$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer File: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer (raw, json) Hash identifier: MMzOY2f6FCXovm+ywTL36ycAwZRk4Wtcl4N61g73P44= Subject key identifier: 6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0B5FD9BA3223C437E5D68900238D2D27337B1C69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft caRepository: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 16 Jul 2024 08:44:29 +0000 Certificate not after: Tue 15 Jul 2025 08:49:29 +0000 Subordinate resources: IP: 160.19.206.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:5f:d9:ba:32:23:c4:37:e5:d6:89:00:23:8d:2d:27:33:7b:1c:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 16 08:44:29 2024 GMT Not After : Jul 15 08:49:29 2025 GMT Subject: CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:aa:c2:0c:58:8d:b8:88:3a:b5:71:42:ad:cc: 9d:68:b0:17:a0:ba:de:f9:46:28:35:4d:5a:a7:ca: e7:f0:0f:70:6a:ad:67:2e:ce:51:62:7a:33:be:f8: 38:28:23:f0:70:c8:b1:6d:bb:19:cf:c2:4b:df:4c: 23:21:a2:c1:e3:fa:59:f3:2b:76:4c:a9:0e:1c:61: 99:34:43:9e:8a:80:e6:d8:c4:dd:5d:8d:06:24:21: 60:08:28:d5:1b:05:65:b2:a2:30:ec:25:86:4e:e4: 99:99:4d:97:6b:8e:ca:59:0f:dd:c3:d7:a4:f1:9b: 3d:0f:3c:83:e8:29:67:37:07:83:35:f2:ba:25:6b: 2e:e9:34:c8:fc:98:56:6e:28:62:ad:cd:f2:7b:27: 13:3c:d0:ed:a2:8e:24:eb:4c:0d:12:58:db:f2:3b: 37:35:de:68:5b:ff:0a:0a:b5:80:21:b0:55:f4:fa: dc:b1:0e:48:75:b5:42:47:3c:95:c9:98:95:fd:f1: d8:17:99:ad:76:e9:9b:32:00:eb:5a:d8:e3:a3:d7: 83:50:ab:42:8c:c9:33:fe:5f:70:94:77:8a:6b:7e: 04:b5:b5:95:28:b7:55:eb:f3:2b:b7:3a:6b:02:22: 51:33:1f:87:60:e6:49:c9:54:37:a8:e2:2f:6f:ff: b4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.206.0/23 Signature Algorithm: sha256WithRSAEncryption 62:77:35:08:4f:5c:10:3b:11:84:94:ec:ca:1e:f1:01:f4:38: ab:da:73:c5:12:e1:84:76:d8:e8:5b:1e:17:98:a5:bb:73:29: 5a:69:83:eb:4b:2b:ac:7d:1c:7a:cf:3d:73:4a:86:84:1e:2c: a5:98:53:3c:29:31:b9:4b:b0:9f:66:9a:47:8f:1b:a7:4d:b3: 9a:2d:44:9e:c8:e8:9a:83:7e:1b:4a:5a:17:05:a3:45:a9:3c: a6:78:97:68:76:8c:9b:3b:7a:1e:29:2f:e3:36:8f:54:07:2c: d1:40:50:7c:e8:db:14:c6:fe:1a:7b:c7:fc:80:8a:82:75:37: cb:56:40:50:67:50:79:55:85:4d:01:64:4d:d4:7b:85:26:b2: eb:9d:39:a0:f0:f6:a7:6a:43:4d:01:30:ea:e4:36:56:a5:15: ae:c8:54:cd:96:cd:bb:73:db:90:b0:29:e5:d9:25:5b:06:d4: 6d:a3:53:d9:b7:bd:56:cf:08:2d:f8:0a:65:4c:f5:22:44:d4: 67:53:23:0e:de:41:a1:be:e0:85:75:33:e3:01:b1:cf:32:66: b7:36:0f:7f:6d:aa:a7:6b:34:ca:72:78:ec:f2:0b:ef:45:2f: 66:d3:f6:52:08:47:c7:63:b1:21:00:e4:e2:dd:ac:5b:e5:4b: ce:04:2f:0b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUC1/ZujIjxDfl1okAI40tJzN7HGkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDcxNjA4NDQyOVoX DTI1MDcxNTA4NDkyOVowMzExMC8GA1UEAxMoNkEyQ0M5RDNDNzMxNDhFMjY1RTk5 NjYxOTI5QzFBRTlFM0QxOEQzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALaqwgxYjbiIOrVxQq3MnWiwF6C63vlGKDVNWqfK5/APcGqtZy7OUWJ6M774 OCgj8HDIsW27Gc/CS99MIyGiweP6WfMrdkypDhxhmTRDnoqA5tjE3V2NBiQhYAgo 1RsFZbKiMOwlhk7kmZlNl2uOylkP3cPXpPGbPQ88g+gpZzcHgzXyuiVrLuk0yPyY Vm4oYq3N8nsnEzzQ7aKOJOtMDRJY2/I7NzXeaFv/Cgq1gCGwVfT63LEOSHW1Qkc8 lcmYlf3x2BeZrXbpmzIA61rY46PXg1CrQozJM/5fcJR3imt+BLW1lSi3VevzK7c6 awIiUTMfh2DmSclUN6jiL2//tEMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGosydPHMUjiZemWYZKcGunj0Y0xMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jYjJhOTE2YS1hZDIyLTQ5NzktYmU0My05NTFjNzZmMmY5MjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiMmE5MTZh LWFkMjItNDk3OS1iZTQzLTk1MWM3NmYyZjkyMC8wLzZBMkNDOUQzQzczMTQ4RTI2 NUU5OTY2MTkyOUMxQUU5RTNEMThEMzEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgE84wDQYJKoZIhvcNAQELBQADggEBAGJ3NQhPXBA7EYSU7Moe8QH0OKvac8US 4YR22OhbHheYpbtzKVppg+tLK6x9HHrPPXNKhoQeLKWYUzwpMblLsJ9mmkePG6dN s5otRJ7I6JqDfhtKWhcFo0WpPKZ4l2h2jJs7eh4pL+M2j1QHLNFAUHzo2xTG/hp7 x/yAioJ1N8tWQFBnUHlVhU0BZE3Ue4UmsuudOaDw9qdqQ00BMOrkNlalFa7IVM2W zbtz25CwKeXZJVsG1G2jU9m3vVbPCC34CmVM9SJE1GdTIw7eQaG+4IV1M+MBsc8y Zrc2D39tqqdrNMpyeOzyC+9FL2bT9lIIR8djsSEA5OLdrFvlS84ELws= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org