$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer File: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer (raw, json) Hash identifier: WPElry1oeNhnWCKBlyBWS3RFSOIH3JVjvUcjgWre3HE= Subject key identifier: 4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 215ACE4ED37B01CECF03A402100999E826300C65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft caRepository: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 16 Sep 2024 03:24:08 +0000 Certificate not after: Mon 15 Sep 2025 03:29:08 +0000 Subordinate resources: IP: 103.234.208.0/22 IP: 2001:df7:3c00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:5a:ce:4e:d3:7b:01:ce:cf:03:a4:02:10:09:99:e8:26:30:0c:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 16 03:24:08 2024 GMT Not After : Sep 15 03:29:08 2025 GMT Subject: CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:eb:e1:79:65:6e:2a:2e:21:34:bb:9c:59:72: b2:2c:ae:8f:47:13:5e:b9:25:20:ca:54:e4:e9:1f: ed:24:8d:9f:48:14:68:88:4e:4b:1a:16:4d:58:82: f0:86:e7:3d:85:3c:b8:f6:41:74:ee:a2:94:5b:44: 27:c9:d8:f5:c9:09:87:6b:bf:52:a3:a5:17:2a:0a: aa:08:0b:8c:a0:a8:ef:e3:82:a9:fe:4a:5a:10:6c: e9:a5:32:cc:9f:1c:6f:e9:dd:56:0c:be:6e:96:1c: b9:44:be:eb:29:db:bc:b4:6a:99:ad:72:21:d4:c5: 00:d6:5e:c1:85:ac:f4:73:65:81:b3:c1:c7:86:12: c6:fe:27:f5:d8:3f:72:13:56:60:cf:7f:73:5d:39: 54:62:73:d2:52:ad:0f:3e:2f:04:c6:85:5c:4d:05: e0:e9:67:56:a9:c7:b9:b6:92:89:18:4c:9d:46:9d: fc:f1:43:48:0d:a2:5d:1f:71:89:96:e4:3b:39:ba: 91:a7:19:2a:bd:cf:3e:8b:40:2a:e5:3d:e4:54:6a: 84:67:6b:14:b5:50:97:2c:77:1b:d4:cf:64:9a:e3: c1:7b:b9:bb:c4:eb:51:94:3f:5e:58:a3:57:ae:a2: de:eb:10:ad:7b:9f:f6:5a:f6:77:40:fb:e9:87:26: 7b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.234.208.0/22 IPv6: 2001:df7:3c00::/48 Signature Algorithm: sha256WithRSAEncryption 63:ff:e2:af:b7:45:fc:ed:3d:26:b7:55:5b:84:0d:cb:ed:08: e9:f4:3e:fc:b6:b3:b7:6c:8d:48:20:96:06:fe:fe:de:68:b0: 4e:82:09:67:fc:db:b6:22:08:ec:ce:d8:3a:cb:31:67:2f:99: 0f:63:a3:25:0d:56:ef:70:64:b7:32:e8:cf:24:d3:dc:a8:9f: 52:44:f9:d8:05:de:93:1f:db:46:85:25:59:01:3b:e1:7e:bf: 50:36:ba:8b:08:a3:4d:c7:25:27:67:4d:01:e4:5f:3c:d3:fb: 94:5c:41:fc:74:c5:89:64:d6:62:06:aa:0a:49:93:33:17:30: fe:57:27:c7:65:06:72:3b:15:6e:be:01:1a:30:b1:5e:45:a3: a3:24:63:e8:f0:b1:63:ba:f8:3c:06:3b:a1:86:66:eb:03:dd: 03:13:61:c5:24:9c:01:29:d2:87:c2:d6:1e:17:16:98:a1:b4: 0c:b7:70:6e:b8:ed:65:6c:f2:19:63:34:23:3f:6d:11:09:c5: 78:ad:70:a2:f8:20:03:bc:5c:b5:1e:58:a8:64:6a:9f:2c:ad: b7:2c:37:51:ee:3b:54:0d:5c:6a:af:42:0a:60:c3:26:ab:54: f4:f5:8e:9d:16:a4:9f:17:f0:1f:e6:a9:e0:66:d5:9c:86:42: 50:52:43:1b -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUIVrOTtN7Ac7PA6QCEAmZ6CYwDGUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxNjAzMjQwOFoX DTI1MDkxNTAzMjkwOFowMzExMC8GA1UEAxMoNEI2QUY3MzM1RUMwN0ZFNzQ2QkMy QTM2ODMwMjQzNkVGNkIxQjlFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALvr4XllbiouITS7nFlysiyuj0cTXrklIMpU5Okf7SSNn0gUaIhOSxoWTViC 8IbnPYU8uPZBdO6ilFtEJ8nY9ckJh2u/UqOlFyoKqggLjKCo7+OCqf5KWhBs6aUy zJ8cb+ndVgy+bpYcuUS+6ynbvLRqma1yIdTFANZewYWs9HNlgbPBx4YSxv4n9dg/ chNWYM9/c105VGJz0lKtDz4vBMaFXE0F4OlnVqnHubaSiRhMnUad/PFDSA2iXR9x iZbkOzm6kacZKr3PPotAKuU95FRqhGdrFLVQlyx3G9TPZJrjwXu5u8TrUZQ/Xlij V66i3usQrXuf9lr2d0D76Ycme6cCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEtq9zNewH/nRrwqNoMCQ272sbnrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMDdjZjIwMi1mNWVjLTQxMDEtODA4NS1jZWI4NmVhNjViM2UvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwN2NmMjAy LWY1ZWMtNDEwMS04MDg1LWNlYjg2ZWE2NWIzZS8wLzRCNkFGNzMzNUVDMDdGRTc0 NkJDMkEzNjgzMDI0MzZFRjZCMUI5RUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJn6tAwDwQCAAIwCQMHACABDfc8ADANBgkqhkiG9w0BAQsFAAOCAQEAY//ir7dF /O09JrdVW4QNy+0I6fQ+/Lazt2yNSCCWBv7+3miwToIJZ/zbtiII7M7YOssxZy+Z D2OjJQ1W73BktzLozyTT3KifUkT52AXekx/bRoUlWQE74X6/UDa6iwijTcclJ2dN AeRfPNP7lFxB/HTFiWTWYgaqCkmTMxcw/lcnx2UGcjsVbr4BGjCxXkWjoyRj6PCx Y7r4PAY7oYZm6wPdAxNhxSScASnSh8LWHhcWmKG0DLdwbrjtZWzyGWM0Iz9tEQnF eK1wovggA7xctR5YqGRqnyyttyw3Ue47VA1caq9CCmDDJqtU9PWOnRaknxfwH+ap 4GbVnIZCUFJDGw== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:41 2024 by rpki-client on console-ams.rpki-client.org