$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer File: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer (raw, json) Hash identifier: MyyAMddQQm6BNEBgDgaFh2I6M9sVBtx1tF5HfB4RbBw= Subject key identifier: 6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5F8BCFCA8F9BDBCE90DAE5C9AF23C4BD5C55CD2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft caRepository: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 30 Aug 2024 00:31:23 +0000 Certificate not after: Fri 29 Aug 2025 00:36:23 +0000 Subordinate resources: IP: 103.101.194.0/23 IP: 103.103.180.0/23 IP: 2001:df2:ab00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:8b:cf:ca:8f:9b:db:ce:90:da:e5:c9:af:23:c4:bd:5c:55:cd:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 30 00:31:23 2024 GMT Not After : Aug 29 00:36:23 2025 GMT Subject: CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:56:21:d1:be:2c:06:4c:39:9e:e8:15:6c:56: e7:ef:a7:cb:d1:18:87:f3:f1:39:eb:dd:36:13:21: 1e:d6:ad:06:b3:76:66:e6:05:34:4e:c6:22:cc:ac: fb:00:39:ae:a9:38:f3:50:f7:0a:87:9c:af:13:cc: 8f:08:f4:fd:8b:95:a9:b7:a1:8f:de:1a:28:c8:01: 3e:94:c5:2b:cc:a2:3a:62:ee:a9:82:18:a3:b6:78: d4:8a:f4:38:01:f1:17:b2:cb:aa:3a:1c:61:2f:0b: 18:14:d5:62:b0:4b:ee:fc:3f:01:e9:b9:3c:91:01: 93:48:d6:db:0e:cb:d9:d4:0e:65:e1:6c:a2:f4:5c: 51:bb:8b:b6:42:0b:d5:98:b5:42:d5:93:e5:e9:cc: ad:69:2d:d5:07:b1:56:70:d0:5e:67:61:3b:f9:fd: 09:44:0e:3c:d0:d1:d3:38:be:46:a0:21:a9:3b:c4: fd:ad:ff:39:ca:4f:f4:47:ac:71:ef:cb:6e:33:ba: cc:e9:87:0c:6e:29:0c:14:c0:d2:11:03:54:24:02: e8:4b:e6:cc:27:df:bf:5d:7b:1b:cf:c1:7e:ab:a2: df:01:88:a2:aa:e0:50:85:a3:2e:ca:fb:c0:83:f0: d6:c5:11:f3:2d:4b:01:97:6b:29:e7:27:f5:53:c4: 3c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.101.194.0/23 103.103.180.0/23 IPv6: 2001:df2:ab00::/48 Signature Algorithm: sha256WithRSAEncryption 32:04:2c:3a:cb:8a:45:89:0d:d6:b1:17:0d:f8:54:bb:59:25: 49:cd:95:c5:70:01:27:66:1b:05:51:6a:44:06:b7:b5:87:75: 53:ec:83:24:d1:6d:79:f8:71:0a:4b:f8:f8:44:a7:fd:62:a1: c2:c3:94:0d:a9:b9:1b:31:9b:68:6c:05:7a:0f:2f:f9:77:a5: 12:31:c7:17:92:64:20:42:3d:6e:9a:15:89:d3:49:5c:7f:ab: dc:b2:53:23:c0:9e:f2:f1:33:c7:85:92:a7:f7:9d:a7:bd:f1: 56:f3:6e:68:23:5a:34:1e:07:ae:f4:56:85:f7:d4:d9:d3:23: 1c:7e:2b:c4:c1:78:8c:f7:9b:e9:32:de:c5:d7:96:b8:fb:17: 81:97:f1:65:93:a1:e1:59:57:35:6f:87:25:e2:4f:92:7f:4e: 4a:ac:f6:ac:c0:ac:04:3e:90:42:6e:a9:90:ea:79:08:06:24: d7:74:71:c8:4e:b3:03:9c:45:a2:9a:c2:35:46:08:6d:5a:10: 55:ea:f0:3d:78:b8:36:2e:b8:4f:6a:7a:6c:dd:8f:38:b9:ff: 32:ff:b4:4d:9b:ba:f5:4c:12:e7:1e:40:87:74:68:c1:25:c1: 0f:09:40:a4:22:c8:28:c7:8a:7b:0d:87:97:81:38:1b:52:c3: 05:e9:4f:e7 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUX4vPyo+b286Q2uXJryPEvVxVzSwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgzMDAwMzEyM1oX DTI1MDgyOTAwMzYyM1owMzExMC8GA1UEAxMoNkEyMDBENkZDNTQzNERBRDYxMDZD RUU1NDM5Q0ExMjcwRERDQkM5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMtWIdG+LAZMOZ7oFWxW5++ny9EYh/PxOevdNhMhHtatBrN2ZuYFNE7GIsys +wA5rqk481D3CoecrxPMjwj0/YuVqbehj94aKMgBPpTFK8yiOmLuqYIYo7Z41Ir0 OAHxF7LLqjocYS8LGBTVYrBL7vw/Aem5PJEBk0jW2w7L2dQOZeFsovRcUbuLtkIL 1Zi1QtWT5enMrWkt1QexVnDQXmdhO/n9CUQOPNDR0zi+RqAhqTvE/a3/OcpP9Ees ce/LbjO6zOmHDG4pDBTA0hEDVCQC6EvmzCffv117G8/Bfqui3wGIoqrgUIWjLsr7 wIPw1sUR8y1LAZdrKecn9VPEPPsCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGogDW/FQ02tYQbO5UOcoScN3LySMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yOGQwZmNhOC01YzJkLTRlMzUtYmQ3ZC1iNDQ4YWE3NWYyYmUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4ZDBmY2E4 LTVjMmQtNGUzNS1iZDdkLWI0NDhhYTc1ZjJiZS8wLzZBMjAwRDZGQzU0MzREQUQ2 MTA2Q0VFNTQzOUNBMTI3MEREQ0JDOTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BAFnZcIDBAFnZ7QwDwQCAAIwCQMHACABDfKrADANBgkqhkiG9w0BAQsFAAOCAQEA MgQsOsuKRYkN1rEXDfhUu1klSc2VxXABJ2YbBVFqRAa3tYd1U+yDJNFtefhxCkv4 +ESn/WKhwsOUDam5GzGbaGwFeg8v+XelEjHHF5JkIEI9bpoVidNJXH+r3LJTI8Ce 8vEzx4WSp/edp73xVvNuaCNaNB4HrvRWhffU2dMjHH4rxMF4jPeb6TLexdeWuPsX gZfxZZOh4VlXNW+HJeJPkn9OSqz2rMCsBD6QQm6pkOp5CAYk13RxyE6zA5xFoprC NUYIbVoQVerwPXi4Ni64T2p6bN2POLn/Mv+0TZu69UwS5x5Ah3RowSXBDwlApCLI KMeKew2Hl4E4G1LDBelP5w== -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:49 2024 by rpki-client on console-fra.rpki-client.org