$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6C9FD300DFD761AFDA950CE979599BBE316BB13C.cer File: 6C9FD300DFD761AFDA950CE979599BBE316BB13C.cer (raw, json) Hash identifier: E4e/0ZLJ+pMy0w9nXlHWL+LB4+dVO/7fnjI2f79rtzI= Subject key identifier: 6C:9F:D3:00:DF:D7:61:AF:DA:95:0C:E9:79:59:9B:BE:31:6B:B1:3C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 53879FAFEBB163BEBF45648FC46C4301DFEBAC41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/6C9FD300DFD761AFDA950CE979599BBE316BB13C.mft caRepository: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 21 May 2025 20:49:23 +0000 Certificate not after: Wed 20 May 2026 20:54:23 +0000 Subordinate resources: IP: 103.228.18.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:87:9f:af:eb:b1:63:be:bf:45:64:8f:c4:6c:43:01:df:eb:ac:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 21 20:49:23 2025 GMT Not After : May 20 20:54:23 2026 GMT Subject: CN=6C9FD300DFD761AFDA950CE979599BBE316BB13C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:24:26:36:5d:6f:52:7c:8f:69:29:92:94:50: f3:81:60:af:44:c0:a2:95:f0:4a:87:8b:82:7a:ad: 65:4a:7f:23:99:b1:58:76:3e:d8:fc:a6:95:c2:29: 35:12:e9:51:c2:94:95:f1:aa:8e:38:d9:2b:b9:b7: e1:63:fe:b2:c0:ea:f7:18:aa:5e:d2:3f:6d:92:65: 05:0c:cb:4b:f2:81:88:1e:b1:88:bf:9c:e0:e7:08: 08:21:b8:b6:03:26:98:bd:1a:ce:90:aa:ed:dd:3c: 09:34:79:4c:90:69:bd:6b:b7:ca:ba:00:70:47:f4: 5d:dc:6a:10:3f:b2:08:a9:24:e6:42:6c:fd:5c:c3: 47:10:87:fd:6c:9e:d2:ca:a6:c7:c8:3b:7b:bf:0a: 5f:45:94:fa:2c:d6:49:c3:b6:d7:60:e5:85:7b:f4: 53:50:58:d0:e8:89:cd:3f:6b:ab:e8:bc:41:9e:0b: 92:52:55:4b:4d:57:55:02:4e:1e:04:51:5a:9e:e8: 33:b7:70:f0:29:30:d5:ed:a1:1d:87:1d:1c:4f:a8: 93:a7:bf:72:c4:b6:a0:77:bf:4f:10:d2:58:70:57: 88:90:3e:03:0e:14:7e:a2:11:ff:fa:46:b5:5f:aa: cd:9a:80:6c:97:99:d3:82:68:7e:d7:ef:57:d6:a7: 96:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6C:9F:D3:00:DF:D7:61:AF:DA:95:0C:E9:79:59:9B:BE:31:6B:B1:3C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/6C9FD300DFD761AFDA950CE979599BBE316BB13C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.228.18.0/24 Signature Algorithm: sha256WithRSAEncryption 04:6e:e9:ff:d3:6f:b1:20:ab:61:b7:d8:66:db:d7:e9:26:d2: 8e:7f:75:96:08:25:79:5e:31:f1:ba:a1:bf:6c:12:ae:c7:c2: 4e:c2:a5:26:1a:d7:83:14:cd:53:5f:87:26:a3:17:0f:be:47: 5e:36:b7:1b:96:67:bb:b5:7a:e7:7b:a8:ec:ff:1e:2b:fe:2f: 64:7a:8a:09:f5:b6:04:4c:79:3a:78:2e:d9:e4:4f:7e:2c:be: ee:40:8a:3b:a2:c6:cf:1b:65:a0:89:a6:ba:68:b2:61:17:8e: 8b:e6:87:96:c9:20:9e:c3:7f:bb:ba:6b:c8:00:2e:ec:cb:3b: 43:1f:25:76:71:ee:f6:de:5c:b3:34:5e:59:7e:c6:0e:d0:7c: 55:6e:d7:b9:4c:c8:93:40:d4:dd:c9:ef:3b:b8:eb:bd:6a:b0: 73:f1:77:f2:b1:44:9a:05:e0:66:c8:d8:fa:14:de:60:23:a3: 00:c8:12:67:ce:0c:4b:3c:71:94:e7:dd:f8:94:3d:d0:11:66: f1:79:1d:9f:fb:0a:ca:da:82:3c:96:32:5b:11:09:d6:0b:7d: 97:49:41:ca:cc:bb:43:00:54:85:88:96:3e:ce:d4:38:f2:96: b8:cb:de:52:d3:9e:fc:b5:0b:81:e9:b6:bf:10:e6:18:43:4a: de:57:4d:f7 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUU4efr+uxY76/RWSPxGxDAd/rrEEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUyMTIwNDkyM1oX DTI2MDUyMDIwNTQyM1owMzExMC8GA1UEAxMoNkM5RkQzMDBERkQ3NjFBRkRBOTUw Q0U5Nzk1OTlCQkUzMTZCQjEzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANQkJjZdb1J8j2kpkpRQ84Fgr0TAopXwSoeLgnqtZUp/I5mxWHY+2PymlcIp NRLpUcKUlfGqjjjZK7m34WP+ssDq9xiqXtI/bZJlBQzLS/KBiB6xiL+c4OcICCG4 tgMmmL0azpCq7d08CTR5TJBpvWu3yroAcEf0XdxqED+yCKkk5kJs/VzDRxCH/Wye 0sqmx8g7e78KX0WU+izWScO212DlhXv0U1BY0OiJzT9rq+i8QZ4LklJVS01XVQJO HgRRWp7oM7dw8Ckw1e2hHYcdHE+ok6e/csS2oHe/TxDSWHBXiJA+Aw4UfqIR//pG tV+qzZqAbJeZ04JoftfvV9anlo8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGyf0wDf12Gv2pUM6XlZm74xa7E8MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85MzI5NzkzZS04ZjE4LTQxMTYtOTI2OC1hMTMzZGFmMTFjZWYvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkzMjk3OTNl LThmMTgtNDExNi05MjY4LWExMzNkYWYxMWNlZi8xLzZDOUZEMzAwREZENzYxQUZE QTk1MENFOTc5NTk5QkJFMzE2QkIxM0MubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn5BIwDQYJKoZIhvcNAQELBQADggEBAARu6f/Tb7Egq2G32Gbb1+km0o5/dZYI JXleMfG6ob9sEq7Hwk7CpSYa14MUzVNfhyajFw++R142txuWZ7u1eud7qOz/Hiv+ L2R6ign1tgRMeTp4LtnkT34svu5Aijuixs8bZaCJprposmEXjovmh5bJIJ7Df7u6 a8gALuzLO0MfJXZx7vbeXLM0Xll+xg7QfFVu17lMyJNA1N3J7zu4671qsHPxd/Kx RJoF4GbI2PoU3mAjowDIEmfODEs8cZTn3fiUPdARZvF5HZ/7CsragjyWMlsRCdYL fZdJQcrMu0MAVIWIlj7O1DjylrjL3lLTnvy1C4Hptr8Q5hhDSt5XTfc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:27:22 2025 by rpki-client