$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer File: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer (raw, json) Hash identifier: 3LyoDUbSSvPXVL7f3uB4QFQy0xkDo00e/pL8ice76zM= Subject key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 337F9CFD9B16ADA41779A112D4C10511B18C3717 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft caRepository: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 23 Dec 2024 16:31:20 +0000 Certificate not after: Mon 22 Dec 2025 16:36:20 +0000 Subordinate resources: IP: 103.136.12.0/22 IP: 2404:89c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 10:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:7f:9c:fd:9b:16:ad:a4:17:79:a1:12:d4:c1:05:11:b1:8c:37:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 23 16:31:20 2024 GMT Not After : Dec 22 16:36:20 2025 GMT Subject: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:ab:7f:17:e4:8d:db:f4:e6:c5:14:62:1f: 5b:58:02:dd:95:5c:57:2b:1a:50:c7:12:be:33:5a: b1:f3:7d:47:e4:e5:31:47:a1:65:57:47:09:ef:b9: a7:62:02:0a:d1:7c:08:8c:c8:9a:ca:47:cd:79:4a: de:0b:77:53:12:30:b4:6d:f3:23:37:78:19:8f:92: 6c:d0:41:c8:62:27:97:b3:f2:81:ad:ad:f8:2f:0e: 43:12:e1:fc:95:3b:51:ef:2b:50:78:39:ba:13:f4: b0:46:14:c6:00:58:3c:10:72:cd:67:26:4b:f5:e9: 8d:90:38:84:6e:55:a9:9c:78:fe:56:c0:57:ff:bc: 08:f6:15:c3:cb:b7:58:7e:8c:6e:82:9c:26:2a:c5: ea:c4:4b:c3:1d:48:55:59:90:e4:e7:5e:d9:e8:be: 02:f9:0c:84:04:aa:5d:b3:1f:d7:c2:7f:1e:7e:12: a3:26:03:66:6e:a3:1d:e9:1e:bc:c1:de:40:10:b4: c0:45:27:dd:ae:aa:35:cf:81:98:5e:5e:dd:ad:ae: 65:f5:52:e1:80:89:f3:62:20:f8:d5:63:82:a9:06: f0:df:cc:45:aa:c1:00:5e:a8:95:fb:40:f6:8e:db: 19:31:85:e5:51:b9:08:96:69:c8:ef:a6:71:ea:c9: 19:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.12.0/22 IPv6: 2404:89c0::/32 Signature Algorithm: sha256WithRSAEncryption 17:b7:43:c8:ed:1c:a3:06:2f:c4:91:8d:a8:ea:e7:b4:60:32: a3:ff:5a:9c:24:bb:57:89:0b:73:50:b4:e5:71:65:f8:fd:85: d9:03:ff:da:54:40:ad:6f:34:8f:be:c5:5e:d8:27:4f:94:f4: 5b:52:31:d6:52:e7:82:8c:63:18:35:b3:4e:6c:c5:ba:fd:ff: c8:6e:3b:8e:f1:30:6f:d3:c6:cd:5d:15:8d:be:6d:d8:13:a7: 34:57:5e:35:90:9b:bd:f9:1b:d9:5a:64:ee:54:58:95:13:6e: bc:24:c2:89:d0:f0:19:16:8a:df:7e:f3:ea:96:37:17:5c:45: 64:db:98:f0:8e:d5:e1:79:ca:f0:69:8c:c9:78:00:63:86:c3: 74:b2:b8:9a:0e:32:f7:cd:aa:91:c4:80:5f:8e:81:cb:f8:1f: bd:27:48:97:32:bc:3a:88:88:03:4a:7e:eb:97:fd:67:6f:b5: 44:92:2e:3c:48:fa:d1:c4:dc:a7:cf:b1:b4:78:80:5e:1c:e6: d2:8c:75:c2:e9:46:24:f1:4c:a8:3a:c9:6b:31:f3:9d:ca:bb: 89:fd:17:aa:38:02:f0:de:27:2a:dc:75:f7:50:f3:b2:c4:14: 16:19:93:4e:cb:81:34:3d:e3:b5:8e:72:79:2f:cf:04:b0:82: c1:e1:dd:2b -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUM3+c/ZsWraQXeaES1MEFEbGMNxcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIyMzE2MzEyMFoX DTI1MTIyMjE2MzYyMFowMzExMC8GA1UEAxMoNkE2OUVGQzVDODk3OTA3Qzc0QzhB MUVCREQ5RDM3RkNCRkIzN0I1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL44q38X5I3b9ObFFGIfW1gC3ZVcVysaUMcSvjNasfN9R+TlMUehZVdHCe+5 p2ICCtF8CIzImspHzXlK3gt3UxIwtG3zIzd4GY+SbNBByGInl7Pyga2t+C8OQxLh /JU7Ue8rUHg5uhP0sEYUxgBYPBByzWcmS/XpjZA4hG5VqZx4/lbAV/+8CPYVw8u3 WH6MboKcJirF6sRLwx1IVVmQ5Ode2ei+AvkMhASqXbMf18J/Hn4SoyYDZm6jHeke vMHeQBC0wEUn3a6qNc+BmF5e3a2uZfVS4YCJ82Ig+NVjgqkG8N/MRarBAF6olftA 9o7bGTGF5VG5CJZpyO+mcerJGQECAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGpp78XIl5B8dMih692dN/y/s3tTMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80MDFiMWMxYi02NTZjLTQ4OWQtOWVkMy1jY2M3N2M4MzAxOGQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwMWIxYzFi LTY1NmMtNDg5ZC05ZWQzLWNjYzc3YzgzMDE4ZC8wLzZBNjlFRkM1Qzg5NzkwN0M3 NEM4QTFFQkREOUQzN0ZDQkZCMzdCNTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJniAwwDQQCAAIwBwMFACQEicAwDQYJKoZIhvcNAQELBQADggEBABe3Q8jtHKMG L8SRjajq57RgMqP/Wpwku1eJC3NQtOVxZfj9hdkD/9pUQK1vNI++xV7YJ0+U9FtS MdZS54KMYxg1s05sxbr9/8huO47xMG/Txs1dFY2+bdgTpzRXXjWQm735G9laZO5U WJUTbrwkwonQ8BkWit9+8+qWNxdcRWTbmPCO1eF5yvBpjMl4AGOGw3SyuJoOMvfN qpHEgF+Ogcv4H70nSJcyvDqIiANKfuuX/WdvtUSSLjxI+tHE3KfPsbR4gF4c5tKM dcLpRiTxTKg6yWsx853Ku4n9F6o4AvDeJyrcdfdQ87LEFBYZk07LgTQ947WOcnkv zwSwgsHh3Ss= -----END CERTIFICATE-----Generated at Sun Apr 6 11:59:51 2025 by rpki-client