$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer File: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer (raw, json) Hash identifier: TIK614B7vNcZcANXlM3j/jF6+hG1DQ3fTRJdCmpEjwc= Subject key identifier: 6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 686DE577DF7327B92E67A7FD9E30995E95BD64CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft caRepository: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 29 Oct 2024 07:12:14 +0000 Certificate not after: Tue 28 Oct 2025 07:17:14 +0000 Subordinate resources: IP: 2001:df4:56c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:6d:e5:77:df:73:27:b9:2e:67:a7:fd:9e:30:99:5e:95:bd:64:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 29 07:12:14 2024 GMT Not After : Oct 28 07:17:14 2025 GMT Subject: CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:15:e1:cd:bf:db:75:05:a3:4d:86:13:1a:6d: 6c:88:8f:55:b8:25:20:15:49:99:4e:2f:7b:30:81: 63:bc:c9:55:14:39:d9:43:7d:5d:91:1a:bd:84:33: 51:09:1b:6a:87:1c:ae:5c:6c:8c:15:64:8b:08:36: 25:33:e7:78:db:9d:b9:c0:39:9c:3b:f5:d3:b4:98: 34:f6:de:4c:94:b6:47:11:c1:7e:41:78:f8:fb:ae: ec:d8:50:b6:87:fa:7d:36:9c:a5:07:25:e5:88:0f: f9:fe:2d:17:41:5d:62:18:56:6c:9e:09:39:3e:89: 42:8e:8a:61:a0:08:a6:ac:a0:30:4b:70:28:c3:fd: 2e:fb:15:fc:2a:fa:35:da:a4:b4:29:a5:af:cc:df: eb:1c:ae:7c:e9:d4:8d:25:51:82:b5:67:99:96:ee: 20:d1:88:b3:4d:df:49:40:9f:af:04:56:01:25:fd: 9d:be:2a:80:ff:9e:4e:e7:68:93:1c:1e:06:87:55: 4d:ee:72:7d:9b:3f:d7:75:ce:7f:83:2e:d6:32:6c: 60:2d:42:32:7a:f1:34:0c:25:5c:8b:7f:cc:64:3f: 04:dc:97:d1:a3:23:a0:c6:d0:53:95:2a:b6:ef:0f: 31:fe:17:ec:fd:7d:3a:55:6e:f2:fa:ec:16:24:09: 28:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:56c0::/48 Signature Algorithm: sha256WithRSAEncryption 5a:77:4b:65:7a:dc:fd:32:da:21:a4:6c:95:bf:fa:e2:a4:d8: 09:74:bc:3c:dc:f1:88:b1:a3:19:bb:5e:66:42:30:ab:31:d7: a2:97:b0:aa:3b:eb:05:64:13:d2:51:63:2b:2e:9e:d7:bf:bb: 63:dd:8f:9f:21:fb:14:8e:98:a1:a5:e5:ce:fa:3c:c1:9f:1d: a3:60:0f:d8:a4:b1:df:18:2a:8c:a8:a5:63:b7:29:a2:c8:bd: 37:5b:b7:2b:5d:b1:66:1f:fb:84:b3:f6:78:62:b1:bc:8d:e6: 77:b7:39:3c:c9:18:2b:91:1e:69:09:3f:d4:df:1c:14:97:8d: e7:21:dd:00:cc:02:41:f9:79:b3:97:9b:71:6e:d3:c8:58:08: e1:df:46:38:60:e3:9d:0a:fd:0f:87:68:59:41:01:50:b8:cf: 16:ad:02:f2:bc:eb:f1:2e:c6:76:9b:dd:c7:80:9d:cd:c3:3a: 65:1f:8a:0c:50:88:b5:b1:72:f0:ac:3d:b0:36:73:33:d4:2a: bf:e1:e5:26:25:55:ae:16:37:f2:2b:33:c6:9a:e2:48:6c:f4: 26:24:cc:6f:9e:72:1c:11:b7:42:ee:3f:41:3f:24:2d:ac:3d: 2d:8a:97:13:dd:9e:fc:68:87:30:79:9c:c1:5b:bf:e7:11:be: e6:1d:8b:e6 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUaG3ld99zJ7kuZ6f9njCZXpW9ZM4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAyOTA3MTIxNFoX DTI1MTAyODA3MTcxNFowMzExMC8GA1UEAxMoNkEzOTk2QUZFMTEzODIzODUzMEMy RkM5MkIyQUI2NzVGQ0QyMThDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMEV4c2/23UFo02GExptbIiPVbglIBVJmU4vezCBY7zJVRQ52UN9XZEavYQz UQkbaoccrlxsjBVkiwg2JTPneNuducA5nDv107SYNPbeTJS2RxHBfkF4+Puu7NhQ tof6fTacpQcl5YgP+f4tF0FdYhhWbJ4JOT6JQo6KYaAIpqygMEtwKMP9LvsV/Cr6 NdqktCmlr8zf6xyufOnUjSVRgrVnmZbuINGIs03fSUCfrwRWASX9nb4qgP+eTudo kxweBodVTe5yfZs/13XOf4Mu1jJsYC1CMnrxNAwlXIt/zGQ/BNyX0aMjoMbQU5Uq tu8PMf4X7P19OlVu8vrsFiQJKH0CAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGo5lq/hE4I4UwwvySsqtnX80hjIMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iYTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JhODliN2Rk LTk5YTctNDUwZS1iZTg0LWIzYmZjNzM0MGYxZi8xLzZBMzk5NkFGRTExMzgyMzg1 MzBDMkZDOTJCMkFCNjc1RkNEMjE4QzgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ30VsAwDQYJKoZIhvcNAQELBQADggEBAFp3S2V63P0y2iGkbJW/+uKk2Al0 vDzc8Yixoxm7XmZCMKsx16KXsKo76wVkE9JRYysunte/u2Pdj58h+xSOmKGl5c76 PMGfHaNgD9iksd8YKoyopWO3KaLIvTdbtytdsWYf+4Sz9nhisbyN5ne3OTzJGCuR HmkJP9TfHBSXjech3QDMAkH5ebOXm3Fu08hYCOHfRjhg450K/Q+HaFlBAVC4zxat AvK86/Euxnab3ceAnc3DOmUfigxQiLWxcvCsPbA2czPUKr/h5SYlVa4WN/IrM8aa 4khs9CYkzG+echwRt0LuP0E/JC2sPS2KlxPdnvxohzB5nMFbv+cRvuYdi+Y= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:42 2024 by rpki-client on console-ams.rpki-client.org