$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer File: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer (raw, json) Hash identifier: m5biTY3XtoySu4GE5d+jd5Nt1JwiGrn/sSXH77Ip/V4= Subject key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 29515F5C30883B98B938673C0BC6E81EE8FFC8D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft caRepository: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 08:50:19 +0000 Certificate not after: Mon 29 Jul 2024 08:55:19 +0000 Subordinate resources: IP: 103.50.24.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Mar 2024 16:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:51:5f:5c:30:88:3b:98:b9:38:67:3c:0b:c6:e8:1e:e8:ff:c8:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 08:50:19 2023 GMT Not After : Jul 29 08:55:19 2024 GMT Subject: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:13:fa:5f:04:32:c8:11:4a:c6:7d:6e:bd:0a: 91:14:b8:c6:1e:38:1b:ec:bc:29:28:7b:1e:bf:36: 2b:9b:97:64:75:cb:df:7c:38:a7:05:4d:78:a7:97: 59:54:08:d7:1b:d7:c1:65:e2:02:60:ba:03:67:a3: c1:32:40:d1:6a:6b:fa:5b:cb:39:d5:1c:85:a1:5f: 46:06:12:79:64:4c:0b:42:1f:90:9d:62:21:a6:18: 13:59:cd:77:2d:cd:6f:5b:15:4f:ee:16:74:72:04: 80:41:a1:12:3b:1d:c1:14:b6:2b:1b:49:cb:dc:4c: c8:d7:bc:84:1b:a7:43:78:4f:a7:64:b6:45:f1:8a: 39:02:1b:ec:32:4c:b6:91:be:43:0c:5d:50:4f:fd: 2b:70:4a:80:f3:fa:28:60:44:6d:06:98:20:47:e5: 66:6e:11:4b:4e:ec:8b:04:63:4e:64:e0:fd:e1:ef: 4d:20:df:da:ec:86:a4:2f:14:de:af:bf:37:da:a8: 15:48:e2:f3:08:a9:40:9b:0a:2f:d2:24:31:aa:b7: 83:c6:27:54:2f:bf:8a:76:da:d5:f0:2a:25:b4:b4: ed:5a:8b:02:88:ec:3c:76:72:8d:86:c1:b0:91:d9: c9:9f:1f:f3:5b:99:8b:c3:9a:91:0f:1a:98:98:e2: 36:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.50.24.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:69:35:f4:3e:7e:2c:ae:bf:6e:64:b2:95:34:53:5d:6b:63: 35:9f:b8:a6:14:01:c3:92:47:ae:d5:e3:f0:d0:e1:2e:4d:22: aa:7d:cd:2f:4e:82:a4:8a:af:58:0e:f3:b2:d1:e0:bb:8f:0c: 98:b8:45:ec:89:64:44:07:b4:d5:bc:3e:33:ec:ab:84:f4:87: c9:73:57:b9:b3:81:73:4a:ed:b4:3c:65:39:49:a2:6f:6b:65: fe:a2:18:8f:04:69:c5:a1:e4:ad:0b:b9:c6:f1:38:d5:92:a1: 5c:fa:2f:76:58:26:0d:22:38:c9:87:12:91:14:04:a2:0f:8b: 92:49:97:c9:9c:dc:a4:5c:1b:31:6c:db:b5:54:b5:4b:a9:1b: b5:91:bd:ed:c1:de:ad:2d:ac:f0:c8:79:98:a9:a6:42:ba:21: 8c:a2:54:81:06:01:02:dd:d1:41:b6:01:55:bd:74:94:68:50: 9e:0a:b6:63:82:44:8d:16:3e:3b:58:55:5b:ab:2f:35:0f:c2: 51:a1:5e:f5:0f:5b:3a:da:b2:1f:cc:50:ee:f2:55:94:a3:9f: 20:fc:4f:5b:2a:07:74:fb:f3:a6:2d:a7:bf:2c:95:b1:9f:fb: 18:75:21:52:2c:33:53:56:94:34:af:3c:52:c0:b3:2f:6d:6a: 74:ba:f6:83 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKVFfXDCIO5i5OGc8C8boHuj/yNEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA4NTAxOVoX DTI0MDcyOTA4NTUxOVowMzExMC8GA1UEAxMoNkMxNTk3NjA3QTBDM0VBQzNFMzBD RjQ4RkYzMUJBRkQ3MUQyRDEyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMkT+l8EMsgRSsZ9br0KkRS4xh44G+y8KSh7Hr82K5uXZHXL33w4pwVNeKeX WVQI1xvXwWXiAmC6A2ejwTJA0Wpr+lvLOdUchaFfRgYSeWRMC0IfkJ1iIaYYE1nN dy3Nb1sVT+4WdHIEgEGhEjsdwRS2KxtJy9xMyNe8hBunQ3hPp2S2RfGKOQIb7DJM tpG+QwxdUE/9K3BKgPP6KGBEbQaYIEflZm4RS07siwRjTmTg/eHvTSDf2uyGpC8U 3q+/N9qoFUji8wipQJsKL9IkMaq3g8YnVC+/inba1fAqJbS07VqLAojsPHZyjYbB sJHZyZ8f81uZi8OakQ8amJjiNs0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGwVl2B6DD6sPjDPSP8xuv1x0tEhMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zNzY2ODU0MS1kNmM2LTQwOWUtOGFkMS01ZTg5YTRiMjg1MGUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM3NjY4NTQx LWQ2YzYtNDA5ZS04YWQxLTVlODlhNGIyODUwZS8wLzZDMTU5NzYwN0EwQzNFQUMz RTMwQ0Y0OEZGMzFCQUZENzFEMkQxMjEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnMhgwDQYJKoZIhvcNAQELBQADggEBAC1pNfQ+fiyuv25kspU0U11rYzWfuKYU AcOSR67V4/DQ4S5NIqp9zS9OgqSKr1gO87LR4LuPDJi4ReyJZEQHtNW8PjPsq4T0 h8lzV7mzgXNK7bQ8ZTlJom9rZf6iGI8EacWh5K0LucbxONWSoVz6L3ZYJg0iOMmH EpEUBKIPi5JJl8mc3KRcGzFs27VUtUupG7WRve3B3q0trPDIeZippkK6IYyiVIEG AQLd0UG2AVW9dJRoUJ4KtmOCRI0WPjtYVVurLzUPwlGhXvUPWzrash/MUO7yVZSj nyD8T1sqB3T786Ytp78slbGf+xh1IVIsM1NWlDSvPFLAsy9tanS69oM= -----END CERTIFICATE-----Generated at Thu Mar 28 16:42:05 2024 by rpki-client on console-fra.rpki-client.org