjdGMUEzOTE4RDc2OTg0OTg5QUYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvh4wDQYJKoZIhvcNAQELBQADggEBAGSw5DcfIHeIoq6s0EGa/lm0OrH9VL2N f5sAOMzxpLTimJUQPNreFRFXeA4y7dCS3dwq4pNCOH01A6OAFjxu4sqzX5OX9h89 V7ZBnU7ovTXP2nu+imT1J/9EUjHiuivlvUuxhY2V7o22ioY2IkReM+I4b/v63qWH HO68yJ4Pet1sScrV0WVHeQORiKAHGxZ5VJasAmamlkoemGFJnZUTfE4p71q7iDqf zXYJ+kLm5aX43q1cw9hBcg4OF9z0m6gKAG26noNQuDsy2SkJ4whGSi6oOGYt7vIY eZAaYSnzIa6smqMQGXNRVluFK9SwcZRWCa43yGCqCFOPgWD+sxgQBC4= -----END CERTIFICATE-----Generated at Sun Apr 19 09:43:14 2026 by rpki-client