$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer File: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer (raw, json) Hash identifier: 7v4Bf5VxXr/asGTz650n5yxRrqkJ0Y1JMuhTiI+0KlA= Subject key identifier: 4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6F2418420BCA899DECCEE0F13C13EC05DAC3AB35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft caRepository: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 15 Oct 2023 16:18:41 +0000 Certificate not after: Sun 13 Oct 2024 16:23:41 +0000 Subordinate resources: IP: 103.234.208.0/22 IP: 2001:df7:3c00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:24:18:42:0b:ca:89:9d:ec:ce:e0:f1:3c:13:ec:05:da:c3:ab:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 15 16:18:41 2023 GMT Not After : Oct 13 16:23:41 2024 GMT Subject: CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:eb:e1:79:65:6e:2a:2e:21:34:bb:9c:59:72: b2:2c:ae:8f:47:13:5e:b9:25:20:ca:54:e4:e9:1f: ed:24:8d:9f:48:14:68:88:4e:4b:1a:16:4d:58:82: f0:86:e7:3d:85:3c:b8:f6:41:74:ee:a2:94:5b:44: 27:c9:d8:f5:c9:09:87:6b:bf:52:a3:a5:17:2a:0a: aa:08:0b:8c:a0:a8:ef:e3:82:a9:fe:4a:5a:10:6c: e9:a5:32:cc:9f:1c:6f:e9:dd:56:0c:be:6e:96:1c: b9:44:be:eb:29:db:bc:b4:6a:99:ad:72:21:d4:c5: 00:d6:5e:c1:85:ac:f4:73:65:81:b3:c1:c7:86:12: c6:fe:27:f5:d8:3f:72:13:56:60:cf:7f:73:5d:39: 54:62:73:d2:52:ad:0f:3e:2f:04:c6:85:5c:4d:05: e0:e9:67:56:a9:c7:b9:b6:92:89:18:4c:9d:46:9d: fc:f1:43:48:0d:a2:5d:1f:71:89:96:e4:3b:39:ba: 91:a7:19:2a:bd:cf:3e:8b:40:2a:e5:3d:e4:54:6a: 84:67:6b:14:b5:50:97:2c:77:1b:d4:cf:64:9a:e3: c1:7b:b9:bb:c4:eb:51:94:3f:5e:58:a3:57:ae:a2: de:eb:10:ad:7b:9f:f6:5a:f6:77:40:fb:e9:87:26: 7b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.234.208.0/22 IPv6: 2001:df7:3c00::/48 Signature Algorithm: sha256WithRSAEncryption 5c:a1:c6:b7:4b:b8:90:51:93:97:4a:8d:8a:4a:de:51:ac:ac: bc:42:26:89:cc:94:72:81:a6:de:ce:f8:a5:c0:cb:0b:63:d4: 6b:a8:6e:6f:21:a8:a8:71:0e:2e:a3:c0:1b:2c:37:1c:ed:9e: 87:21:9b:8c:60:d2:58:5c:86:6c:99:09:da:dc:0a:4e:72:bc: f3:00:8f:1e:85:32:f0:63:6e:f2:07:15:00:d6:00:dd:f0:de: 16:a7:b3:93:ff:b8:cf:cb:9c:60:92:d0:09:af:49:ee:d2:b1: cd:0e:bf:82:72:7d:03:62:7c:e5:60:43:fd:7e:b8:b3:d7:3f: 13:62:48:35:46:cd:7d:16:5b:fa:b1:06:7b:03:a9:79:d0:36: 1d:7b:7f:a6:62:9f:25:a3:56:ea:22:37:2e:db:58:2e:0d:90: ac:a9:fd:b5:74:1a:d7:fd:40:10:bb:7c:54:33:d3:21:d4:c1: 23:2e:f0:e3:4f:39:f6:d1:6d:1b:55:cc:41:a1:3c:38:30:06: 22:90:45:fb:2f:5d:b9:b2:dc:d7:73:95:d3:eb:f7:fb:2e:16: 35:31:09:ef:a1:eb:07:c2:ed:7a:85:f7:13:b3:72:c2:34:a8: 07:71:97:d1:35:1e:f4:22:40:52:3e:42:27:ce:29:ac:1f:0b: 13:f3:fa:9a -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUbyQYQgvKiZ3szuDxPBPsBdrDqzUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAxNTE2MTg0MVoX DTI0MTAxMzE2MjM0MVowMzExMC8GA1UEAxMoNEI2QUY3MzM1RUMwN0ZFNzQ2QkMy QTM2ODMwMjQzNkVGNkIxQjlFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALvr4XllbiouITS7nFlysiyuj0cTXrklIMpU5Okf7SSNn0gUaIhOSxoWTViC 8IbnPYU8uPZBdO6ilFtEJ8nY9ckJh2u/UqOlFyoKqggLjKCo7+OCqf5KWhBs6aUy zJ8cb+ndVgy+bpYcuUS+6ynbvLRqma1yIdTFANZewYWs9HNlgbPBx4YSxv4n9dg/ chNWYM9/c105VGJz0lKtDz4vBMaFXE0F4OlnVqnHubaSiRhMnUad/PFDSA2iXR9x iZbkOzm6kacZKr3PPotAKuU95FRqhGdrFLVQlyx3G9TPZJrjwXu5u8TrUZQ/Xlij V66i3usQrXuf9lr2d0D76Ycme6cCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEtq9zNewH/nRrwqNoMCQ272sbnrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMDdjZjIwMi1mNWVjLTQxMDEtODA4NS1jZWI4NmVhNjViM2UvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwN2NmMjAy LWY1ZWMtNDEwMS04MDg1LWNlYjg2ZWE2NWIzZS8wLzRCNkFGNzMzNUVDMDdGRTc0 NkJDMkEzNjgzMDI0MzZFRjZCMUI5RUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJn6tAwDwQCAAIwCQMHACABDfc8ADANBgkqhkiG9w0BAQsFAAOCAQEAXKHGt0u4 kFGTl0qNikreUaysvEImicyUcoGm3s74pcDLC2PUa6hubyGoqHEOLqPAGyw3HO2e hyGbjGDSWFyGbJkJ2twKTnK88wCPHoUy8GNu8gcVANYA3fDeFqezk/+4z8ucYJLQ Ca9J7tKxzQ6/gnJ9A2J85WBD/X64s9c/E2JINUbNfRZb+rEGewOpedA2HXt/pmKf JaNW6iI3LttYLg2QrKn9tXQa1/1AELt8VDPTIdTBIy7w40859tFtG1XMQaE8ODAG IpBF+y9dubLc13OV0+v3+y4WNTEJ76HrB8LteoX3E7NywjSoB3GX0TUe9CJAUj5C J84prB8LE/P6mg== -----END CERTIFICATE-----Generated at Wed May 8 05:33:16 2024 by rpki-client on console-ams.rpki-client.org