$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer File: 46E596CAE0AEADA8B4135425216E8783D92E6C76.cer (raw, json) Hash identifier: RAXLByF3LWiYaOP6xhiu0ajsVbne7OwGG7SLIX7E13k= Subject key identifier: 46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 49027FDD647F18F0604B1EB9390B7B3A2C985575 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft caRepository: rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Jul 2024 12:09:10 +0000 Certificate not after: Tue 01 Jul 2025 12:14:10 +0000 Subordinate resources: IP: 103.242.79.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:02:7f:dd:64:7f:18:f0:60:4b:1e:b9:39:0b:7b:3a:2c:98:55:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 2 12:09:10 2024 GMT Not After : Jul 1 12:14:10 2025 GMT Subject: CN=46E596CAE0AEADA8B4135425216E8783D92E6C76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a7:bb:72:ad:a3:ee:40:ab:09:07:37:96:c7: 64:ea:0d:fe:84:86:34:05:73:57:18:fe:fe:70:61: 5f:1d:c2:c1:17:45:c2:02:fc:b9:49:a4:ed:a0:94: 6e:1a:98:af:5b:44:28:c8:5c:51:68:ca:13:4c:a8: 79:76:70:c8:7c:ab:25:03:38:97:85:30:f7:22:4a: 4c:cd:2b:d2:b8:b5:b0:13:18:65:1c:b3:47:e7:ee: 71:23:30:3b:58:4a:df:c1:51:e0:01:d1:b7:08:e5: ba:46:71:a9:19:a6:e7:63:85:e8:2f:65:95:e4:24: 90:87:d7:dc:20:0b:93:12:1b:49:0a:5c:cf:82:d4: 92:72:41:64:9f:25:71:93:7f:9a:5c:d5:b4:39:b5: f5:3d:75:78:4c:30:c0:51:48:48:01:23:e1:5d:16: b2:b4:e7:cd:42:81:d1:8f:44:82:53:ee:08:d8:66: 66:d8:1f:c9:15:8f:bb:2a:b2:c9:35:6c:23:e1:16: 75:08:13:3d:dc:49:36:25:db:83:6b:78:9a:5c:a5: 3a:16:d5:53:49:b9:8c:46:3a:ce:fe:0d:8f:f2:a1: 5c:a0:8d:c4:53:ab:5e:a9:62:0c:04:22:15:44:6e: b8:80:5c:10:ff:58:96:09:6b:17:cb:40:d8:95:a7: 02:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.242.79.0/24 Signature Algorithm: sha256WithRSAEncryption 63:89:ed:6a:b8:ff:18:7d:e3:af:4f:fe:85:02:bf:f9:bb:b6: ce:9c:ae:51:59:6d:23:78:7f:cc:a3:83:76:bd:e8:66:5d:64: 28:b2:f6:20:6c:05:c0:ff:bd:00:6f:08:21:76:bc:78:ee:9a: 18:05:43:ac:ae:48:a4:c6:5b:47:aa:02:79:27:ee:a5:42:b1: c3:88:2e:18:b8:6c:af:03:ab:65:28:37:2d:4c:f8:49:b8:63: 0a:6d:fb:3d:56:15:b0:4a:49:31:6d:7f:c2:53:3b:1c:80:54: 85:e8:72:4e:52:14:6d:38:3f:0a:c7:8b:0a:a3:dc:c7:04:0d: 8d:bd:0d:71:a3:5c:48:49:19:d6:b3:20:79:ef:66:62:b4:3c: 82:eb:15:70:be:43:62:93:56:b8:51:57:72:30:46:39:0a:d7: b5:b5:36:2d:0d:a7:cb:ff:13:61:a1:ee:71:d7:b5:79:ee:2d: 43:38:78:d1:a3:86:c1:90:8e:25:ac:b9:25:6b:32:8b:85:4d: 44:e8:b2:21:66:a1:bf:f9:4c:5b:13:f7:a9:70:6d:cb:98:80: 55:c0:42:75:16:3e:f9:0c:73:15:9f:79:66:43:94:bb:e5:34: 3e:53:39:86:15:ea:c8:e5:7f:b1:7d:d8:bd:ac:6a:bd:b7:12: fd:ed:f9:c4 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUSQJ/3WR/GPBgSx65OQt7OiyYVXUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMjEyMDkxMFoX DTI1MDcwMTEyMTQxMFowMzExMC8GA1UEAxMoNDZFNTk2Q0FFMEFFQURBOEI0MTM1 NDI1MjE2RTg3ODNEOTJFNkM3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGnu3Kto+5AqwkHN5bHZOoN/oSGNAVzVxj+/nBhXx3CwRdFwgL8uUmk7aCU bhqYr1tEKMhcUWjKE0yoeXZwyHyrJQM4l4Uw9yJKTM0r0ri1sBMYZRyzR+fucSMw O1hK38FR4AHRtwjlukZxqRmm52OF6C9lleQkkIfX3CALkxIbSQpcz4LUknJBZJ8l cZN/mlzVtDm19T11eEwwwFFISAEj4V0WsrTnzUKB0Y9EglPuCNhmZtgfyRWPuyqy yTVsI+EWdQgTPdxJNiXbg2t4mlylOhbVU0m5jEY6zv4Nj/KhXKCNxFOrXqliDAQi FURuuIBcEP9YlglrF8tA2JWnAgsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEbllsrgrq2otBNUJSFuh4PZLmx2MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yMDQ4MWU0OS1mNGMxLTRjMTMtOTRiNy0wNzAxYzkyYzM0NTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwNDgxZTQ5 LWY0YzEtNGMxMy05NGI3LTA3MDFjOTJjMzQ1MC8wLzQ2RTU5NkNBRTBBRUFEQThC NDEzNTQyNTIxNkU4NzgzRDkyRTZDNzYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn8k8wDQYJKoZIhvcNAQELBQADggEBAGOJ7Wq4/xh9469P/oUCv/m7ts6crlFZ bSN4f8yjg3a96GZdZCiy9iBsBcD/vQBvCCF2vHjumhgFQ6yuSKTGW0eqAnkn7qVC scOILhi4bK8Dq2UoNy1M+Em4Ywpt+z1WFbBKSTFtf8JTOxyAVIXock5SFG04PwrH iwqj3McEDY29DXGjXEhJGdazIHnvZmK0PILrFXC+Q2KTVrhRV3IwRjkK17W1Ni0N p8v/E2Gh7nHXtXnuLUM4eNGjhsGQjiWsuSVrMouFTUTosiFmob/5TFsT96lwbcuY gFXAQnUWPvkMcxWfeWZDlLvlND5TOYYV6sjlf7F92L2sar23Ev3t+cQ= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:20 2024 by rpki-client on console-ams.rpki-client.org