$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer File: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer (raw, json) Hash identifier: 8GyPsg/3qtC+E8fwoS54x1LWM1JDuyPVKb6ltr4vun8= Subject key identifier: 64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 48A260C3973DCDFD48EBAE9AAB6168F6A93C0858 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft caRepository: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 24 May 2024 18:32:23 +0000 Certificate not after: Fri 23 May 2025 18:37:23 +0000 Subordinate resources: IP: 103.158.208.0/23 IP: 2406:c240::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:a2:60:c3:97:3d:cd:fd:48:eb:ae:9a:ab:61:68:f6:a9:3c:08:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 24 18:32:23 2024 GMT Not After : May 23 18:37:23 2025 GMT Subject: CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:32:51:73:3f:14:27:ac:fa:7b:d7:97:23:9e: 1f:80:9e:a2:fe:4c:48:1d:d8:62:29:95:99:a4:a4: 70:07:57:9b:63:2a:cf:65:be:33:42:57:13:1b:ef: df:40:c5:81:ec:e0:32:32:43:99:90:47:60:e4:0e: d9:7f:ec:84:7c:5f:fe:83:b4:d0:a2:2e:3f:fb:a4: 53:10:e1:97:06:83:d8:18:92:b6:70:0d:80:56:97: 75:de:4c:88:c4:41:11:bd:81:79:07:ea:97:89:73: 03:d4:ad:12:18:3a:46:e9:e1:67:81:e0:e2:ba:50: 13:f4:6c:d4:ea:52:f9:34:74:e0:c6:8a:b0:9b:22: 2c:81:88:fd:f1:a1:b2:88:b7:a0:72:3f:d9:1b:40: 04:84:f3:1a:cf:63:86:e6:92:2f:1f:19:4d:5e:c1: 29:ba:bf:67:9c:fd:fe:dc:d4:ac:0d:c6:b7:ca:45: 52:1d:78:b4:a6:1c:31:a8:d2:7d:5f:da:b0:a5:79: 4f:6f:8f:c2:c9:3b:b4:62:88:05:b2:54:5d:60:ad: 71:5e:1c:85:5f:8d:4e:11:48:6f:39:23:b5:6c:6d: ed:20:cd:28:c0:09:22:51:39:3b:0e:6d:09:af:ac: ec:86:c7:40:5c:97:20:84:99:25:bb:4c:35:e9:97: 62:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.208.0/23 IPv6: 2406:c240::/32 Signature Algorithm: sha256WithRSAEncryption 6b:62:7a:bf:17:29:ac:55:05:46:92:89:a2:a4:7d:d0:43:0c: 22:1f:6e:ef:48:ef:16:04:e7:90:d1:f5:d4:2f:7f:de:f4:20: 82:cf:11:f4:07:05:9e:fe:28:86:9f:4c:34:00:3f:45:0c:5e: b7:f6:17:11:ef:08:bc:bd:ca:0d:e2:e7:d5:37:c9:3e:68:d9: d6:92:e6:8f:92:30:47:ab:13:6f:d5:d0:d9:2f:57:3c:a9:04: c3:49:01:26:43:0e:46:69:d6:c9:db:43:12:16:43:61:63:84: 8e:7b:64:21:0d:dc:2b:a4:02:24:bf:96:81:2b:38:37:14:93: ed:e9:61:75:d5:79:5d:64:f7:f2:3d:d5:d7:33:18:8c:88:ec: 44:95:c3:3f:5f:6d:77:73:ff:9d:07:ef:37:a4:e2:f5:ca:37: 54:e6:e7:a2:0c:00:bf:f2:b1:5a:b3:87:8e:64:fd:8c:f1:6c: e4:5c:9c:dc:43:62:64:a9:7e:e3:62:02:2e:8a:ab:c6:29:17: a5:ab:39:8d:3b:36:48:e8:b9:b7:82:f2:2c:32:92:15:c0:c1: 38:7f:cc:cf:f6:db:92:78:a8:e2:8d:47:38:af:70:ad:f4:4c: 7f:dc:ff:2b:27:62:6a:7f:32:27:4b:e0:8d:18:21:ac:8f:bb: ba:6c:90:5f -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUSKJgw5c9zf1I666aq2Fo9qk8CFgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyNDE4MzIyM1oX DTI1MDUyMzE4MzcyM1owMzExMC8GA1UEAxMoNjRCNDY2NTFEN0IwQzc1N0U0QUVE RTAxNjkxRjA2MkZFRUYxNURCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANQyUXM/FCes+nvXlyOeH4Ceov5MSB3YYimVmaSkcAdXm2Mqz2W+M0JXExvv 30DFgezgMjJDmZBHYOQO2X/shHxf/oO00KIuP/ukUxDhlwaD2BiStnANgFaXdd5M iMRBEb2BeQfql4lzA9StEhg6RunhZ4Hg4rpQE/Rs1OpS+TR04MaKsJsiLIGI/fGh soi3oHI/2RtABITzGs9jhuaSLx8ZTV7BKbq/Z5z9/tzUrA3Gt8pFUh14tKYcMajS fV/asKV5T2+Pwsk7tGKIBbJUXWCtcV4chV+NThFIbzkjtWxt7SDNKMAJIlE5Ow5t Ca+s7IbHQFyXIISZJbtMNemXYpcCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGS0ZlHXsMdX5K7eAWkfBi/u8V22MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wZTcwNTkyNy1lYzY0LTQ0ZjUtOWM5ZS1jOWE1NWE1MjNiNjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlNzA1OTI3 LWVjNjQtNDRmNS05YzllLWM5YTU1YTUyM2I2NC8wLzY0QjQ2NjUxRDdCMEM3NTdF NEFFREUwMTY5MUYwNjJGRUVGMTVEQjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnntAwDQQCAAIwBwMFACQGwkAwDQYJKoZIhvcNAQELBQADggEBAGtier8XKaxV BUaSiaKkfdBDDCIfbu9I7xYE55DR9dQvf970IILPEfQHBZ7+KIafTDQAP0UMXrf2 FxHvCLy9yg3i59U3yT5o2daS5o+SMEerE2/V0NkvVzypBMNJASZDDkZp1snbQxIW Q2FjhI57ZCEN3CukAiS/loErODcUk+3pYXXVeV1k9/I91dczGIyI7ESVwz9fbXdz /50H7zek4vXKN1Tm56IMAL/ysVqzh45k/YzxbORcnNxDYmSpfuNiAi6Kq8YpF6Wr OY07NkjoubeC8iwykhXAwTh/zM/225J4qOKNRzivcK30TH/c/ysnYmp/MidL4I0Y IayPu7pskF8= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:49 2024 by rpki-client on console-fra.rpki-client.org