$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer File: 6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer (raw, json) Hash identifier: AbjIRuWmCUSrC+scuIkoVyJGNONtr5w9qBcA7h4ssC8= Subject key identifier: 6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 53DFC1E503C1205528647FB6CFB95A8179D3A74F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft caRepository: rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 05:08:05 +0000 Certificate not after: Mon 29 Jul 2024 05:13:05 +0000 Subordinate resources: IP: 103.105.252.0/22 IP: 2402:35c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 14:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:df:c1:e5:03:c1:20:55:28:64:7f:b6:cf:b9:5a:81:79:d3:a7:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 05:08:05 2023 GMT Not After : Jul 29 05:13:05 2024 GMT Subject: CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a6:c6:88:e3:83:d1:ec:31:cc:88:18:1a:67: 7f:91:c1:30:c4:ca:50:bd:38:3d:1f:32:d1:c9:0c: 09:10:0a:13:2b:8a:02:e5:c2:99:ef:61:4e:0b:a1: 4e:c3:0a:f0:20:0c:f7:6a:9f:57:8c:66:60:bf:4e: e9:d4:1a:71:de:b5:ac:5c:48:13:07:b8:94:bf:fc: 16:e7:1c:f8:86:82:60:01:bd:80:68:09:1d:37:54: 80:f8:49:6f:40:78:d8:30:92:74:99:41:61:6e:60: d7:20:90:9b:9e:0e:89:51:35:a3:d1:45:97:d5:c9: 2c:23:dd:36:fa:03:9f:8b:ad:dc:90:b3:01:0a:09: af:93:98:1f:23:5c:07:d7:7c:95:70:d9:06:5f:1d: c9:5d:3a:18:d4:c6:12:2d:e0:ec:82:e7:98:07:e0: ad:b5:f2:18:1b:3a:14:d6:fd:5d:fd:61:b8:53:87: 4f:b1:b0:c3:a9:f4:0d:a8:fc:85:1e:2f:3b:93:5d: 53:22:ed:87:ce:ab:8c:1c:f3:1b:a2:a8:02:3f:a7: c8:4c:f1:90:86:7e:40:78:3d:d9:24:f8:93:a4:48: 6b:a9:88:eb:2c:88:83:a6:9c:8d:0b:0f:f3:95:53: 18:7d:29:a8:6b:f9:03:ac:91:cd:dc:18:37:c8:a4: ba:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.252.0/22 IPv6: 2402:35c0::/32 Signature Algorithm: sha256WithRSAEncryption 80:b4:d0:b3:fc:50:12:2c:05:93:ff:b9:91:6f:fd:c8:91:91: 63:c8:c3:93:77:5d:b1:84:46:14:89:48:76:27:89:f5:2b:a9: 00:da:76:1c:8f:d3:76:1d:d5:29:c2:8a:28:58:e1:0b:7d:65: e9:b9:ea:73:48:b8:08:ff:2e:29:b7:13:20:85:14:51:3f:e4: 55:2c:e6:97:aa:d1:60:f7:53:df:9e:38:bb:03:ef:d2:e8:e9: ea:01:55:51:15:83:63:ed:3c:0f:20:4d:b5:04:83:33:1b:ab: 3b:b9:9d:1a:63:65:b6:3a:ee:81:94:7e:fa:46:7e:18:93:f2: d0:17:db:f5:bf:b8:ae:bd:08:ee:62:1b:56:c4:4b:4e:c8:bd: 8e:46:e4:df:bf:ca:97:55:1f:17:19:3c:b8:a1:01:5b:30:72: f7:33:c2:ec:23:94:f0:4c:07:e5:e3:ac:7d:68:af:56:85:87: 54:47:21:66:8f:74:0c:ba:d9:e7:52:eb:7b:f3:03:ce:29:db: d3:2b:5b:7d:bd:fa:9b:2c:cc:3a:e2:62:9f:fa:57:b6:a9:d0: 08:09:5e:39:62:e8:79:bd:be:de:d1:46:e8:b9:77:56:00:8f: 65:f7:a6:fa:ad:60:75:f4:40:fa:55:b3:76:15:be:e0:8e:06: 1d:38:bd:62 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUU9/B5QPBIFUoZH+2z7lagXnTp08wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA1MDgwNVoX DTI0MDcyOTA1MTMwNVowMzExMC8GA1UEAxMoNkE5REM1NjZDOENCRjFEN0NFQjE3 RkM5OTE3QUNENTgyRTVDMEE5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMqmxojjg9HsMcyIGBpnf5HBMMTKUL04PR8y0ckMCRAKEyuKAuXCme9hTguh TsMK8CAM92qfV4xmYL9O6dQacd61rFxIEwe4lL/8Fucc+IaCYAG9gGgJHTdUgPhJ b0B42DCSdJlBYW5g1yCQm54OiVE1o9FFl9XJLCPdNvoDn4ut3JCzAQoJr5OYHyNc B9d8lXDZBl8dyV06GNTGEi3g7ILnmAfgrbXyGBs6FNb9Xf1huFOHT7Gww6n0Daj8 hR4vO5NdUyLth86rjBzzG6KoAj+nyEzxkIZ+QHg92ST4k6RIa6mI6yyIg6acjQsP 85VTGH0pqGv5A6yRzdwYN8ikuvkCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGqdxWbIy/HXzrF/yZF6zVguXAqVMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zMTZhYTU0Zi03MTU4LTQzYWYtYjMzNi1iZTQ3MTQ4MTZmYWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxNmFhNTRm LTcxNTgtNDNhZi1iMzM2LWJlNDcxNDgxNmZhZC8wLzZBOURDNTY2QzhDQkYxRDdD RUIxN0ZDOTkxN0FDRDU4MkU1QzBBOTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnafwwDQQCAAIwBwMFACQCNcAwDQYJKoZIhvcNAQELBQADggEBAIC00LP8UBIs BZP/uZFv/ciRkWPIw5N3XbGERhSJSHYnifUrqQDadhyP03Yd1SnCiihY4Qt9Zem5 6nNIuAj/Lim3EyCFFFE/5FUs5peq0WD3U9+eOLsD79Lo6eoBVVEVg2PtPA8gTbUE gzMbqzu5nRpjZbY67oGUfvpGfhiT8tAX2/W/uK69CO5iG1bES07IvY5G5N+/ypdV HxcZPLihAVswcvczwuwjlPBMB+XjrH1or1aFh1RHIWaPdAy62edS63vzA84p29Mr W329+psszDriYp/6V7ap0AgJXjli6Hm9vt7RRui5d1YAj2X3pvqtYHX0QPpVs3YV vuCOBh04vWI= -----END CERTIFICATE-----Generated at Fri Apr 19 05:36:15 2024 by rpki-client on console-fra.rpki-client.org