$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/462310BC71429E762524CFB126D88F0808C17EA6.cer File: 462310BC71429E762524CFB126D88F0808C17EA6.cer (raw, json) Hash identifier: 6MZTWJntEuF+uTncO+Fh83qJc+bO/EQIJsFrcOwfWFQ= Subject key identifier: 46:23:10:BC:71:42:9E:76:25:24:CF:B1:26:D8:8F:08:08:C1:7E:A6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 20A3220649BC8965C020E50A37976C7FEA880D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/462310BC71429E762524CFB126D88F0808C17EA6.mft caRepository: rsync://repo-rpki.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 08 May 2025 23:40:22 +0000 Certificate not after: Thu 07 May 2026 23:45:22 +0000 Subordinate resources: IP: 103.160.119.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a3:22:06:49:bc:89:65:c0:20:e5:0a:37:97:6c:7f:ea:88:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 8 23:40:22 2025 GMT Not After : May 7 23:45:22 2026 GMT Subject: CN=462310BC71429E762524CFB126D88F0808C17EA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:28:03:15:36:07:ec:e1:49:25:1c:41:fa:a0: 28:eb:60:c5:ec:6d:44:c9:4e:e3:60:f4:71:a0:47: 31:f9:40:a8:c1:26:2e:8e:d3:31:02:3f:a2:3f:9e: 47:16:8f:1d:ad:15:4e:00:6f:71:4d:a1:3f:08:1a: e5:88:c3:0e:9e:35:44:b8:9c:8f:d2:ae:13:9c:aa: e8:9f:8f:f1:1b:47:69:81:f3:59:8d:74:33:1c:31: fb:c5:b9:62:d4:5a:bb:d7:73:cc:57:c3:86:ba:80: 71:a7:ec:65:35:5e:6e:fc:31:98:b2:bd:4a:77:79: ce:10:57:cc:a2:14:fa:57:50:6d:f9:1c:c7:58:0f: 73:0b:7e:c8:60:8f:1c:ba:1f:b1:d3:89:4c:e9:50: 85:c0:9f:f5:db:fc:ff:8c:30:f3:bc:6c:8a:ed:71: 52:97:4b:7f:3f:13:a7:6d:80:60:86:55:75:33:0a: 09:5b:1f:a6:40:87:3e:69:3b:b0:8c:79:83:81:3d: c6:a9:94:68:dc:de:c2:4e:a3:4c:27:ba:7e:c3:c7: 81:b3:ea:c2:c1:62:a8:35:01:2b:a9:b3:a2:35:fe: d7:3a:1c:c8:75:80:d6:5f:cb:bd:ed:48:e5:22:1d: 7c:21:49:ea:10:b7:03:e2:11:cc:46:c0:69:79:86: cc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:23:10:BC:71:42:9E:76:25:24:CF:B1:26:D8:8F:08:08:C1:7E:A6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/462310BC71429E762524CFB126D88F0808C17EA6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.119.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:6c:27:e9:7e:6e:0a:28:2c:b6:74:d5:7b:27:ce:4b:e5:be: 28:80:04:a5:68:06:7e:9a:5d:42:fd:d2:fa:54:62:3c:5a:5c: ad:c0:b6:34:f7:0b:e5:d4:ab:b6:be:bf:2b:5b:1f:c5:49:72: 45:26:c7:75:28:28:5f:a6:8a:2e:d4:9c:9e:3b:6a:4a:94:b7: aa:91:d7:25:6e:46:3b:73:d8:a4:a7:f7:a7:b3:b5:c4:2e:8d: 06:58:9b:34:ac:0b:b3:34:d7:3a:58:df:3f:05:16:b3:81:4f: 1c:8c:6e:6d:aa:1a:bc:b3:22:3a:f7:ef:11:f8:43:ad:cb:7f: