$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer File: 6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer (raw, json) Hash identifier: Uoi9WIfyERlMZXTUnaBZh32KhNB/Pp1n/GUE9qYXjnY= Subject key identifier: 6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 12283F91CD26C06E87A0161914BE9C232FB24490 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft caRepository: rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 18:33:00 +0000 Certificate not after: Mon 30 Jun 2025 18:38:00 +0000 Subordinate resources: IP: 103.105.252.0/22 IP: 2402:35c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:28:3f:91:cd:26:c0:6e:87:a0:16:19:14:be:9c:23:2f:b2:44:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 18:33:00 2024 GMT Not After : Jun 30 18:38:00 2025 GMT Subject: CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a6:c6:88:e3:83:d1:ec:31:cc:88:18:1a:67: 7f:91:c1:30:c4:ca:50:bd:38:3d:1f:32:d1:c9:0c: 09:10:0a:13:2b:8a:02:e5:c2:99:ef:61:4e:0b:a1: 4e:c3:0a:f0:20:0c:f7:6a:9f:57:8c:66:60:bf:4e: e9:d4:1a:71:de:b5:ac:5c:48:13:07:b8:94:bf:fc: 16:e7:1c:f8:86:82:60:01:bd:80:68:09:1d:37:54: 80:f8:49:6f:40:78:d8:30:92:74:99:41:61:6e:60: d7:20:90:9b:9e:0e:89:51:35:a3:d1:45:97:d5:c9: 2c:23:dd:36:fa:03:9f:8b:ad:dc:90:b3:01:0a:09: af:93:98:1f:23:5c:07:d7:7c:95:70:d9:06:5f:1d: c9:5d:3a:18:d4:c6:12:2d:e0:ec:82:e7:98:07:e0: ad:b5:f2:18:1b:3a:14:d6:fd:5d:fd:61:b8:53:87: 4f:b1:b0:c3:a9:f4:0d:a8:fc:85:1e:2f:3b:93:5d: 53:22:ed:87:ce:ab:8c:1c:f3:1b:a2:a8:02:3f:a7: c8:4c:f1:90:86:7e:40:78:3d:d9:24:f8:93:a4:48: 6b:a9:88:eb:2c:88:83:a6:9c:8d:0b:0f:f3:95:53: 18:7d:29:a8:6b:f9:03:ac:91:cd:dc:18:37:c8:a4: ba:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.252.0/22 IPv6: 2402:35c0::/32 Signature Algorithm: sha256WithRSAEncryption 01:b2:c8:c7:31:f1:60:5f:f0:54:ba:c5:53:a7:f1:21:4b:a3: 4f:3f:56:0e:3f:06:e8:a9:30:f4:aa:d6:5c:20:16:a3:da:d8: 68:ab:da:d0:04:9b:d9:b9:44:02:97:85:bb:8a:bd:ec:f4:1d: e5:d5:ba:fa:62:d7:49:03:db:81:ae:49:ee:bc:50:2d:64:a1: 5d:29:48:b2:ba:99:1a:2e:67:ec:ba:30:fd:63:d2:68:c4:21: f0:14:50:60:ec:95:98:79:34:f7:c9:fc:ed:5e:60:a6:44:d5: a9:dc:63:d1:a3:1f:10:2e:ed:99:44:30:6e:f1:1c:46:79:6e: ff:4e:7e:39:39:61:cb:55:c7:9e:c4:d7:4a:e0:02:a3:37:b5: f6:5d:b6:48:56:a8:7b:46:6b:8a:23:b8:8b:5c:5c:b4:da:22: 0a:43:dd:ec:f1:39:59:2f:65:00:8d:62:6a:3b:d1:fc:62:ff: 11:45:ce:d3:21:9d:cd:d0:67:29:33:bc:3c:a7:27:52:b2:23: ec:64:20:03:0f:3d:ff:57:c8:ea:12:4c:90:37:69:67:fb:ee: c6:31:e5:df:7c:44:f6:4d:0b:81:29:90:3d:62:cb:af:da:3b: 98:eb:a1:24:9d:4d:f8:86:66:d5:34:f0:dd:80:5b:92:04:68: 2b:ce:43:53 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUEig/kc0mwG6HoBYZFL6cIy+yRJAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE4MzMwMFoX DTI1MDYzMDE4MzgwMFowMzExMC8GA1UEAxMoNkE5REM1NjZDOENCRjFEN0NFQjE3 RkM5OTE3QUNENTgyRTVDMEE5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMqmxojjg9HsMcyIGBpnf5HBMMTKUL04PR8y0ckMCRAKEyuKAuXCme9hTguh TsMK8CAM92qfV4xmYL9O6dQacd61rFxIEwe4lL/8Fucc+IaCYAG9gGgJHTdUgPhJ b0B42DCSdJlBYW5g1yCQm54OiVE1o9FFl9XJLCPdNvoDn4ut3JCzAQoJr5OYHyNc B9d8lXDZBl8dyV06GNTGEi3g7ILnmAfgrbXyGBs6FNb9Xf1huFOHT7Gww6n0Daj8 hR4vO5NdUyLth86rjBzzG6KoAj+nyEzxkIZ+QHg92ST4k6RIa6mI6yyIg6acjQsP 85VTGH0pqGv5A6yRzdwYN8ikuvkCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGqdxWbIy/HXzrF/yZF6zVguXAqVMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zMTZhYTU0Zi03MTU4LTQzYWYtYjMzNi1iZTQ3MTQ4MTZmYWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxNmFhNTRm LTcxNTgtNDNhZi1iMzM2LWJlNDcxNDgxNmZhZC8wLzZBOURDNTY2QzhDQkYxRDdD RUIxN0ZDOTkxN0FDRDU4MkU1QzBBOTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnafwwDQQCAAIwBwMFACQCNcAwDQYJKoZIhvcNAQELBQADggEBAAGyyMcx8WBf 8FS6xVOn8SFLo08/Vg4/BuipMPSq1lwgFqPa2Gir2tAEm9m5RAKXhbuKvez0HeXV uvpi10kD24GuSe68UC1koV0pSLK6mRouZ+y6MP1j0mjEIfAUUGDslZh5NPfJ/O1e YKZE1ancY9GjHxAu7ZlEMG7xHEZ5bv9Ofjk5YctVx57E10rgAqM3tfZdtkhWqHtG a4ojuItcXLTaIgpD3ezxOVkvZQCNYmo70fxi/xFFztMhnc3QZykzvDynJ1KyI+xk IAMPPf9XyOoSTJA3aWf77sYx5d98RPZNC4EpkD1iy6/aO5jroSSdTfiGZtU08N2A W5IEaCvOQ1M= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:42 2024 by rpki-client on console-ams.rpki-client.org