$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer File: 46E596CAE0AEADA8B4135425216E8783D92E6C76.cer (raw, json) Hash identifier: zOsbLc3S+z03Q6Gu2FdD0GkHAWTFuIPuUw6ihMhyX18= Subject key identifier: 46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3FC2F1FD06F66E9B06648441CBE058CDD1101197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft caRepository: rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 01 Aug 2023 05:09:02 +0000 Certificate not after: Tue 30 Jul 2024 05:14:02 +0000 Subordinate resources: IP: 103.242.79.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c2:f1:fd:06:f6:6e:9b:06:64:84:41:cb:e0:58:cd:d1:10:11:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 1 05:09:02 2023 GMT Not After : Jul 30 05:14:02 2024 GMT Subject: CN=46E596CAE0AEADA8B4135425216E8783D92E6C76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a7:bb:72:ad:a3:ee:40:ab:09:07:37:96:c7: 64:ea:0d:fe:84:86:34:05:73:57:18:fe:fe:70:61: 5f:1d:c2:c1:17:45:c2:02:fc:b9:49:a4:ed:a0:94: 6e:1a:98:af:5b:44:28:c8:5c:51:68:ca:13:4c:a8: 79:76:70:c8:7c:ab:25:03:38:97:85:30:f7:22:4a: 4c:cd:2b:d2:b8:b5:b0:13:18:65:1c:b3:47:e7:ee: 71:23:30:3b:58:4a:df:c1:51:e0:01:d1:b7:08:e5: ba:46:71:a9:19:a6:e7:63:85:e8:2f:65:95:e4:24: 90:87:d7:dc:20:0b:93:12:1b:49:0a:5c:cf:82:d4: 92:72:41:64:9f:25:71:93:7f:9a:5c:d5:b4:39:b5: f5:3d:75:78:4c:30:c0:51:48:48:01:23:e1:5d:16: b2:b4:e7:cd:42:81:d1:8f:44:82:53:ee:08:d8:66: 66:d8:1f:c9:15:8f:bb:2a:b2:c9:35:6c:23:e1:16: 75:08:13:3d:dc:49:36:25:db:83:6b:78:9a:5c:a5: 3a:16:d5:53:49:b9:8c:46:3a:ce:fe:0d:8f:f2:a1: 5c:a0:8d:c4:53:ab:5e:a9:62:0c:04:22:15:44:6e: b8:80:5c:10:ff:58:96:09:6b:17:cb:40:d8:95:a7: 02:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.242.79.0/24 Signature Algorithm: sha256WithRSAEncryption 44:e7:b1:ed:0e:8d:e4:26:24:a2:0c:5c:5c:f2:78:29:0b:bc: 83:f1:c7:f4:b0:be:a4:0d:4a:48:a1:8b:d9:70:0b:b9:c9:bc: be:9c:81:0d:6d:d4:83:05:e0:79:ec:4f:5d:75:d7:85:1c:d6: 63:38:01:89:18:5b:d6:51:89:e1:18:f6:c4:01:08:4a:f3:09: fa:f3:91:31:57:e8:c9:2c:f4:3b:6b:7f:56:eb:5e:9a:75:0f: df:5a:78:95:1c:a1:8b:4c:db:c7:92:26:21:46:3b:0e:37:23: f5:17:de:cc:bb:6b:a5:80:f8:68:ac:37:54:6f:52:9d:18:38: d9:27:6b:bf:4b:e0:c2:df:97:fd:21:11:3c:40:68:30:d5:b3: 23:f2:0c:91:db:4e:56:39:26:34:7c:db:f0:69:fe:0d:b4:86: 8c:db:72:c1:dd:46:cf:12:d8:55:a8:14:e3:04:02:eb:b1:d1: 62:c5:b1:46:37:c3:7c:3f:37:00:3a:ef:90:dc:01:10:37:b0: aa:0e:77:92:5f:ce:d2:b6:b5:51:c0:60:26:ba:79:1c:11:53: 10:1e:c7:8e:b7:ab:05:2a:f1:21:bc:b9:32:db:4e:de:a8:cd: 6d:36:2c:65:00:8a:b8:88:c1:20:bf:3d:9a:0c:2e:19:74:6d: bf:74:fe:d7 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUP8Lx/Qb2bpsGZIRBy+BYzdEQEZcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgwMTA1MDkwMloX DTI0MDczMDA1MTQwMlowMzExMC8GA1UEAxMoNDZFNTk2Q0FFMEFFQURBOEI0MTM1 NDI1MjE2RTg3ODNEOTJFNkM3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGnu3Kto+5AqwkHN5bHZOoN/oSGNAVzVxj+/nBhXx3CwRdFwgL8uUmk7aCU bhqYr1tEKMhcUWjKE0yoeXZwyHyrJQM4l4Uw9yJKTM0r0ri1sBMYZRyzR+fucSMw O1hK38FR4AHRtwjlukZxqRmm52OF6C9lleQkkIfX3CALkxIbSQpcz4LUknJBZJ8l cZN/mlzVtDm19T11eEwwwFFISAEj4V0WsrTnzUKB0Y9EglPuCNhmZtgfyRWPuyqy yTVsI+EWdQgTPdxJNiXbg2t4mlylOhbVU0m5jEY6zv4Nj/KhXKCNxFOrXqliDAQi FURuuIBcEP9YlglrF8tA2JWnAgsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEbllsrgrq2otBNUJSFuh4PZLmx2MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yMDQ4MWU0OS1mNGMxLTRjMTMtOTRiNy0wNzAxYzkyYzM0NTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwNDgxZTQ5 LWY0YzEtNGMxMy05NGI3LTA3MDFjOTJjMzQ1MC8wLzQ2RTU5NkNBRTBBRUFEQThC NDEzNTQyNTIxNkU4NzgzRDkyRTZDNzYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn8k8wDQYJKoZIhvcNAQELBQADggEBAETnse0OjeQmJKIMXFzyeCkLvIPxx/Sw vqQNSkihi9lwC7nJvL6cgQ1t1IMF4HnsT11114Uc1mM4AYkYW9ZRieEY9sQBCErz CfrzkTFX6Mks9Dtrf1brXpp1D99aeJUcoYtM28eSJiFGOw43I/UX3sy7a6WA+Gis N1RvUp0YONkna79L4MLfl/0hETxAaDDVsyPyDJHbTlY5JjR82/Bp/g20hozbcsHd Rs8S2FWoFOMEAuux0WLFsUY3w3w/NwA675DcARA3sKoOd5JfztK2tVHAYCa6eRwR UxAex463qwUq8SG8uTLbTt6ozW02LGUAiriIwSC/PZoMLhl0bb90/tc= -----END CERTIFICATE-----Generated at Wed May 8 14:59:51 2024 by rpki-client on console-ams.rpki-client.org