cc:a6:07:44:bf:98:f5:72:87:24:6e:50:17:e3:04:bb:95:85: d4:cd:37:fe:db:f1:35:32:de:f8:43:a1:44:df:09:46:6f:fe: 13:e6:a8:ae:47:28:d6:0a:a2:30:e4:ab:ae:e7:32:a8:33:cd: 61:77:6e:c6:ad:df:89:54:bf:97:b8:2a:ab:85:e0:74:b2:c4: 68:33:27:fc:e7:4b:75:d9:96:29:51:3a:54:e0:d5:15:54:52: 8c:96:3c:3c:f4:f0:41:82:5d:43:21:dc:42:f0:ba:27:01:90: 9e:c1:3c:f0:93:e9:fa:85:b3:e2:05:2f:8d:ad:43:02:9a:3c: d0:80:a1:2c -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgITIKMiBkm8iWXAIOUKN5dsf+qIDTANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKEJBOEY3N0QyMUU1 OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIwHhcNMjUwNTA4MjM0MDIyWhcN MjYwNTA3MjM0NTIyWjAzMTEwLwYDVQQDEyg0NjIzMTBCQzcxNDI5RTc2MjUyNENG QjEyNkQ4OEYwODA4QzE3RUE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsygDFTYH7OFJJRxB+qAo62DF7G1EyU7jYPRxoEcx+UCowSYujtMxAj+iP55H Fo8drRVOAG9xTaE/CBrliMMOnjVEuJyP0q4TnKron4/xG0dpgfNZjXQzHDH7xbli 1Fq713PMV8OGuoBxp+xlNV5u/DGYsr1Kd3nOEFfMohT6V1Bt+RzHWA9zC37IYI8c uh+x04lM6VCFwJ/12/z/jDDzvGyK7XFSl0t/PxOnbYBghlV1MwoJWx+mQIc+aTuw jHmDgT3GqZRo3N7CTqNMJ7p+w8eBs+rCwWKoNQErqbOiNf7XOhzIdYDWX8u97Ujl Ih18IUnqELcD4hHMRsBpeYbMPQIDAQABo4ICuDCCArQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQURiMQvHFCnnYlJM+xJtiPCAjBfqYwHwYDVR0jBBgwFoAUuo93 0h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgEGMGkGA1UdHwRiMGAwXqBc oFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzIv QkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgzMzc2Qi5jcmwwfgYI KwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0 L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvdW85 MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCCASkGCCsGAQUFBwELBIIBGzCC ARcwUwYIKwYBBQUHMAWGR3JzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L2MzNmQ2YTRmLWNjMzktNGQ5ZS04NDFkLTAwYmQ3ZGNiMTc1YS8wMIGABggrBgEF BQcwCoZ0cnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM2ZDZhNGYt Y2MzOS00ZDllLTg0MWQtMDBiZDdkY2IxNzVhLzAvNDYyMzEwQkM3MTQyOUU3NjI1 MjRDRkIxMjZEODhGMDgwOEMxN0VBNi5tZnQwPQYIKwYBBQUHMA2GMWh0dHBzOi8v cmVwby1ycGtpLmlkbmljLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGegdzANBgkqhkiG9w0BAQsFAAOCAQEAOmwn6X5uCigstnTVeyfOS+W+KIAEpWgG fppdQv3S+lRiPFpcrcC2NPcL5dSrtr6/K1sfxUlyRSbHdSgoX6aKLtScnjtqSpS3 qpHXJW5GO3PYpKf3p7O1xC6NBlibNKwLszTXOljfPwUWs4FPHIxubaoavLMiOvfv EfhDrct/zKYHRL+Y9XKHJG5QF+MEu5WF1M03/tvxNTLe+EOhRN8JRm/+E+aorkco 1gqiMOSrrucyqDPNYXduxq3fiVS/l7gqq4XgdLLEaDMn/OdLddmWKVE6VODVFVRS jJY8PPTwQYJdQyHcQvC6JwGQnsE88JPp+oWz4gUvja1DApo80IChLA== -----END CERTIFICATE-----Generated at Sun May 11 10:46:28 2025 by rpki-client