$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer File: 6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer (raw, json) Hash identifier: Jjg0hiXBoGpTWXA7Kp/asEJHNTp+STD2LbjQrk40R+8= Subject key identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 23038A0B66726474701405FBA0B311DE24DD0B05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft caRepository: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 06 Mar 2024 07:10:10 +0000 Certificate not after: Wed 05 Mar 2025 07:15:10 +0000 Subordinate resources: IP: 103.223.0.0/22 IP: 2001:df2:8a00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:03:8a:0b:66:72:64:74:70:14:05:fb:a0:b3:11:de:24:dd:0b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 6 07:10:10 2024 GMT Not After : Mar 5 07:15:10 2025 GMT Subject: CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fc:0f:b1:11:71:9a:f9:cd:4f:b3:28:93:f2: cc:29:13:60:6b:7e:ce:9a:6a:3f:65:c1:be:fb:a2: 29:a7:0f:a5:ad:86:65:43:5a:56:ef:4a:9b:1f:e6: b1:25:2a:bb:ae:30:d7:24:1f:bc:1d:93:9c:3b:7e: f5:9a:24:21:f6:ba:0d:ad:ad:24:96:50:f3:7e:49: ad:1b:84:9a:aa:46:83:b6:37:10:59:9c:f2:c3:bc: 79:31:63:16:99:88:fb:57:bb:be:36:e0:cb:66:cb: e5:1f:c7:4f:c4:7a:07:96:03:3c:98:ac:46:50:db: 7a:23:21:6c:d6:d0:e8:67:df:a5:cf:09:43:4f:d8: da:42:62:92:2a:ba:a3:0b:5c:0a:a5:91:c3:7b:83: b8:e7:dd:10:2b:45:29:cf:f9:e6:78:95:49:62:c7: 64:15:5e:1f:4d:98:e1:78:25:9a:f4:22:83:2c:98: d4:17:21:38:34:e5:ab:82:fd:85:ba:62:f6:96:c1: 2b:8e:b2:1e:a4:58:82:22:18:10:40:a9:e9:d7:59: ac:d9:d0:99:72:c7:63:b9:9a:62:10:ba:89:ea:86: c6:d5:f0:17:ad:65:7b:9c:94:9f:a2:5d:f5:38:bd: 08:0e:4c:62:f4:8b:ce:e7:d7:39:3b:1b:4e:bc:b0: 3a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.223.0.0/22 IPv6: 2001:df2:8a00::/48 Signature Algorithm: sha256WithRSAEncryption 1c:0a:29:71:66:c2:57:8d:78:9d:fe:35:12:e9:d6:2a:ed:af: cb:74:ad:eb:4c:0b:41:7c:1d:e9:96:7b:f8:d7:dd:57:82:8e: 7f:e6:9b:47:10:a9:81:e5:81:bd:50:61:62:6f:f2:7a:bc:f2: 83:4e:b8:e6:11:3f:39:44:aa:49:6f:75:66:ed:e4:58:9b:32: d8:af:cb:ac:48:f6:ef:f3:c0:58:90:05:8e:a6:db:1f:1b:fe: 87:dc:15:dd:1e:0e:3c:80:cc:39:22:3b:35:79:0f:60:50:04: 64:0c:d4:70:88:89:d5:22:8f:29:08:22:b5:ac:30:cf:49:fc: 7e:b9:35:97:b8:61:b1:60:6c:9a:c8:31:32:7e:e2:c4:39:99: ab:29:4b:d9:11:75:4b:27:ba:f2:f2:82:16:9b:f8:03:76:6e: 4e:61:9b:ef:3d:6d:09:75:10:be:39:dd:21:24:17:8d:7c:26: b1:63:9e:24:a4:49:82:cb:b2:bd:11:3a:f0:3d:0d:b1:79:19: 24:68:73:b1:37:11:45:7c:04:11:41:18:61:52:01:d4:e0:00: 18:b6:94:ed:8e:cc:61:04:64:bb:71:09:70:af:b0:2c:b1:7c: 97:4e:e1:2f:3a:1b:c0:f4:cd:ff:4f:08:9f:1c:c6:52:4e:6a: e7:dc:25:2f -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUIwOKC2ZyZHRwFAX7oLMR3iTdCwUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMwNjA3MTAxMFoX DTI1MDMwNTA3MTUxMFowMzExMC8GA1UEAxMoNkI0RDE0RkM2RDM3NEFGQ0NBQjE5 MEM1NERERjNBMUE5RDREOTMwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM38D7ERcZr5zU+zKJPyzCkTYGt+zppqP2XBvvuiKacPpa2GZUNaVu9Kmx/m sSUqu64w1yQfvB2TnDt+9ZokIfa6Da2tJJZQ835JrRuEmqpGg7Y3EFmc8sO8eTFj FpmI+1e7vjbgy2bL5R/HT8R6B5YDPJisRlDbeiMhbNbQ6Gffpc8JQ0/Y2kJikiq6 owtcCqWRw3uDuOfdECtFKc/55niVSWLHZBVeH02Y4XglmvQigyyY1BchODTlq4L9 hbpi9pbBK46yHqRYgiIYEECp6ddZrNnQmXLHY7maYhC6ieqGxtXwF61le5yUn6Jd 9Ti9CA5MYvSLzufXOTsbTrywOusCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGtNFPxtN0r8yrGQxU3fOhqdTZMLMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNzU0NWI4NS05Mjc0LTQ3MGEtYWQyNy0yNDY5ZTlkMTU1YmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I3NTQ1Yjg1 LTkyNzQtNDcwYS1hZDI3LTI0NjllOWQxNTViYy8wLzZCNEQxNEZDNkQzNzRBRkND QUIxOTBDNTREREYzQTFBOUQ0RDkzMEIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJn3wAwDwQCAAIwCQMHACABDfKKADANBgkqhkiG9w0BAQsFAAOCAQEAHAopcWbC V414nf41EunWKu2vy3St60wLQXwd6ZZ7+NfdV4KOf+abRxCpgeWBvVBhYm/yerzy g0645hE/OUSqSW91Zu3kWJsy2K/LrEj27/PAWJAFjqbbHxv+h9wV3R4OPIDMOSI7 NXkPYFAEZAzUcIiJ1SKPKQgitawwz0n8frk1l7hhsWBsmsgxMn7ixDmZqylL2RF1 Sye68vKCFpv4A3ZuTmGb7z1tCXUQvjndISQXjXwmsWOeJKRJgsuyvRE68D0NsXkZ JGhzsTcRRXwEEUEYYVIB1OAAGLaU7Y7MYQRku3EJcK+wLLF8l07hLzobwPTN/08I nxzGUk5q59wlLw== -----END CERTIFICATE-----Generated at Wed May 8 09:50:31 2024 by rpki-client on console-fra.rpki-client.org