$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer File: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer (raw, json) Hash identifier: 4G32GtaJMwHPisqpYjvzUwXXzedNMjdFndMQYJUtBok= Subject key identifier: 64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 416DE5CF209C306D213871749301B8FD8DEFD920 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft caRepository: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 23 Jun 2023 13:18:40 +0000 Certificate not after: Fri 21 Jun 2024 13:23:40 +0000 Subordinate resources: IP: 103.158.208.0/23 IP: 2406:c240::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:6d:e5:cf:20:9c:30:6d:21:38:71:74:93:01:b8:fd:8d:ef:d9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 23 13:18:40 2023 GMT Not After : Jun 21 13:23:40 2024 GMT Subject: CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:32:51:73:3f:14:27:ac:fa:7b:d7:97:23:9e: 1f:80:9e:a2:fe:4c:48:1d:d8:62:29:95:99:a4:a4: 70:07:57:9b:63:2a:cf:65:be:33:42:57:13:1b:ef: df:40:c5:81:ec:e0:32:32:43:99:90:47:60:e4:0e: d9:7f:ec:84:7c:5f:fe:83:b4:d0:a2:2e:3f:fb:a4: 53:10:e1:97:06:83:d8:18:92:b6:70:0d:80:56:97: 75:de:4c:88:c4:41:11:bd:81:79:07:ea:97:89:73: 03:d4:ad:12:18:3a:46:e9:e1:67:81:e0:e2:ba:50: 13:f4:6c:d4:ea:52:f9:34:74:e0:c6:8a:b0:9b:22: 2c:81:88:fd:f1:a1:b2:88:b7:a0:72:3f:d9:1b:40: 04:84:f3:1a:cf:63:86:e6:92:2f:1f:19:4d:5e:c1: 29:ba:bf:67:9c:fd:fe:dc:d4:ac:0d:c6:b7:ca:45: 52:1d:78:b4:a6:1c:31:a8:d2:7d:5f:da:b0:a5:79: 4f:6f:8f:c2:c9:3b:b4:62:88:05:b2:54:5d:60:ad: 71:5e:1c:85:5f:8d:4e:11:48:6f:39:23:b5:6c:6d: ed:20:cd:28:c0:09:22:51:39:3b:0e:6d:09:af:ac: ec:86:c7:40:5c:97:20:84:99:25:bb:4c:35:e9:97: 62:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.208.0/23 IPv6: 2406:c240::/32 Signature Algorithm: sha256WithRSAEncryption 58:04:99:13:ea:3f:45:d0:2b:1f:87:71:55:f9:ba:81:ef:ca: cf:d8:15:13:88:49:7e:eb:81:b5:c3:14:62:e2:66:8f:44:ad: 64:3c:91:72:6d:66:32:c9:d1:90:90:3e:b2:58:c3:8c:3b:f5: 70:11:7f:39:b4:b2:37:fe:e3:e8:00:dd:c6:cc:ea:7e:53:c5: b8:f9:c1:1b:df:b7:4a:2b:5b:1f:0e:a9:19:58:61:75:41:0e: 21:41:bb:79:b1:d5:e9:0b:86:c6:df:27:4b:23:0b:75:42:95: 17:50:8a:df:48:4d:2b:e1:3d:5f:c4:0a:72:7d:66:7d:4f:9b: 16:79:59:4b:e9:8c:4c:46:c0:e4:87:20:cb:8f:5b:fe:c4:9d: 92:c7:9b:0f:df:e0:da:37:cc:ef:24:b3:d5:44:ee:a0:ca:0e: 1a:34:7d:d4:4c:40:31:09:61:48:5d:ac:a4:cb:ad:5a:70:7d: 5b:40:a3:0f:26:66:3d:da:89:c3:02:05:ab:98:03:09:cc:87: 7d:3f:61:5d:3f:3a:5c:1b:43:c0:d1:60:63:26:6e:a2:de:41: df:c8:62:7a:99:62:9d:6e:30:37:e8:b2:b1:95:b4:1b:eb:b9: 54:4c:1d:28:a5:27:13:2e:d2:b0:f2:d0:53:9d:7f:f4:a2:8e: 3b:cd:42:8a -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUQW3lzyCcMG0hOHF0kwG4/Y3v2SAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYyMzEzMTg0MFoX DTI0MDYyMTEzMjM0MFowMzExMC8GA1UEAxMoNjRCNDY2NTFEN0IwQzc1N0U0QUVE RTAxNjkxRjA2MkZFRUYxNURCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANQyUXM/FCes+nvXlyOeH4Ceov5MSB3YYimVmaSkcAdXm2Mqz2W+M0JXExvv 30DFgezgMjJDmZBHYOQO2X/shHxf/oO00KIuP/ukUxDhlwaD2BiStnANgFaXdd5M iMRBEb2BeQfql4lzA9StEhg6RunhZ4Hg4rpQE/Rs1OpS+TR04MaKsJsiLIGI/fGh soi3oHI/2RtABITzGs9jhuaSLx8ZTV7BKbq/Z5z9/tzUrA3Gt8pFUh14tKYcMajS fV/asKV5T2+Pwsk7tGKIBbJUXWCtcV4chV+NThFIbzkjtWxt7SDNKMAJIlE5Ow5t Ca+s7IbHQFyXIISZJbtMNemXYpcCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGS0ZlHXsMdX5K7eAWkfBi/u8V22MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wZTcwNTkyNy1lYzY0LTQ0ZjUtOWM5ZS1jOWE1NWE1MjNiNjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlNzA1OTI3 LWVjNjQtNDRmNS05YzllLWM5YTU1YTUyM2I2NC8wLzY0QjQ2NjUxRDdCMEM3NTdF NEFFREUwMTY5MUYwNjJGRUVGMTVEQjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnntAwDQQCAAIwBwMFACQGwkAwDQYJKoZIhvcNAQELBQADggEBAFgEmRPqP0XQ Kx+HcVX5uoHvys/YFROISX7rgbXDFGLiZo9ErWQ8kXJtZjLJ0ZCQPrJYw4w79XAR fzm0sjf+4+gA3cbM6n5Txbj5wRvft0orWx8OqRlYYXVBDiFBu3mx1ekLhsbfJ0sj C3VClRdQit9ITSvhPV/ECnJ9Zn1PmxZ5WUvpjExGwOSHIMuPW/7EnZLHmw/f4No3 zO8ks9VE7qDKDho0fdRMQDEJYUhdrKTLrVpwfVtAow8mZj3aicMCBauYAwnMh30/ YV0/OlwbQ8DRYGMmbqLeQd/IYnqZYp1uMDfosrGVtBvruVRMHSilJxMu0rDy0FOd f/SijjvNQoo= -----END CERTIFICATE-----Generated at Wed May 8 04:37:51 2024 by rpki-client on console-fra.rpki-client.org