$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer File: 6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer (raw, json) Hash identifier: 8rcIixXiaaj+YLk8wBe0z6RfmN7VJlhmh+921TYVMbs= Subject key identifier: 6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4BB0320FAEAAE552E0ECF80E6BD6E4F1B1B51364 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft caRepository: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 16 Dec 2024 07:38:28 +0000 Certificate not after: Mon 15 Dec 2025 07:43:28 +0000 Subordinate resources: IP: 203.175.126.0/23 IP: 2001:df3:5c40::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b0:32:0f:ae:aa:e5:52:e0:ec:f8:0e:6b:d6:e4:f1:b1:b5:13:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 16 07:38:28 2024 GMT Not After : Dec 15 07:43:28 2025 GMT Subject: CN=6BFD656A9FA63FB89816B17CCED2832B43FE41CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d9:ad:a6:70:5d:e1:38:c8:41:ab:65:b0:84: 47:2b:88:c1:e1:00:b7:c9:f4:a5:3c:4d:94:98:e0: d2:f4:2d:d2:8d:d1:4c:4a:61:f8:56:8c:73:d0:96: 9b:94:86:7a:55:05:3f:3c:96:a3:89:84:f4:ef:d6: b8:18:7d:c6:45:86:08:e5:4a:83:0e:7e:85:fe:cb: 1b:41:62:c0:2c:21:41:c1:f8:ec:0e:ab:a1:26:e0: 46:f7:1e:f5:e4:36:23:e9:a2:19:3b:4b:1a:6d:e7: e4:74:50:0f:58:52:f5:9f:39:c4:83:98:65:2a:3a: d7:4b:e7:6d:3b:a5:a2:6d:60:e5:79:d9:55:a7:ce: 4f:31:da:e2:5a:33:42:c5:95:84:b3:3d:54:44:24: da:9c:6e:24:97:d2:0a:4a:bb:94:e1:b9:63:90:78: b8:9b:c5:9a:ff:e1:a9:00:f2:b1:37:9a:b1:26:a3: 27:22:c7:c6:04:d2:81:ef:ee:28:64:a7:e4:76:5c: 56:0f:a6:80:8a:20:83:c0:44:89:0f:2b:ad:35:d4: 8e:f0:42:7f:8b:ea:30:39:f2:41:9d:e8:ab:31:b0: 5f:66:5d:f0:4c:c3:f4:93:28:f9:20:1f:2a:7f:2c: f0:da:2d:30:85:bd:14:3a:61:d4:b7:96:07:96:d7: 84:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.175.126.0/23 IPv6: 2001:df3:5c40::/48 Signature Algorithm: sha256WithRSAEncryption 24:b6:39:ac:42:87:46:41:7b:e8:d4:22:68:82:92:1e:a0:04: bf:c0:9f:20:95:bd:b6:44:fa:15:5e:3d:1b:91:cf:28:53:02: 49:0c:96:57:a6:a3:0b:fc:79:e9:64:38:3b:35:25:4e:f7:9a: 27:30:95:5d:32:89:99:f1:16:33:82:01:60:69:b5:18:54:ac: 60:4e:e5:26:15:3a:ce:19:94:fc:9b:ff:7f:ec:ca:0c:a2:eb: ae:e7:c5:50:98:90:ec:e6:12:66:e6:c2:00:eb:77:26:77:b9: c5:21:64:97:a4:cc:78:79:d1:26:f0:0e:26:9c:18:1b:5d:32: 61:88:31:2a:f0:d2:32:99:17:18:8f:b6:0c:59:20:ea:07:d5: 0f:bd:9d:83:10:5a:29:99:44:2a:3c:2e:56:90:99:38:16:4b: 4e:9e:30:04:d6:8b:21:0c:5c:ac:8e:3c:5e:55:6f:51:08:cc: cb:c3:c0:bd:46:8a:5e:06:92:ea:da:11:1f:a0:97:aa:63:0f: 9a:7d:af:87:c7:20:e3:05:ce:f6:e8:bc:9a:e0:40:ea:eb:ae: ce:0f:4c:2b:90:d2:6a:4d:2d:a5:c7:43:16:88:16:c4:23:d9: 73:b9:2d:06:d4:7a:23:8a:e4:bd:e2:61:54:af:a8:19:b6:28: df:d6:c0:7f -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUS7AyD66q5VLg7PgOa9bk8bG1E2QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxNjA3MzgyOFoX DTI1MTIxNTA3NDMyOFowMzExMC8GA1UEAxMoNkJGRDY1NkE5RkE2M0ZCODk4MTZC MTdDQ0VEMjgzMkI0M0ZFNDFDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM3ZraZwXeE4yEGrZbCERyuIweEAt8n0pTxNlJjg0vQt0o3RTEph+FaMc9CW m5SGelUFPzyWo4mE9O/WuBh9xkWGCOVKgw5+hf7LG0FiwCwhQcH47A6roSbgRvce 9eQ2I+miGTtLGm3n5HRQD1hS9Z85xIOYZSo610vnbTulom1g5XnZVafOTzHa4loz QsWVhLM9VEQk2pxuJJfSCkq7lOG5Y5B4uJvFmv/hqQDysTeasSajJyLHxgTSge/u KGSn5HZcVg+mgIogg8BEiQ8rrTXUjvBCf4vqMDnyQZ3oqzGwX2Zd8EzD9JMo+SAf Kn8s8NotMIW9FDph1LeWB5bXhHsCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGv9ZWqfpj+4mBaxfM7SgytD/kHNMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZTBjYjYzMC02MzZhLTRiNmEtOTNkZi1iNWQ5MDhmZTZlZTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlMGNiNjMw LTYzNmEtNGI2YS05M2RmLWI1ZDkwOGZlNmVlNy8wLzZCRkQ2NTZBOUZBNjNGQjg5 ODE2QjE3Q0NFRDI4MzJCNDNGRTQxQ0QubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAHLr34wDwQCAAIwCQMHACABDfNcQDANBgkqhkiG9w0BAQsFAAOCAQEAJLY5rEKH RkF76NQiaIKSHqAEv8CfIJW9tkT6FV49G5HPKFMCSQyWV6ajC/x56WQ4OzUlTvea JzCVXTKJmfEWM4IBYGm1GFSsYE7lJhU6zhmU/Jv/f+zKDKLrrufFUJiQ7OYSZubC AOt3Jne5xSFkl6TMeHnRJvAOJpwYG10yYYgxKvDSMpkXGI+2DFkg6gfVD72dgxBa KZlEKjwuVpCZOBZLTp4wBNaLIQxcrI48XlVvUQjMy8PAvUaKXgaS6toRH6CXqmMP mn2vh8cg4wXO9ui8muBA6uuuzg9MK5DSak0tpcdDFogWxCPZc7ktBtR6I4rkveJh VK+oGbYo39bAfw== -----END CERTIFICATE-----Generated at Sat Apr 5 06:29:38 2025 by rpki-client