$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer File: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer (raw, json) Hash identifier: Wh8KlAykl0nkPkf5KIJ3PzSZI4YGpoC+K933K2oCLsM= Subject key identifier: 64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1F42A2D7445C4A5091817F1EE4FBCD49D46554C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft caRepository: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 28 Mar 2026 16:03:16 +0000 Certificate not after: Sat 27 Mar 2027 16:08:16 +0000 Subordinate resources: IP: 103.158.208.0/23 IP: 2406:c240::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:42:a2:d7:44:5c:4a:50:91:81:7f:1e:e4:fb:cd:49:d4:65:54:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 28 16:03:16 2026 GMT Not After : Mar 27 16:08:16 2027 GMT Subject: CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:32:51:73:3f:14:27:ac:fa:7b:d7:97:23:9e: 1f:80:9e:a2:fe:4c:48:1d:d8:62:29:95:99:a4:a4: 70:07:57:9b:63:2a:cf:65:be:33:42:57:13:1b:ef: df:40:c5:81:ec:e0:32:32:43:99:90:47:60:e4:0e: d9:7f:ec:84:7c:5f:fe:83:b4:d0:a2:2e:3f:fb:a4: 53:10:e1:97:06:83:d8:18:92:b6:70:0d:80:56:97: 75:de:4c:88:c4:41:11:bd:81:79:07:ea:97:89:73: 03:d4:ad:12:18:3a:46:e9:e1:67:81:e0:e2:ba:50: 13:f4:6c:d4:ea:52:f9:34:74:e0:c6:8a:b0:9b:22: 2c:81:88:fd:f1:a1:b2:88:b7:a0:72:3f:d9:1b:40: 04:84:f3:1a:cf:63:86:e6:92:2f:1f:19:4d:5e:c1: 29:ba:bf:67:9c:fd:fe:dc:d4:ac:0d:c6:b7:ca:45: 52:1d:78:b4:a6:1c:31:a8:d2:7d:5f:da:b0:a5:79: 4f:6f:8f:c2:c9:3b:b4:62:88:05:b2:54:5d:60:ad: 71:5e:1c:85:5f:8d:4e:11:48:6f:39:23:b5:6c:6d: ed:20:cd:28:c0:09:22:51:39:3b:0e:6d:09:af:ac: ec:86:c7:40:5c:97:20:84:99:25:bb:4c:35:e9:97: 62:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.208.0/23 IPv6: 2406:c240::/32 Signature Algorithm: sha256WithRSAEncryption 3a:3d:ba:fa:97:ce:20:f2:43:c7:7d:04:37:21:1d:93:69:23: 0a:34:19:97:4a:65:db:96:2f:98:6a:93:c1:be:bd:8b:5a:99: 9f:40:a6:5c:47:0e:4d:96:81:4d:00:e8:99:ba:82:7e:cb:83: 27:c0:0b:44:dd:00:14:cc:1b:f9:6a:d0:c0:df:af:1f:0e:54: d4:b2:a0:1b:b3:23:96:86:72:b4:5f:e7:49:d6:c3:fb:f3:f6: e4:58:6d:e8:1a:4c:35:bb:02:7a:10:65:c9:47:9b:43:bc:84: 94:9e:7e:37:9b:c0:41:97:c6:ad:02:90:cc:c5:88:7f:e8:b0: 92:3e:fa:10:82:0f:e6:da:0a:32:a1:7d:e0:32:2a:61:94:3e: bc:03:1d:04:bc:9c:d1:49:e3:1a:79:d2:a1:4b:46:51:42:7f: 2f:22:98:65:1e:5e:aa:f9:fd:71:3b:77:42:d9:5a:dc:c0:8f: 7e:29:86:3e:a6:ba:3f:2a:a3:47:74:2e:ed:b7:37:25:28:89: 55:03:59:d5:31:6e:04:42:2a:b8:3f:91:7d:9d:98:fa:cf:19: a7:93:89:b0:15:10:c8:2b:a6:75:2c:92:1f:d6:6d:76:a0:25: e8:b6:34:44:80:81:61:7d:b7:0a:ca:a4:38:ec:a8:e1:06:06: 9a:e6:1b:b4 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUH0Ki10RcSlCRgX8e5PvNSdRlVMEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMyODE2MDMxNloX DTI3MDMyNzE2MDgxNlowMzExMC8GA1UEAxMoNjRCNDY2NTFEN0IwQzc1N0U0QUVE RTAxNjkxRjA2MkZFRUYxNURCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANQyUXM/FCes+nvXlyOeH4Ceov5MSB3YYimVmaSkcAdXm2Mqz2W+M0JXExvv 30DFgezgMjJDmZBHYOQO2X/shHxf/oO00KIuP/ukUxDhlwaD2BiStnANgFaXdd5M iMRBEb2BeQfql4lzA9StEhg6RunhZ4Hg4rpQE/Rs1OpS+TR04MaKsJsiLIGI/fGh soi3oHI/2RtABITzGs9jhuaSLx8ZTV7BKbq/Z5z9/tzUrA3Gt8pFUh14tKYcMajS fV/asKV5T2+Pwsk7tGKIBbJUXWCtcV4chV+NThFIbzkjtWxt7SDNKMAJIlE5Ow5t Ca+s7IbHQFyXIISZJbtMNemXYpcCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGS0ZlHXsMdX5K7eAWkfBi/u8V22MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wZTcwNTkyNy1lYzY0LTQ0ZjUtOWM5ZS1jOWE1NWE1MjNiNjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlNzA1OTI3 LWVjNjQtNDRmNS05YzllLWM5YTU1YTUyM2I2NC8wLzY0QjQ2NjUxRDdCMEM3NTdF NEFFREUwMTY5MUYwNjJGRUVGMTVEQjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnntAwDQQCAAIwBwMFACQGwkAwDQYJKoZIhvcNAQELBQADggEBADo9uvqXziDy Q8d9BDchHZNpIwo0GZdKZduWL5hqk8G+vYtamZ9AplxHDk2WgU0A6Jm6gn7LgyfA C0TdABTMG/lq0MDfrx8OVNSyoBuzI5aGcrRf50nWw/vz9uRYbegaTDW7AnoQZclH m0O8hJSefjebwEGXxq0CkMzFiH/osJI++hCCD+baCjKhfeAyKmGUPrwDHQS8nNFJ 4xp50qFLRlFCfy8imGUeXqr5/XE7d0LZWtzAj34phj6muj8qo0d0Lu23NyUoiVUD WdUxbgRCKrg/kX2dmPrPGaeTibAVEMgrpnUskh/WbXagJei2NESAgWF9twrKpDjs qOEGBprmG7Q= -----END CERTIFICATE-----Generated at Sun Apr 19 08:21:57 2026 by rpki-client