$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer File: 6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer (raw, json) Hash identifier: g7+3Lx3SdcBHqR1DKpp2VFNCKyApv2rggKeCaqy4DjU= Subject key identifier: 6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 168AB02E8033109F77BE10A88EDB14C87428061C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft caRepository: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 15 Jan 2024 05:20:16 +0000 Certificate not after: Mon 13 Jan 2025 05:25:16 +0000 Subordinate resources: IP: 203.175.126.0/23 IP: 2001:df3:5c40::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:8a:b0:2e:80:33:10:9f:77:be:10:a8:8e:db:14:c8:74:28:06:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 15 05:20:16 2024 GMT Not After : Jan 13 05:25:16 2025 GMT Subject: CN=6BFD656A9FA63FB89816B17CCED2832B43FE41CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d9:ad:a6:70:5d:e1:38:c8:41:ab:65:b0:84: 47:2b:88:c1:e1:00:b7:c9:f4:a5:3c:4d:94:98:e0: d2:f4:2d:d2:8d:d1:4c:4a:61:f8:56:8c:73:d0:96: 9b:94:86:7a:55:05:3f:3c:96:a3:89:84:f4:ef:d6: b8:18:7d:c6:45:86:08:e5:4a:83:0e:7e:85:fe:cb: 1b:41:62:c0:2c:21:41:c1:f8:ec:0e:ab:a1:26:e0: 46:f7:1e:f5:e4:36:23:e9:a2:19:3b:4b:1a:6d:e7: e4:74:50:0f:58:52:f5:9f:39:c4:83:98:65:2a:3a: d7:4b:e7:6d:3b:a5:a2:6d:60:e5:79:d9:55:a7:ce: 4f:31:da:e2:5a:33:42:c5:95:84:b3:3d:54:44:24: da:9c:6e:24:97:d2:0a:4a:bb:94:e1:b9:63:90:78: b8:9b:c5:9a:ff:e1:a9:00:f2:b1:37:9a:b1:26:a3: 27:22:c7:c6:04:d2:81:ef:ee:28:64:a7:e4:76:5c: 56:0f:a6:80:8a:20:83:c0:44:89:0f:2b:ad:35:d4: 8e:f0:42:7f:8b:ea:30:39:f2:41:9d:e8:ab:31:b0: 5f:66:5d:f0:4c:c3:f4:93:28:f9:20:1f:2a:7f:2c: f0:da:2d:30:85:bd:14:3a:61:d4:b7:96:07:96:d7: 84:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.175.126.0/23 IPv6: 2001:df3:5c40::/48 Signature Algorithm: sha256WithRSAEncryption 1f:c1:c6:12:44:d1:cb:0d:db:40:83:fb:8b:02:32:96:7b:9e: db:f9:0d:06:fd:ae:57:a4:12:71:dd:8f:82:c8:43:00:e0:4e: a5:a2:bd:65:68:b8:6f:6d:63:7c:11:e4:10:fa:32:da:ed:f7: d4:d9:6c:bc:87:01:99:78:ab:98:ed:c7:ce:41:91:6e:fc:e4: d5:a6:f4:65:4b:0d:03:2e:7a:30:34:94:82:4b:e4:62:2c:54: 72:36:7a:36:9d:76:af:81:0a:63:53:bd:b2:ca:d9:37:09:73: 99:ec:c6:a5:94:0a:4e:c1:da:2b:b9:9a:2d:55:4b:07:e5:c4: 9d:f3:f1:1a:9e:e6:1f:c6:f5:56:62:3a:1d:bb:42:1a:d5:30: f7:83:b1:7f:6d:c1:24:80:08:35:0d:04:f9:e3:82:2d:8e:d2: f1:ff:69:fb:6d:c8:84:9c:34:2f:a7:82:9d:9f:e4:54:3e:1a: 51:aa:2e:28:4c:a4:16:7d:ec:e4:7e:a2:fc:5d:55:be:b9:77: 55:fa:80:a8:10:79:18:52:2d:42:7a:26:7b:2b:05:a4:4f:6e: 1f:ab:66:4a:ae:cf:38:44:2d:ab:8c:e7:54:b2:c9:b9:01:28: c3:68:d8:45:c1:49:c1:a0:c2:3a:6d:a9:1b:d5:bb:82:d0:14: f9:8c:75:be -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUFoqwLoAzEJ93vhCojtsUyHQoBhwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDExNTA1MjAxNloX DTI1MDExMzA1MjUxNlowMzExMC8GA1UEAxMoNkJGRDY1NkE5RkE2M0ZCODk4MTZC MTdDQ0VEMjgzMkI0M0ZFNDFDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM3ZraZwXeE4yEGrZbCERyuIweEAt8n0pTxNlJjg0vQt0o3RTEph+FaMc9CW m5SGelUFPzyWo4mE9O/WuBh9xkWGCOVKgw5+hf7LG0FiwCwhQcH47A6roSbgRvce 9eQ2I+miGTtLGm3n5HRQD1hS9Z85xIOYZSo610vnbTulom1g5XnZVafOTzHa4loz QsWVhLM9VEQk2pxuJJfSCkq7lOG5Y5B4uJvFmv/hqQDysTeasSajJyLHxgTSge/u KGSn5HZcVg+mgIogg8BEiQ8rrTXUjvBCf4vqMDnyQZ3oqzGwX2Zd8EzD9JMo+SAf Kn8s8NotMIW9FDph1LeWB5bXhHsCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGv9ZWqfpj+4mBaxfM7SgytD/kHNMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZTBjYjYzMC02MzZhLTRiNmEtOTNkZi1iNWQ5MDhmZTZlZTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlMGNiNjMw LTYzNmEtNGI2YS05M2RmLWI1ZDkwOGZlNmVlNy8wLzZCRkQ2NTZBOUZBNjNGQjg5 ODE2QjE3Q0NFRDI4MzJCNDNGRTQxQ0QubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAHLr34wDwQCAAIwCQMHACABDfNcQDANBgkqhkiG9w0BAQsFAAOCAQEAH8HGEkTR yw3bQIP7iwIylnue2/kNBv2uV6QScd2PgshDAOBOpaK9ZWi4b21jfBHkEPoy2u33 1NlsvIcBmXirmO3HzkGRbvzk1ab0ZUsNAy56MDSUgkvkYixUcjZ6Np12r4EKY1O9 ssrZNwlzmezGpZQKTsHaK7maLVVLB+XEnfPxGp7mH8b1VmI6HbtCGtUw94Oxf23B JIAINQ0E+eOCLY7S8f9p+23IhJw0L6eCnZ/kVD4aUaouKEykFn3s5H6i/F1Vvrl3 VfqAqBB5GFItQnomeysFpE9uH6tmSq7POEQtq4znVLLJuQEow2jYRcFJwaDCOm2p G9W7gtAU+Yx1vg== -----END CERTIFICATE-----Generated at Wed May 8 04:37:51 2024 by rpki-client on console-fra.rpki-client.org