$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer File: 461B039429CF609C76235D70C58DE1D0AB6EA915.cer (raw, json) Hash identifier: P7iXG4stBSrWdAkMlH8wIzUtCnHO89eM2/dNECcZFk4= Subject key identifier: 46:1B:03:94:29:CF:60:9C:76:23:5D:70:C5:8D:E1:D0:AB:6E:A9:15 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2C4F407F3B05DD0B2800146BBAD368832F2C3D1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft caRepository: rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 12 Feb 2025 16:19:14 +0000 Certificate not after: Wed 11 Feb 2026 16:24:14 +0000 Subordinate resources: IP: 103.244.104.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:4f:40:7f:3b:05:dd:0b:28:00:14:6b:ba:d3:68:83:2f:2c:3d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 12 16:19:14 2025 GMT Not After : Feb 11 16:24:14 2026 GMT Subject: CN=461B039429CF609C76235D70C58DE1D0AB6EA915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:76:17:12:e3:d3:fc:fc:0f:4c:61:32:de:fc: 1c:d7:1b:3d:b8:fd:2e:9b:08:40:19:3e:3c:30:17: b1:7c:f7:98:74:1a:0c:7a:84:c8:ea:3a:03:e9:a3: 0e:39:c4:46:ee:72:98:ff:ba:73:82:7c:17:ae:6a: ad:66:3d:0f:fa:62:55:14:bd:89:cb:4d:b3:4b:b0: 27:81:fa:bc:21:2f:c1:ef:6f:7f:f7:8d:4c:bc:e4: 64:12:30:9a:4b:0b:00:f9:79:a3:ee:d3:b6:be:d7: 5c:6d:69:cb:67:33:ed:60:25:aa:a2:c7:45:7a:00: 40:14:11:12:90:c6:c3:94:0c:25:2d:35:87:a7:9c: 05:84:d6:c5:ca:96:56:6b:f1:ea:5f:ab:d1:0d:cf: 54:dd:0d:01:9d:02:0b:8b:ac:4b:b1:4b:5b:39:01: a6:8f:61:bd:8f:d2:76:43:e8:4d:fa:df:02:fc:81: 3a:e7:37:44:61:47:8a:de:c0:1e:6c:93:76:48:ae: c8:c4:92:57:f2:57:1c:17:b7:56:4d:a4:31:6b:20: c5:33:02:de:9c:53:77:6e:eb:d1:c6:53:a4:74:e9: ee:41:a8:f0:15:29:c4:f9:62:7c:1b:fb:54:e1:71: 79:44:3d:6c:76:1f:e7:3a:c7:90:e1:36:7d:bf:31: 2d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:1B:03:94:29:CF:60:9C:76:23:5D:70:C5:8D:E1:D0:AB:6E:A9:15 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.244.104.0/23 Signature Algorithm: sha256WithRSAEncryption 13:eb:0b:ee:66:51:d9:d0:cf:dc:88:64:de:fd:82:ae:6b:a4: 79:d4:c7:c4:75:95:21:be:b4:cc:92:6a:65:de:8f:82:04:fe: 48:9d:06:22:49:c2:7f:0a:a9:55:1f:55:4f:ca:ac:87:a4:ac: eb:4a:b8:1b:75:1f:01:86:f7:6b:07:0c:d4:c2:1c:be:7f:a4: 22:91:eb:f4:3e:e5:c9:4e:a6:5b:e8:d5:56:d0:c0:d0:bd:78: 33:90:76:5f:86:f8:75:e1:cb:f9:44:f6:3f:65:7c:35:4c:e5: 3a:b5:27:83:49:56:1d:44:e9:90:10:81:a5:58:9c:3f:a5:69: ba:85:7c:f6:5c:e4:8f:2b:0b:10:11:3c:08:53:c3:96:e1:93: 86:a7:47:63:49:63:43:db:3d:b1:64:b4:53:e7:c2:bf:2b:b3: ef:b5:b3:0c:b6:bb:17:c3:22:f1:d8:7a:46:7f:31:92:45:52: 98:f7:88:f0:9e:a7:df:59:44:24:a2:05:1c:a6:01:1a:e2:3f: 5e:28:50:73:27:50:a5:ee:f3:13:ad:e0:f2:b3:1a:9c:5d:c6: e8:16:3e:75:2b:bb:78:7a:58:5d:a7:d8:4f:eb:9c:b9:60:32: 33:8b:ae:1e:e7:81:d7:9f:df:bc:56:be:94:c8:94:cd:5c:93: a7:c0:46:64 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIULE9AfzsF3QsoABRrutNogy8sPRswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIxMjE2MTkxNFoX DTI2MDIxMTE2MjQxNFowMzExMC8GA1UEAxMoNDYxQjAzOTQyOUNGNjA5Qzc2MjM1 RDcwQzU4REUxRDBBQjZFQTkxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMt2FxLj0/z8D0xhMt78HNcbPbj9LpsIQBk+PDAXsXz3mHQaDHqEyOo6A+mj DjnERu5ymP+6c4J8F65qrWY9D/piVRS9ictNs0uwJ4H6vCEvwe9vf/eNTLzkZBIw mksLAPl5o+7Ttr7XXG1py2cz7WAlqqLHRXoAQBQREpDGw5QMJS01h6ecBYTWxcqW Vmvx6l+r0Q3PVN0NAZ0CC4usS7FLWzkBpo9hvY/SdkPoTfrfAvyBOuc3RGFHit7A HmyTdkiuyMSSV/JXHBe3Vk2kMWsgxTMC3pxTd27r0cZTpHTp7kGo8BUpxPlifBv7 VOFxeUQ9bHYf5zrHkOE2fb8xLYsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEYbA5Qpz2CcdiNdcMWN4dCrbqkVMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80MDI3ZmEwMi1lNDlmLTQyMTUtODYyYi03ZmFhZWZkOGFiM2UvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwMjdmYTAy LWU0OWYtNDIxNS04NjJiLTdmYWFlZmQ4YWIzZS8wLzQ2MUIwMzk0MjlDRjYwOUM3 NjIzNUQ3MEM1OERFMUQwQUI2RUE5MTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn9GgwDQYJKoZIhvcNAQELBQADggEBABPrC+5mUdnQz9yIZN79gq5rpHnUx8R1 lSG+tMySamXej4IE/kidBiJJwn8KqVUfVU/KrIekrOtKuBt1HwGG92sHDNTCHL5/ pCKR6/Q+5clOplvo1VbQwNC9eDOQdl+G+HXhy/lE9j9lfDVM5Tq1J4NJVh1E6ZAQ gaVYnD+labqFfPZc5I8rCxARPAhTw5bhk4anR2NJY0PbPbFktFPnwr8rs++1swy2 uxfDIvHYekZ/MZJFUpj3iPCep99ZRCSiBRymARriP14oUHMnUKXu8xOt4PKzGpxd xugWPnUru3h6WF2n2E/rnLlgMjOLrh7ngdef37xWvpTIlM1ck6fARmQ= -----END CERTIFICATE-----Generated at Sat Apr 5 10:28:06 2025 by rpki-client