$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer File: 6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer (raw, json) Hash identifier: J1ydqJ9iyYjyC33w6caXWUw2QAJ5de43sYw4FJhLNp4= Subject key identifier: 6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2BAED3EAEC55896EC6B2D13319CE4FDCEDFCD01A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft caRepository: rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 02:37:03 +0000 Certificate not after: Mon 29 Jul 2024 02:42:03 +0000 Subordinate resources: IP: 103.151.94.0/23 IP: 2001:df3:b880::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ae:d3:ea:ec:55:89:6e:c6:b2:d1:33:19:ce:4f:dc:ed:fc:d0:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 02:37:03 2023 GMT Not After : Jul 29 02:42:03 2024 GMT Subject: CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5f:0a:35:5d:68:f9:4e:f5:2a:75:fc:fe:27: fe:4b:6f:4e:91:00:7a:48:de:d8:eb:e4:d5:ca:db: ae:37:30:7d:e0:4d:d3:73:b9:b5:0d:42:9f:f4:ce: 00:5a:30:af:a2:90:b4:55:f3:8f:90:91:d9:5e:88: f2:85:2b:84:d9:76:d2:66:ea:98:fc:d0:42:6f:76: 5d:22:54:e4:54:a6:aa:8c:b4:79:ac:f2:c3:fe:96: ba:d6:d8:f1:f0:02:8a:87:4b:4f:8c:2b:6b:cc:b1: 5d:2d:69:55:3c:23:5b:4b:d5:51:60:0e:7a:ff:4f: b7:df:66:6a:ec:f2:41:3f:b6:c7:a2:73:b8:48:35: 8e:21:cf:41:54:f5:02:ea:78:ca:7c:6f:24:bd:27: 4d:2a:64:b8:41:48:c1:9c:7e:fa:65:78:7a:80:35: a4:8c:05:93:f8:03:c1:37:d0:83:05:cf:5c:8d:d8: b3:c6:c5:7f:a6:53:9a:34:6d:38:70:31:bb:40:4d: a3:d3:07:5b:2e:44:e5:51:4f:8a:17:cf:06:cc:70: 29:2e:62:27:6e:90:c2:6e:15:10:e0:1b:50:d2:62: 0f:ca:88:a4:10:00:72:2a:70:98:b5:8a:92:54:f8: 8e:f5:32:12:13:3e:9f:14:17:d8:f8:18:3b:dc:d0: ca:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.94.0/23 IPv6: 2001:df3:b880::/48 Signature Algorithm: sha256WithRSAEncryption 16:8a:7c:3d:59:0f:84:b6:b7:39:83:16:b2:8d:de:86:1c:fc: 6c:23:b4:00:ff:cb:b6:60:4b:2e:85:bf:5e:18:ff:7f:06:dc: 4d:ba:81:74:51:3d:4a:e1:89:22:1a:09:68:c1:44:db:9b:ad: 56:4b:3b:1c:08:af:0d:57:8f:84:70:01:98:34:92:30:2b:c5: 68:4b:fd:a0:3b:10:68:09:36:20:a9:17:10:f8:23:3b:38:65: 9b:74:63:25:1e:48:98:03:16:9d:ff:ee:ab:de:f3:39:f3:74: f0:1c:98:0c:d5:d2:b7:66:41:a6:39:5c:98:cc:fc:12:c5:18: 8f:54:a8:d8:3b:0d:28:e6:b8:18:4b:32:c3:88:12:e8:a1:7b: 97:ed:cf:be:ba:07:cc:49:5a:29:2b:f8:7d:17:50:2d:e0:ae: 3b:7e:8c:53:46:66:2e:6e:53:f5:ef:ba:46:21:15:f4:4c:7d: ed:02:d5:9f:44:86:53:38:1d:15:09:21:66:66:5c:17:af:59: a0:93:59:11:c6:15:38:76:63:f0:d5:99:21:58:59:b1:54:25: d2:85:57:0f:e2:ed:06:49:ca:46:40:62:ac:03:c4:74:cc:8a: dd:cb:ca:b4:3f:60:6a:25:fd:f3:f5:fe:4d:d2:3c:fa:4e:f5: 83:5e:a3:ce -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUK67T6uxViW7GstEzGc5P3O380BowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTAyMzcwM1oX DTI0MDcyOTAyNDIwM1owMzExMC8GA1UEAxMoNkE3NUY5NUVBMTFDM0Y5ODRDNUM2 MTBGRTkyMjIwMjYzOTRCQThFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANRfCjVdaPlO9Sp1/P4n/ktvTpEAekje2Ovk1crbrjcwfeBN03O5tQ1Cn/TO AFowr6KQtFXzj5CR2V6I8oUrhNl20mbqmPzQQm92XSJU5FSmqoy0eazyw/6WutbY 8fACiodLT4wra8yxXS1pVTwjW0vVUWAOev9Pt99mauzyQT+2x6JzuEg1jiHPQVT1 Aup4ynxvJL0nTSpkuEFIwZx++mV4eoA1pIwFk/gDwTfQgwXPXI3Ys8bFf6ZTmjRt OHAxu0BNo9MHWy5E5VFPihfPBsxwKS5iJ26Qwm4VEOAbUNJiD8qIpBAAcipwmLWK klT4jvUyEhM+nxQX2PgYO9zQyj8CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGp1+V6hHD+YTFxhD+kiICY5S6jpMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hYTQzMzkzNC0zODQ0LTQ2NTMtOGZhYy0xODU4YjI4MjNkMWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FhNDMzOTM0 LTM4NDQtNDY1My04ZmFjLTE4NThiMjgyM2QxYy8wLzZBNzVGOTVFQTExQzNGOTg0 QzVDNjEwRkU5MjIyMDI2Mzk0QkE4RTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnl14wDwQCAAIwCQMHACABDfO4gDANBgkqhkiG9w0BAQsFAAOCAQEAFop8PVkP hLa3OYMWso3ehhz8bCO0AP/LtmBLLoW/Xhj/fwbcTbqBdFE9SuGJIhoJaMFE25ut Vks7HAivDVePhHABmDSSMCvFaEv9oDsQaAk2IKkXEPgjOzhlm3RjJR5ImAMWnf/u q97zOfN08ByYDNXSt2ZBpjlcmMz8EsUYj1So2DsNKOa4GEsyw4gS6KF7l+3PvroH zElaKSv4fRdQLeCuO36MU0ZmLm5T9e+6RiEV9Ex97QLVn0SGUzgdFQkhZmZcF69Z oJNZEcYVOHZj8NWZIVhZsVQl0oVXD+LtBknKRkBirAPEdMyK3cvKtD9gaiX98/X+ TdI8+k71g16jzg== -----END CERTIFICATE-----Generated at Wed May 8 10:06:49 2024 by rpki-client on console-ams.rpki-client.org