$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer File: 461B039429CF609C76235D70C58DE1D0AB6EA915.cer (raw, json) Hash identifier: 8pdOW4xL4RxQKl9XMGG54Jn4ZKQr7gKjGjBKG0HhgpM= Subject key identifier: 46:1B:03:94:29:CF:60:9C:76:23:5D:70:C5:8D:E1:D0:AB:6E:A9:15 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 29C7E39D6AF6498CF76E08847633B6AFEC9624A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft caRepository: rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 13 Mar 2024 06:57:57 +0000 Certificate not after: Wed 12 Mar 2025 07:02:57 +0000 Subordinate resources: IP: 103.244.104.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c7:e3:9d:6a:f6:49:8c:f7:6e:08:84:76:33:b6:af:ec:96:24:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 13 06:57:57 2024 GMT Not After : Mar 12 07:02:57 2025 GMT Subject: CN=461B039429CF609C76235D70C58DE1D0AB6EA915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:76:17:12:e3:d3:fc:fc:0f:4c:61:32:de:fc: 1c:d7:1b:3d:b8:fd:2e:9b:08:40:19:3e:3c:30:17: b1:7c:f7:98:74:1a:0c:7a:84:c8:ea:3a:03:e9:a3: 0e:39:c4:46:ee:72:98:ff:ba:73:82:7c:17:ae:6a: ad:66:3d:0f:fa:62:55:14:bd:89:cb:4d:b3:4b:b0: 27:81:fa:bc:21:2f:c1:ef:6f:7f:f7:8d:4c:bc:e4: 64:12:30:9a:4b:0b:00:f9:79:a3:ee:d3:b6:be:d7: 5c:6d:69:cb:67:33:ed:60:25:aa:a2:c7:45:7a:00: 40:14:11:12:90:c6:c3:94:0c:25:2d:35:87:a7:9c: 05:84:d6:c5:ca:96:56:6b:f1:ea:5f:ab:d1:0d:cf: 54:dd:0d:01:9d:02:0b:8b:ac:4b:b1:4b:5b:39:01: a6:8f:61:bd:8f:d2:76:43:e8:4d:fa:df:02:fc:81: 3a:e7:37:44:61:47:8a:de:c0:1e:6c:93:76:48:ae: c8:c4:92:57:f2:57:1c:17:b7:56:4d:a4:31:6b:20: c5:33:02:de:9c:53:77:6e:eb:d1:c6:53:a4:74:e9: ee:41:a8:f0:15:29:c4:f9:62:7c:1b:fb:54:e1:71: 79:44:3d:6c:76:1f:e7:3a:c7:90:e1:36:7d:bf:31: 2d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:1B:03:94:29:CF:60:9C:76:23:5D:70:C5:8D:E1:D0:AB:6E:A9:15 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.244.104.0/23 Signature Algorithm: sha256WithRSAEncryption 03:d9:e7:60:6a:aa:10:dd:54:31:0a:c3:34:1d:4e:42:ec:16: aa:50:02:50:76:28:33:e5:7f:1f:76:f6:1f:69:38:96:67:cb: e5:2d:ab:b9:ec:70:50:66:5b:be:39:60:66:bc:1c:62:6a:81: d9:58:69:2d:6b:42:db:30:63:3e:8b:16:c2:93:34:26:ad:9a: e9:d4:b5:25:bb:0c:36:14:eb:5f:5e:7f:f7:98:f6:be:de:e6: c2:4d:36:e3:ae:02:7a:86:30:5d:3b:c8:63:60:eb:9e:19:17: e0:f0:e5:f8:dc:f0:57:93:ab:d5:c2:05:76:bc:37:13:c3:8f: 2e:6c:8d:1f:31:cd:c3:e0:2e:22:4f:1f:69:03:ec:40:ef:9f: 71:ac:fc:9c:27:7c:4c:0c:e7:9a:e1:39:88:b2:59:97:70:c8: 32:56:59:79:77:c9:bc:6a:32:d0:d0:fd:85:3e:61:a2:5b:58: bf:51:6f:75:39:3d:56:fa:4d:45:4c:dd:48:fd:a2:5f:75:12: 32:70:83:83:2f:d6:40:a4:53:40:dc:7d:c4:75:aa:f7:fd:8c: 76:ca:86:f6:3d:f8:66:f0:fe:d5:92:ae:38:23:e0:18:5f:86: 94:8f:88:11:b9:a2:ba:06:25:6a:13:1d:66:e1:47:c4:70:27: 4b:99:28:33 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKcfjnWr2SYz3bgiEdjO2r+yWJKAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMxMzA2NTc1N1oX DTI1MDMxMjA3MDI1N1owMzExMC8GA1UEAxMoNDYxQjAzOTQyOUNGNjA5Qzc2MjM1 RDcwQzU4REUxRDBBQjZFQTkxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMt2FxLj0/z8D0xhMt78HNcbPbj9LpsIQBk+PDAXsXz3mHQaDHqEyOo6A+mj DjnERu5ymP+6c4J8F65qrWY9D/piVRS9ictNs0uwJ4H6vCEvwe9vf/eNTLzkZBIw mksLAPl5o+7Ttr7XXG1py2cz7WAlqqLHRXoAQBQREpDGw5QMJS01h6ecBYTWxcqW Vmvx6l+r0Q3PVN0NAZ0CC4usS7FLWzkBpo9hvY/SdkPoTfrfAvyBOuc3RGFHit7A HmyTdkiuyMSSV/JXHBe3Vk2kMWsgxTMC3pxTd27r0cZTpHTp7kGo8BUpxPlifBv7 VOFxeUQ9bHYf5zrHkOE2fb8xLYsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEYbA5Qpz2CcdiNdcMWN4dCrbqkVMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80MDI3ZmEwMi1lNDlmLTQyMTUtODYyYi03ZmFhZWZkOGFiM2UvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwMjdmYTAy LWU0OWYtNDIxNS04NjJiLTdmYWFlZmQ4YWIzZS8wLzQ2MUIwMzk0MjlDRjYwOUM3 NjIzNUQ3MEM1OERFMUQwQUI2RUE5MTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn9GgwDQYJKoZIhvcNAQELBQADggEBAAPZ52BqqhDdVDEKwzQdTkLsFqpQAlB2 KDPlfx929h9pOJZny+Utq7nscFBmW745YGa8HGJqgdlYaS1rQtswYz6LFsKTNCat munUtSW7DDYU619ef/eY9r7e5sJNNuOuAnqGMF07yGNg654ZF+Dw5fjc8FeTq9XC BXa8NxPDjy5sjR8xzcPgLiJPH2kD7EDvn3Gs/JwnfEwM55rhOYiyWZdwyDJWWXl3 ybxqMtDQ/YU+YaJbWL9Rb3U5PVb6TUVM3Uj9ol91EjJwg4Mv1kCkU0DcfcR1qvf9 jHbKhvY9+Gbw/tWSrjgj4BhfhpSPiBG5oroGJWoTHWbhR8RwJ0uZKDM= -----END CERTIFICATE-----Generated at Wed May 8 10:06:47 2024 by rpki-client on console-ams.rpki-client.org