$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer File: 06C079105A8A7FB53C97370CDE636B0A22588747.cer (raw, json) Hash identifier: sOqB9yGcDNnkNm7JgLqbWXOObh23gKNpG+4/wx3qwl0= Subject key identifier: 06:C0:79:10:5A:8A:7F:B5:3C:97:37:0C:DE:63:6B:0A:22:58:87:47 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3BE9AB38062F1BE137EF529A3ED4F2405A1E83DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.mft caRepository: rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 30 Jul 2023 21:26:54 +0000 Certificate not after: Sun 28 Jul 2024 21:31:54 +0000 Subordinate resources: IP: 103.125.104.0/22 IP: 2403:f1c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e9:ab:38:06:2f:1b:e1:37:ef:52:9a:3e:d4:f2:40:5a:1e:83:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 30 21:26:54 2023 GMT Not After : Jul 28 21:31:54 2024 GMT Subject: CN=06C079105A8A7FB53C97370CDE636B0A22588747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:31:08:ea:34:63:bd:00:52:86:51:e5:00:37: 94:14:31:d9:f3:1e:8d:90:f4:13:da:5a:9b:d7:b2: 5b:3c:94:3e:c8:d5:44:d4:80:d1:94:42:98:5d:49: f9:68:df:43:53:bb:e9:a0:81:a2:dc:68:e4:fa:99: ad:3c:e9:5e:d3:25:6d:07:7b:65:2e:68:4c:6a:56: 60:39:e0:71:bb:75:d6:c3:ba:50:18:21:21:ee:4f: be:ec:3d:1e:4b:35:ea:65:3e:ed:d9:b6:ef:c2:d8: 24:76:56:3a:d6:75:11:93:fd:22:b7:ac:54:ea:dd: 1b:e6:23:1d:f1:af:68:6f:4b:a7:2e:8b:66:23:79: 56:8f:19:8d:e2:ea:bd:0b:a8:2d:c3:11:e5:11:f1: 50:ce:80:3d:d0:d6:58:ed:d7:45:a9:a7:dc:d8:87: ba:a5:0c:da:7b:bd:d5:6c:87:8b:3a:c1:2f:7b:20: 98:a7:de:86:29:6f:a6:7e:a0:c4:e8:50:91:b4:6c: a9:48:45:f0:d5:63:91:35:05:d8:91:67:31:e4:4f: 77:38:66:c4:c6:1f:50:84:27:5b:59:e3:64:25:52: c5:9f:e9:f2:54:f0:1c:1e:35:cc:d2:6a:24:07:76: 64:00:28:1d:d0:98:2e:61:ea:9a:9b:77:0d:03:c9: f0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 06:C0:79:10:5A:8A:7F:B5:3C:97:37:0C:DE:63:6B:0A:22:58:87:47 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.125.104.0/22 IPv6: 2403:f1c0::/32 Signature Algorithm: sha256WithRSAEncryption 4a:77:ee:15:b9:36:f9:4a:2d:20:f1:e8:a7:25:4d:81:15:cf: f4:da:81:db:c3:03:ab:63:04:35:e3:6a:24:f3:04:8a:82:f4: 01:b4:f4:ec:9f:43:f5:fc:c0:f6:f4:d7:35:b7:48:e1:71:2d: bb:7f:ad:c8:d2:5d:92:3e:f8:c2:37:2d:07:42:05:3d:d6:e5: aa:04:32:22:f6:ce:f7:6b:01:3e:7d:b3:47:01:bd:85:46:68: 1a:af:13:37:ec:83:a5:0b:27:cf:6d:a2:79:36:db:7a:be:f9: 0f:ad:58:08:4f:39:c7:a6:ce:bd:67:4e:56:ca:c8:38:31:69: e0:18:9a:de:b3:7a:8e:3b:b9:11:24:81:88:8b:e4:23:91:19: 70:cf:00:c4:3a:1f:7c:96:fe:92:3e:d5:f6:96:05:0f:f3:be: 37:b8:7c:3b:37:77:8a:cc:a1:cc:ad:cc:dd:67:8f:cf:6b:85: 1f:6e:56:cc:20:49:c7:8f:d8:6d:82:3a:0d:09:08:3d:9d:ec: e1:98:3c:a0:bc:fc:bf:6d:40:1f:c5:9a:50:b0:dd:27:88:1f: d9:37:a2:b1:72:8c:03:de:fb:7f:2b:61:40:65:de:a5:7e:a4: 34:37:85:63:f3:3a:96:ae:53:38:a2:dd:df:bb:b7:fe:78:46: 67:35:f5:29 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUO+mrOAYvG+E371KaPtTyQFoeg9owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMDIxMjY1NFoX DTI0MDcyODIxMzE1NFowMzExMC8GA1UEAxMoMDZDMDc5MTA1QThBN0ZCNTNDOTcz NzBDREU2MzZCMEEyMjU4ODc0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsxCOo0Y70AUoZR5QA3lBQx2fMejZD0E9pam9eyWzyUPsjVRNSA0ZRCmF1J +WjfQ1O76aCBotxo5PqZrTzpXtMlbQd7ZS5oTGpWYDngcbt11sO6UBghIe5Pvuw9 Hks16mU+7dm278LYJHZWOtZ1EZP9IresVOrdG+YjHfGvaG9Lpy6LZiN5Vo8ZjeLq vQuoLcMR5RHxUM6APdDWWO3XRamn3NiHuqUM2nu91WyHizrBL3sgmKfehilvpn6g xOhQkbRsqUhF8NVjkTUF2JFnMeRPdzhmxMYfUIQnW1njZCVSxZ/p8lTwHB41zNJq JAd2ZAAoHdCYLmHqmpt3DQPJ8JkCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAbAeRBain+1PJc3DN5jawoiWIdHMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84OGNhYzE2MS1mODgwLTQyMDYtOGQyYy1kYWE2MDRmZTA5MDIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg4Y2FjMTYx LWY4ODAtNDIwNi04ZDJjLWRhYTYwNGZlMDkwMi8wLzA2QzA3OTEwNUE4QTdGQjUz Qzk3MzcwQ0RFNjM2QjBBMjI1ODg3NDcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnfWgwDQQCAAIwBwMFACQD8cAwDQYJKoZIhvcNAQELBQADggEBAEp37hW5NvlK LSDx6KclTYEVz/TagdvDA6tjBDXjaiTzBIqC9AG09OyfQ/X8wPb01zW3SOFxLbt/ rcjSXZI++MI3LQdCBT3W5aoEMiL2zvdrAT59s0cBvYVGaBqvEzfsg6ULJ89tonk2 23q++Q+tWAhPOcemzr1nTlbKyDgxaeAYmt6zeo47uREkgYiL5CORGXDPAMQ6H3yW /pI+1faWBQ/zvje4fDs3d4rMocytzN1nj89rhR9uVswgSceP2G2COg0JCD2d7OGY PKC8/L9tQB/FmlCw3SeIH9k3orFyjAPe+38rYUBl3qV+pDQ3hWPzOpauUzii3d+7 t/54Rmc19Sk= -----END CERTIFICATE-----Generated at Fri May 3 04:42:14 2024 by rpki-client on console-fra.rpki-client.org