$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer File: 6C11FF5474BE690E545132237E53030296585D32.cer (raw, json) Hash identifier: BRo1lF7UBFXZszCxXtFQT+R+SXkl6f1RVo0Yru/p8K0= Subject key identifier: 6C:11:FF:54:74:BE:69:0E:54:51:32:23:7E:53:03:02:96:58:5D:32 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 45CC861135E725DC38E68CB78E43A00DE334FFE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft caRepository: rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 18 Nov 2023 09:17:13 +0000 Certificate not after: Sat 16 Nov 2024 09:22:13 +0000 Subordinate resources: IP: 103.251.180.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:cc:86:11:35:e7:25:dc:38:e6:8c:b7:8e:43:a0:0d:e3:34:ff:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 18 09:17:13 2023 GMT Not After : Nov 16 09:22:13 2024 GMT Subject: CN=6C11FF5474BE690E545132237E53030296585D32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:c2:39:ff:02:92:c7:02:7d:f8:c4:23:a2: 52:6e:69:4d:0c:0c:ed:99:42:19:34:0e:0d:d1:26: 4d:cd:c1:84:55:c8:06:8b:11:94:8b:ba:7d:b7:4f: af:3d:84:d6:6c:69:02:ad:2f:ff:7e:3a:0e:2b:52: 27:cc:de:2d:40:42:f4:95:70:c2:85:67:83:76:b1: 13:55:03:cd:73:84:d9:0d:70:df:73:f0:fc:ae:75: 06:0e:c9:cb:57:96:fc:42:b6:05:dd:54:ca:eb:3c: 53:72:91:75:61:08:6e:87:89:5f:10:14:9d:f1:40: 7a:92:55:13:34:e7:86:e0:c9:cd:c8:58:f3:c4:40: 99:6c:6d:32:4c:71:29:1c:eb:59:7c:6d:df:e8:e1: 97:b0:14:79:f3:99:7f:0c:ce:64:99:ba:9f:da:18: 20:4d:cc:a5:e1:fc:4b:51:21:6d:28:04:6d:e8:8c: 7b:51:87:6a:8a:b0:87:e9:2b:06:d8:15:e6:f4:20: 27:1f:19:4c:b0:e5:94:13:4f:01:bb:9c:5b:6b:1b: 40:b5:b2:e1:1a:88:b5:9e:81:96:93:23:f1:ea:45: 02:fd:eb:4f:39:6e:36:7e:b0:a4:ca:00:17:68:79: 8d:88:b5:02:90:20:8f:0c:e9:a6:8c:b6:26:08:1c: 8b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6C:11:FF:54:74:BE:69:0E:54:51:32:23:7E:53:03:02:96:58:5D:32 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.251.180.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:7c:bd:c8:80:5b:22:8a:82:b1:7d:de:9b:df:64:73:6e:6c: bf:f5:a5:b0:63:6e:c4:1e:ed:bf:de:a7:f6:3f:f7:79:76:0e: db:f2:c9:31:8d:a2:bb:9a:2e:e2:7f:ab:62:b2:ef:81:5f:a7: c1:8e:ac:fc:ec:37:ff:ec:19:b4:45:a9:2e:73:db:55:98:d2: f3:a1:a1:ef:35:1e:7b:8d:c0:33:c9:55:28:69:da:75:7d:b0: f2:88:dd:4f:ea:50:2d:c4:19:3c:5c:36:41:74:ce:6f:80:8d: af:3e:8c:98:3a:86:2a:12:e1:8b:5b:82:bd:f1:49:99:37:6c: 46:32:3b:16:97:f0:6f:b8:c7:4e:68:81:06:5b:bd:07:79:c7: 20:cf:f1:a4:96:c4:dc:73:d3:77:dd:1d:ed:32:b8:c6:8d:49: 64:42:4d:9a:33:6f:42:e0:83:2a:c3:2a:64:76:c2:c7:0f:ea: af:e5:64:01:ee:6d:0a:37:20:2b:94:eb:b2:32:4e:5c:97:ab: 41:c8:48:4f:0e:ca:e5:f3:23:21:2a:da:62:1b:fd:ad:3b:b1: c5:a0:c5:d6:f4:2d:3f:a2:67:43:3b:69:8f:fc:ae:fb:d5:1f: 0e:e6:23:01:6d:26:3a:d7:e3:d5:27:c3:c9:2c:59:88:7e:2a: 65:80:78:62 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURcyGETXnJdw45oy3jkOgDeM0/+UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTExODA5MTcxM1oX DTI0MTExNjA5MjIxM1owMzExMC8GA1UEAxMoNkMxMUZGNTQ3NEJFNjkwRTU0NTEz MjIzN0U1MzAzMDI5NjU4NUQzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJswjn/ApLHAn34xCOiUm5pTQwM7ZlCGTQODdEmTc3BhFXIBosRlIu6fbdP rz2E1mxpAq0v/346DitSJ8zeLUBC9JVwwoVng3axE1UDzXOE2Q1w33Pw/K51Bg7J y1eW/EK2Bd1Uyus8U3KRdWEIboeJXxAUnfFAepJVEzTnhuDJzchY88RAmWxtMkxx KRzrWXxt3+jhl7AUefOZfwzOZJm6n9oYIE3MpeH8S1EhbSgEbeiMe1GHaoqwh+kr BtgV5vQgJx8ZTLDllBNPAbucW2sbQLWy4RqItZ6BlpMj8epFAv3rTzluNn6wpMoA F2h5jYi1ApAgjwzppoy2Jggci2ECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGwR/1R0vmkOVFEyI35TAwKWWF0yMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yZTMzYTllZi01YjVmLTQ0MjktODM0Yi05NWIyYjczNjgwZTYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJlMzNhOWVm LTViNWYtNDQyOS04MzRiLTk1YjJiNzM2ODBlNi8wLzZDMTFGRjU0NzRCRTY5MEU1 NDUxMzIyMzdFNTMwMzAyOTY1ODVEMzIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn+7QwDQYJKoZIhvcNAQELBQADggEBAFx8vciAWyKKgrF93pvfZHNubL/1pbBj bsQe7b/ep/Y/93l2DtvyyTGNoruaLuJ/q2Ky74Ffp8GOrPzsN//sGbRFqS5z21WY 0vOhoe81HnuNwDPJVShp2nV9sPKI3U/qUC3EGTxcNkF0zm+Aja8+jJg6hioS4Ytb gr3xSZk3bEYyOxaX8G+4x05ogQZbvQd5xyDP8aSWxNxz03fdHe0yuMaNSWRCTZoz b0LggyrDKmR2wscP6q/lZAHubQo3ICuU67IyTlyXq0HISE8OyuXzIyEq2mIb/a07 scWgxdb0LT+iZ0M7aY/8rvvVHw7mIwFtJjrX49Unw8ksWYh+KmWAeGI= -----END CERTIFICATE-----Generated at Wed May 8 18:12:09 2024 by rpki-client on console-fra.rpki-client.org