$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer File: 466F8934F3FED9355C9ED09E3826CBE32B25D402.cer (raw, json) Hash identifier: O+KMEr7/JYU23VxgTunkSy5VA8lR28tsVXUUgY2oYrQ= Subject key identifier: 46:6F:89:34:F3:FE:D9:35:5C:9E:D0:9E:38:26:CB:E3:2B:25:D4:02 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 321F23E04911D54326B1A13EEB1C7D79D49996EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft caRepository: rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 Dec 2023 12:41:23 +0000 Certificate not after: Sun 01 Dec 2024 12:46:23 +0000 Subordinate resources: IP: 103.162.60.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:1f:23:e0:49:11:d5:43:26:b1:a1:3e:eb:1c:7d:79:d4:99:96:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 3 12:41:23 2023 GMT Not After : Dec 1 12:46:23 2024 GMT Subject: CN=466F8934F3FED9355C9ED09E3826CBE32B25D402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:05:05:2f:eb:36:0d:45:7c:31:02:b6:81:69: a4:50:d6:96:ef:28:58:4d:b8:87:b1:5e:39:4d:92: b9:6d:2a:c0:31:db:3e:c0:9c:d6:30:f9:57:f1:02: d5:1a:43:37:5c:44:92:2a:0a:31:3b:4f:51:08:f4: 15:db:00:57:25:49:7f:1d:3a:1b:54:72:45:89:fa: 61:3a:99:7a:c0:56:66:24:cf:b1:2c:bc:3f:7a:fc: 37:5b:63:93:05:19:06:e3:d0:b2:e4:54:7e:f1:51: 14:5f:ff:ca:30:b1:b5:f4:8e:92:43:e3:e5:86:5e: 0d:a5:a2:2b:60:c7:be:13:19:1e:33:f5:1a:a7:fb: b1:d4:1f:d4:ba:67:c2:92:19:f0:81:29:99:31:41: 34:8b:22:77:fe:20:eb:79:07:9e:d9:1e:18:8e:4b: f6:91:2f:bd:1d:4a:25:9f:85:b6:a4:5a:22:f4:fe: 01:40:6e:23:10:f6:55:92:d1:77:be:3e:4e:2a:0e: 57:eb:89:42:78:12:f4:31:74:e9:d3:64:af:bc:52: fb:39:ee:b0:be:23:50:a9:86:b7:04:af:9f:57:12: 49:76:61:a1:58:fb:95:2e:16:ff:45:ef:ed:be:ea: 1c:72:d5:98:f5:2e:ba:99:68:be:f8:5f:97:f5:92: 32:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:6F:89:34:F3:FE:D9:35:5C:9E:D0:9E:38:26:CB:E3:2B:25:D4:02 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.60.0/23 Signature Algorithm: sha256WithRSAEncryption 91:bb:84:22:08:19:34:07:50:56:45:f3:32:df:30:81:d0:0a: f2:28:e6:e1:7f:33:13:1d:e0:9e:3e:fc:87:0d:ef:21:05:15: f2:2a:57:3a:70:4e:c7:60:fa:9d:24:5d:9d:e1:8b:aa:8e:8a: f5:d1:fd:a0:d1:91:76:ae:30:5a:98:10:94:98:f2:b5:bb:47: 7e:c6:17:29:e6:63:1f:f5:1e:c4:82:36:75:c2:79:a1:c1:54: 1e:c9:81:46:92:91:a3:2a:b4:94:c4:a5:16:2d:7e:8c:81:ae: 06:fe:4f:87:c3:31:f9:60:92:16:90:b2:01:fe:61:1e:15:6b: 6a:dc:97:1f:d9:d6:cb:dc:21:03:e6:3b:92:e9:fe:79:13:6d: ff:80:f8:50:1a:db:64:2d:43:46:a4:8a:6e:fb:cd:17:56:36: 7e:93:56:cb:c9:95:6e:ed:c4:02:fe:d3:1d:58:b1:40:13:bb: ea:f7:09:b1:55:6a:be:0f:02:85:f0:11:27:4e:ac:29:33:3f: 46:4a:b8:3f:92:d5:a8:b0:99:73:bc:88:20:f1:8a:bd:9f:c4: 9a:3e:27:7e:82:4a:21:10:de:71:4e:8f:69:69:04:31:46:e3: 69:86:55:42:f7:1c:2b:98:0c:6b:f7:0e:02:db:d3:63:a0:17: 3d:ec:7a:99 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUMh8j4EkR1UMmsaE+6xx9edSZlu8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIwMzEyNDEyM1oX DTI0MTIwMTEyNDYyM1owMzExMC8GA1UEAxMoNDY2Rjg5MzRGM0ZFRDkzNTVDOUVE MDlFMzgyNkNCRTMyQjI1RDQwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMFBS/rNg1FfDECtoFppFDWlu8oWE24h7FeOU2SuW0qwDHbPsCc1jD5V/EC 1RpDN1xEkioKMTtPUQj0FdsAVyVJfx06G1RyRYn6YTqZesBWZiTPsSy8P3r8N1tj kwUZBuPQsuRUfvFRFF//yjCxtfSOkkPj5YZeDaWiK2DHvhMZHjP1Gqf7sdQf1Lpn wpIZ8IEpmTFBNIsid/4g63kHntkeGI5L9pEvvR1KJZ+FtqRaIvT+AUBuIxD2VZLR d74+TioOV+uJQngS9DF06dNkr7xS+znusL4jUKmGtwSvn1cSSXZhoVj7lS4W/0Xv 7b7qHHLVmPUuuplovvhfl/WSMokCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEZviTTz/tk1XJ7Qnjgmy+MrJdQCMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82MzM5NzhmOC1hZWFiLTQyN2EtYmQ3NS0yY2RmMWQ5ZWI1MTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzMzk3OGY4 LWFlYWItNDI3YS1iZDc1LTJjZGYxZDllYjUxNy8wLzQ2NkY4OTM0RjNGRUQ5MzU1 QzlFRDA5RTM4MjZDQkUzMkIyNUQ0MDIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnojwwDQYJKoZIhvcNAQELBQADggEBAJG7hCIIGTQHUFZF8zLfMIHQCvIo5uF/ MxMd4J4+/IcN7yEFFfIqVzpwTsdg+p0kXZ3hi6qOivXR/aDRkXauMFqYEJSY8rW7 R37GFynmYx/1HsSCNnXCeaHBVB7JgUaSkaMqtJTEpRYtfoyBrgb+T4fDMflgkhaQ sgH+YR4Va2rclx/Z1svcIQPmO5Lp/nkTbf+A+FAa22QtQ0akim77zRdWNn6TVsvJ lW7txAL+0x1YsUATu+r3CbFVar4PAoXwESdOrCkzP0ZKuD+S1aiwmXO8iCDxir2f xJo+J36CSiEQ3nFOj2lpBDFG42mGVUL3HCuYDGv3DgLb02OgFz3sepk= -----END CERTIFICATE-----Generated at Thu May 9 00:36:59 2024 by rpki-client on console-fra.rpki-client.org