$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer File: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer (raw, json) Hash identifier: mzgfp350+ZB/V3IpRu3EcX21JnrJ4Sgc5MXMySBfWuA= Subject key identifier: 46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3A8855B31E6B07614B4EFBC50CCB9B2A613CEC04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft caRepository: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 21 Nov 2023 08:27:59 +0000 Certificate not after: Tue 19 Nov 2024 08:32:59 +0000 Subordinate resources: IP: 115.187.30.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:88:55:b3:1e:6b:07:61:4b:4e:fb:c5:0c:cb:9b:2a:61:3c:ec:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 21 08:27:59 2023 GMT Not After : Nov 19 08:32:59 2024 GMT Subject: CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:de:9c:a3:f1:25:3c:16:b8:ec:aa:93:b3:8a: 70:19:6e:e3:e8:50:e4:39:53:5a:b3:5c:ce:a0:0d: 08:5c:b1:ac:1d:ab:dd:7d:ac:68:d4:64:e6:21:64: 6c:43:33:8b:15:94:ea:07:8f:8d:d5:26:26:d2:a0: 46:32:51:d0:f1:d7:af:82:45:1c:5b:92:36:b7:6e: 9b:40:53:c8:1c:f2:14:c8:78:db:fb:67:09:ea:f3: b1:7a:f7:ef:6f:1a:87:8f:1a:9a:b1:93:73:28:49: d5:7e:6f:2c:4c:77:3e:f7:37:cf:00:27:95:e9:93: 23:49:16:3a:26:8a:d7:ef:95:78:6a:3e:d7:dc:f2: 08:8a:ad:40:a3:5e:45:7c:4a:cb:24:ef:6c:fe:e5: 57:18:ff:c8:01:25:d0:0e:7e:21:d1:40:31:72:fd: ee:af:e2:5d:97:75:64:73:57:6c:54:88:33:62:c5: b4:1c:a3:ee:89:ee:f2:b7:5b:13:e4:cf:b3:d2:28: 45:00:08:a7:da:1e:3d:b9:1c:3b:74:c8:55:f2:20: 4a:5a:3c:4c:e2:8c:05:80:2f:56:61:a5:d7:e6:02: 00:15:06:15:ab:fb:d4:0a:d5:08:e5:01:d9:48:92: d3:79:a0:33:ed:cc:3a:13:15:69:7a:9c:a2:4a:67: ad:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.187.30.0/23 Signature Algorithm: sha256WithRSAEncryption 82:df:63:0a:dc:a9:b1:39:71:b6:a1:25:6d:f4:53:46:f3:f6: 4b:33:65:b0:bc:32:eb:ed:0c:75:10:ad:b9:8a:4f:5b:b6:be: 1c:ae:41:b0:80:88:c7:a7:e9:75:61:91:34:e9:47:5e:ce:74: 39:f4:42:0f:30:53:c8:ec:cc:76:b0:5c:14:8e:12:60:37:97: fb:0b:59:0e:d5:95:43:c9:08:d8:20:b9:6a:72:41:f7:10:0d: 0b:7c:01:a7:c7:f7:fc:b7:ef:77:b1:9b:63:32:4b:7c:c8:34: ce:59:1a:4b:b4:cf:95:e6:69:b9:71:ac:38:b2:4b:a9:cc:3b: 26:bb:62:dc:38:c7:aa:ec:47:2a:ba:86:3a:97:24:54:e3:a8: 4d:a8:d8:d4:d8:8e:c4:79:d9:3d:68:e7:4e:97:1e:30:97:29: b1:0c:98:2a:7f:67:cc:12:95:ac:9a:ae:99:db:4f:8d:9a:98: 8e:87:ab:2e:d3:8a:44:20:2b:b7:8c:0a:ac:4f:11:3f:dd:f9: 27:4f:1a:10:c7:d0:c4:03:b9:06:ed:9c:a6:fb:e2:50:ae:85: e2:e4:18:3a:01:cd:01:8a:bc:4f:cd:80:99:24:de:bd:11:a4: fc:22:af:b3:8f:c5:d5:bd:7e:c5:f0:68:03:f1:42:39:8f:26: 8e:45:09:a9 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUOohVsx5rB2FLTvvFDMubKmE87AQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEyMTA4Mjc1OVoX DTI0MTExOTA4MzI1OVowMzExMC8GA1UEAxMoNDZBMDg1OUY4QzdDQzJDMkU3RDVD QkM4RTQzNjM0RjhBM0REQUFGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANrenKPxJTwWuOyqk7OKcBlu4+hQ5DlTWrNczqANCFyxrB2r3X2saNRk5iFk bEMzixWU6gePjdUmJtKgRjJR0PHXr4JFHFuSNrdum0BTyBzyFMh42/tnCerzsXr3 728ah48amrGTcyhJ1X5vLEx3Pvc3zwAnlemTI0kWOiaK1++VeGo+19zyCIqtQKNe RXxKyyTvbP7lVxj/yAEl0A5+IdFAMXL97q/iXZd1ZHNXbFSIM2LFtByj7onu8rdb E+TPs9IoRQAIp9oePbkcO3TIVfIgSlo8TOKMBYAvVmGl1+YCABUGFav71ArVCOUB 2UiS03mgM+3MOhMVaXqcokpnraECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEaghZ+MfMLC59XLyOQ2NPij3ar1MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMDU0MDllZC05ZjQwLTRmNWEtYjVlZS1hMDg4ZGEyZjU5NzgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwNTQwOWVk LTlmNDAtNGY1YS1iNWVlLWEwODhkYTJmNTk3OC8wLzQ2QTA4NTlGOEM3Q0MyQzJF N0Q1Q0JDOEU0MzYzNEY4QTNEREFBRjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFzux4wDQYJKoZIhvcNAQELBQADggEBAILfYwrcqbE5cbahJW30U0bz9kszZbC8 MuvtDHUQrbmKT1u2vhyuQbCAiMen6XVhkTTpR17OdDn0Qg8wU8jszHawXBSOEmA3 l/sLWQ7VlUPJCNgguWpyQfcQDQt8AafH9/y373exm2MyS3zINM5ZGku0z5Xmablx rDiyS6nMOya7Ytw4x6rsRyq6hjqXJFTjqE2o2NTYjsR52T1o506XHjCXKbEMmCp/ Z8wSlayarpnbT42amI6Hqy7TikQgK7eMCqxPET/d+SdPGhDH0MQDuQbtnKb74lCu heLkGDoBzQGKvE/NgJkk3r0RpPwir7OPxdW9fsXwaAPxQjmPJo5FCak= -----END CERTIFICATE-----Generated at Tue May 7 16:42:35 2024 by rpki-client on console-ams.rpki-client.org