$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer File: C16E46D556A47D2429EC847E95E7C429D38AC26D.cer (raw, json) Hash identifier: WtkO5S1W6VNnl4O6G7HpZE1CwhoTFVGCoVXdpO+qPoY= Subject key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2201905993D2CFDA3FB3BFBC9276BEE2FFADF857 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft caRepository: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 11 Jul 2023 18:50:34 +0000 Certificate not after: Tue 09 Jul 2024 18:55:34 +0000 Subordinate resources: IP: 122.248.32.0/20 IP: 202.43.112.0/23 IP: 202.58.242.0/23 IP: 203.30.254.0/23 IP: 2400:7500::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:01:90:59:93:d2:cf:da:3f:b3:bf:bc:92:76:be:e2:ff:ad:f8:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 11 18:50:34 2023 GMT Not After : Jul 9 18:55:34 2024 GMT Subject: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1e:05:34:90:34:06:c9:6c:bc:8a:b2:6f:93: 08:ea:d3:20:01:ed:0c:ce:0a:bd:dc:1c:b3:92:10: 24:c9:75:3e:16:03:ff:07:c7:6f:6a:a4:23:52:ae: ea:b3:40:23:dd:ca:4a:0f:cb:65:7f:d3:55:26:95: 0b:7e:e4:f9:1e:39:fb:fa:e7:4c:08:e8:62:80:03: 33:83:0f:c9:7c:d0:8f:04:74:82:ee:4d:ad:db:a7: 3c:af:2d:02:cc:50:b9:28:80:d9:f1:32:de:56:f5: cc:81:78:74:14:84:82:9c:2d:3e:b5:63:b4:8b:15: 79:4a:5f:fc:cb:06:07:d6:47:bf:c0:d3:33:1c:c0: 3f:50:2f:7e:98:ae:8f:dd:8d:36:af:75:80:5a:91: f7:8c:1e:c8:58:ce:32:85:91:d0:f5:bc:4a:4f:95: 5d:d7:25:4c:53:cc:3e:3c:46:7d:c9:58:81:9b:51: 74:79:ce:b0:26:80:1b:90:a6:04:4c:78:5c:85:70: fd:e8:bf:05:9a:8a:a9:48:86:68:c4:9b:91:aa:75: 66:f6:a3:5d:40:eb:e2:42:29:d4:84:41:3a:51:af: 8a:25:39:e1:cf:bd:4e:bc:4e:bb:70:0c:bc:59:b4: d6:9a:d1:dd:27:64:e1:23:8c:0d:9c:5f:07:3f:6f: 4e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.32.0/20 202.43.112.0/23 202.58.242.0/23 203.30.254.0/23 IPv6: 2400:7500::/32 Signature Algorithm: sha256WithRSAEncryption 3c:16:8a:2d:d7:0e:e9:39:37:57:7b:7d:4b:31:26:e5:e8:be: 0a:8d:da:47:fb:4d:70:fb:cc:dd:86:e7:5d:51:0b:82:f5:e8: 18:6d:ee:45:2e:ab:52:8e:c9:b8:78:bb:6c:5f:d2:4c:70:15: f2:fd:eb:6a:02:3b:7b:8a:f7:1c:aa:d2:b8:6b:7a:6e:76:84: 4d:59:66:65:72:2f:86:24:97:3f:8b:92:0c:34:9b:c5:38:73: cc:98:54:d0:75:13:90:78:05:61:0f:92:a6:ff:65:d7:32:0e: 6c:17:ce:5e:a4:d2:ca:b8:44:e4:22:68:28:45:3a:6d:6d:f0: 03:e3:ff:6b:c6:0c:cf:38:35:9e:19:89:b6:cf:1c:ec:84:57: 59:c8:c7:ea:2f:90:1d:aa:c9:29:5f:c8:9c:c8:89:2b:64:cf: d6:7c:a6:7e:10:58:61:5f:43:26:f9:72:37:29:9f:ab:00:e1: 6e:0b:9f:04:25:6d:24:57:f1:65:0e:29:05:66:d8:9b:98:21: ab:19:1b:88:23:98:83:5c:cf:ef:eb:4d:08:22:8a:cd:bf:ad: a0:35:59:93:22:9e:dd:d2:df:70:cc:d9:0d:d5:9f:28:c8:69: 78:bb:46:f2:b1:7d:c7:51:3b:5a:ef:6d:a7:9f:64:33:60:c2: e1:be:12:5c -----BEGIN CERTIFICATE----- MIIF5jCCBM6gAwIBAgIUIgGQWZPSz9o/s7+8kna+4v+t+FcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDcxMTE4NTAzNFoX DTI0MDcwOTE4NTUzNFowMzExMC8GA1UEAxMoQzE2RTQ2RDU1NkE0N0QyNDI5RUM4 NDdFOTVFN0M0MjlEMzhBQzI2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKkeBTSQNAbJbLyKsm+TCOrTIAHtDM4Kvdwcs5IQJMl1PhYD/wfHb2qkI1Ku 6rNAI93KSg/LZX/TVSaVC37k+R45+/rnTAjoYoADM4MPyXzQjwR0gu5NrdunPK8t AsxQuSiA2fEy3lb1zIF4dBSEgpwtPrVjtIsVeUpf/MsGB9ZHv8DTMxzAP1Avfpiu j92NNq91gFqR94weyFjOMoWR0PW8Sk+VXdclTFPMPjxGfclYgZtRdHnOsCaAG5Cm BEx4XIVw/ei/BZqKqUiGaMSbkap1ZvajXUDr4kIp1IRBOlGviiU54c+9TrxOu3AM vFm01prR3Sdk4SOMDZxfBz9vTmkCAwEAAaOCAtkwggLVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMFuRtVWpH0kKeyEfpXnxCnTisJtMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZjJlN2ZkNi1lYjVlLTQ4MGEtOGU5Ny1jNTVmNjhlMDU4OWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmMmU3ZmQ2 LWViNWUtNDgwYS04ZTk3LWM1NWY2OGUwNTg5YS8wL0MxNkU0NkQ1NTZBNDdEMjQy OUVDODQ3RTk1RTdDNDI5RDM4QUMyNkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgD BAR6+CADBAHKK3ADBAHKOvIDBAHLHv4wDQQCAAIwBwMFACQAdQAwDQYJKoZIhvcN AQELBQADggEBADwWii3XDuk5N1d7fUsxJuXovgqN2kf7TXD7zN2G511RC4L16Bht 7kUuq1KOybh4u2xf0kxwFfL962oCO3uK9xyq0rhrem52hE1ZZmVyL4Yklz+Lkgw0 m8U4c8yYVNB1E5B4BWEPkqb/ZdcyDmwXzl6k0sq4ROQiaChFOm1t8APj/2vGDM84 NZ4ZibbPHOyEV1nIx+ovkB2qySlfyJzIiStkz9Z8pn4QWGFfQyb5cjcpn6sA4W4L nwQlbSRX8WUOKQVm2JuYIasZG4gjmINcz+/rTQgiis2/raA1WZMint3S33DM2Q3V nyjIaXi7RvKxfcdRO1rvbaefZDNgwuG+Elw= -----END CERTIFICATE-----Generated at Wed May 8 17:45:25 2024 by rpki-client on console-ams.rpki-client.org