$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer File: 6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer (raw, json) Hash identifier: 4mbsAkYyTBUufkhvOH9use4r431t9UlJD0MnvdSw4Mk= Subject key identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 71C15740A6176496C3BE9408B95F3B6DBF0DBFBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft caRepository: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 07:32:31 +0000 Certificate not after: Wed 04 Feb 2026 07:37:31 +0000 Subordinate resources: IP: 103.223.0.0/22 IP: 2001:df2:8a00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c1:57:40:a6:17:64:96:c3:be:94:08:b9:5f:3b:6d:bf:0d:bf:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 5 07:32:31 2025 GMT Not After : Feb 4 07:37:31 2026 GMT Subject: CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fc:0f:b1:11:71:9a:f9:cd:4f:b3:28:93:f2: cc:29:13:60:6b:7e:ce:9a:6a:3f:65:c1:be:fb:a2: 29:a7:0f:a5:ad:86:65:43:5a:56:ef:4a:9b:1f:e6: b1:25:2a:bb:ae:30:d7:24:1f:bc:1d:93:9c:3b:7e: f5:9a:24:21:f6:ba:0d:ad:ad:24:96:50:f3:7e:49: ad:1b:84:9a:aa:46:83:b6:37:10:59:9c:f2:c3:bc: 79:31:63:16:99:88:fb:57:bb:be:36:e0:cb:66:cb: e5:1f:c7:4f:c4:7a:07:96:03:3c:98:ac:46:50:db: 7a:23:21:6c:d6:d0:e8:67:df:a5:cf:09:43:4f:d8: da:42:62:92:2a:ba:a3:0b:5c:0a:a5:91:c3:7b:83: b8:e7:dd:10:2b:45:29:cf:f9:e6:78:95:49:62:c7: 64:15:5e:1f:4d:98:e1:78:25:9a:f4:22:83:2c:98: d4:17:21:38:34:e5:ab:82:fd:85:ba:62:f6:96:c1: 2b:8e:b2:1e:a4:58:82:22:18:10:40:a9:e9:d7:59: ac:d9:d0:99:72:c7:63:b9:9a:62:10:ba:89:ea:86: c6:d5:f0:17:ad:65:7b:9c:94:9f:a2:5d:f5:38:bd: 08:0e:4c:62:f4:8b:ce:e7:d7:39:3b:1b:4e:bc:b0: 3a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.223.0.0/22 IPv6: 2001:df2:8a00::/48 Signature Algorithm: sha256WithRSAEncryption 15:49:71:32:b3:64:70:3d:95:80:1a:03:d0:ad:36:f4:9e:35: 29:80:9b:49:cd:47:04:a1:b8:e8:d2:9f:98:7f:24:50:97:44: 6a:77:30:94:a2:95:6c:aa:14:ed:f5:96:26:ab:e8:6e:fb:88: 15:2a:23:96:5e:c0:44:05:d2:58:90:aa:8b:0d:9b:20:5c:db: bb:dc:1c:5a:39:72:74:14:11:23:cc:cf:3f:f4:e7:42:44:94: f5:82:8d:43:0c:e7:09:1d:7d:2e:ca:2b:78:2e:4e:f7:93:d6: c9:4d:d4:d1:ff:02:2d:3c:1d:88:67:e0:a7:d4:f8:1f:49:a2: 48:b9:86:3d:0b:06:cd:62:16:e1:d5:6f:fa:2e:2a:18:4e:2c: ce:8d:93:8e:68:57:4f:1b:15:ab:a3:6e:3b:76:e3:94:86:d2: f2:d5:63:1b:36:6b:75:bc:05:1a:01:24:6e:e5:e9:dc:90:6a: f1:d0:6d:2b:e0:b2:11:74:60:d6:bf:4c:da:be:3b:b4:8e:36: 4a:16:bd:25:ce:bc:19:1a:c9:c2:63:77:ba:11:62:f7:ca:29: 4e:c8:70:87:98:bf:3e:08:d9:8b:fc:27:13:57:3d:40:74:57: 7b:04:a7:3e:e9:08:de:1d:7f:36:c6:d4:d9:06:ba:73:d4:9f: 3d:32:3f:65 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUccFXQKYXZJbDvpQIuV87bb8Nv7swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIwNTA3MzIzMVoX DTI2MDIwNDA3MzczMVowMzExMC8GA1UEAxMoNkI0RDE0RkM2RDM3NEFGQ0NBQjE5 MEM1NERERjNBMUE5RDREOTMwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM38D7ERcZr5zU+zKJPyzCkTYGt+zppqP2XBvvuiKacPpa2GZUNaVu9Kmx/m sSUqu64w1yQfvB2TnDt+9ZokIfa6Da2tJJZQ835JrRuEmqpGg7Y3EFmc8sO8eTFj FpmI+1e7vjbgy2bL5R/HT8R6B5YDPJisRlDbeiMhbNbQ6Gffpc8JQ0/Y2kJikiq6 owtcCqWRw3uDuOfdECtFKc/55niVSWLHZBVeH02Y4XglmvQigyyY1BchODTlq4L9 hbpi9pbBK46yHqRYgiIYEECp6ddZrNnQmXLHY7maYhC6ieqGxtXwF61le5yUn6Jd 9Ti9CA5MYvSLzufXOTsbTrywOusCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGtNFPxtN0r8yrGQxU3fOhqdTZMLMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNzU0NWI4NS05Mjc0LTQ3MGEtYWQyNy0yNDY5ZTlkMTU1YmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I3NTQ1Yjg1 LTkyNzQtNDcwYS1hZDI3LTI0NjllOWQxNTViYy8wLzZCNEQxNEZDNkQzNzRBRkND QUIxOTBDNTREREYzQTFBOUQ0RDkzMEIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJn3wAwDwQCAAIwCQMHACABDfKKADANBgkqhkiG9w0BAQsFAAOCAQEAFUlxMrNk cD2VgBoD0K029J41KYCbSc1HBKG46NKfmH8kUJdEancwlKKVbKoU7fWWJqvobvuI FSojll7ARAXSWJCqiw2bIFzbu9wcWjlydBQRI8zPP/TnQkSU9YKNQwznCR19Lsor eC5O95PWyU3U0f8CLTwdiGfgp9T4H0miSLmGPQsGzWIW4dVv+i4qGE4szo2TjmhX TxsVq6NuO3bjlIbS8tVjGzZrdbwFGgEkbuXp3JBq8dBtK+CyEXRg1r9M2r47tI42 Sha9Jc68GRrJwmN3uhFi98opTshwh5i/PgjZi/wnE1c9QHRXewSnPukI3h1/NsbU 2Qa6c9SfPTI/ZQ== -----END CERTIFICATE-----Generated at Sun Feb 16 20:58:19 2025 by rpki-client