$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer File: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer (raw, json) Hash identifier: 0fkZrFc3v5AeXF1fUyNJgLZ/BUiFO15Q5o+jSY6L1sc= Subject key identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 05CAF97076FB358FC8977F9078343CB71AC90D7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft caRepository: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 26 Dec 2023 19:38:15 +0000 Certificate not after: Tue 24 Dec 2024 19:43:15 +0000 Subordinate resources: IP: 103.162.218.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ca:f9:70:76:fb:35:8f:c8:97:7f:90:78:34:3c:b7:1a:c9:0d:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 26 19:38:15 2023 GMT Not After : Dec 24 19:43:15 2024 GMT Subject: CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:aa:c7:46:9e:1f:c4:a1:7a:dc:c8:18:af:aa: 5e:11:fb:d2:7a:db:dd:77:67:2d:b0:92:24:bd:79: f5:95:56:bf:0a:39:43:7b:58:6e:4f:e7:b6:4c:ef: 3d:68:ca:4e:26:78:fa:2f:c1:91:95:92:bd:65:01: a9:92:f6:0c:c5:52:dc:4a:5c:9e:6d:a2:d1:e0:a1: a7:ae:38:e1:d6:86:e4:a1:36:aa:03:4e:6a:7e:bc: db:85:13:87:44:ad:bc:e0:6e:75:85:b2:4b:81:95: 89:e9:73:5c:80:d4:34:63:a7:70:e3:fe:40:b0:bc: 2b:87:fe:cf:4a:48:f9:45:5e:52:c9:af:d4:b3:37: 7b:e9:e3:d6:be:49:c0:f2:b6:d0:40:29:34:31:6f: e7:db:9d:30:5a:76:20:43:94:b8:9f:b3:c8:16:0b: d9:e6:c0:f0:2e:fa:12:4f:64:b1:03:17:c1:c5:bc: bd:c2:e1:43:ac:0e:50:6b:23:ba:23:2f:87:3a:cd: 8b:d1:b0:46:2e:dd:13:d2:4f:8a:a0:45:90:cc:2a: 16:9b:cc:82:b9:e1:c9:97:8c:32:b1:e5:90:e1:f2: 71:bd:bc:02:d6:2a:29:13:18:87:00:3e:1e:e5:94: aa:4d:c3:0e:2f:41:03:a6:06:08:49:7c:10:4d:4d: 8e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.218.0/23 Signature Algorithm: sha256WithRSAEncryption 20:ff:e9:21:d0:f3:e5:78:30:b5:b2:d8:4c:46:23:9d:0d:3e: 85:e4:75:89:fc:dd:db:7c:e5:39:bc:b8:6f:2d:05:80:59:af: 95:34:08:de:03:1e:63:db:d9:34:4b:9d:c9:15:de:6c:1e:e3: 13:af:2e:20:86:fe:4a:c0:08:e3:46:26:f7:db:e4:17:cc:45: 8f:31:58:8f:9b:44:2d:e1:3f:ac:30:30:28:7e:09:7f:b1:a1: a7:cb:5a:1d:a6:b4:aa:25:d2:5f:9a:52:2f:56:e6:22:cb:a9: 9b:4c:66:81:bb:b5:57:d7:57:31:3d:c9:e8:d3:39:03:9a:68: 32:50:29:95:0e:da:35:f2:cb:2f:b2:23:e8:16:e4:e9:64:70: 42:a9:a3:44:96:99:7c:a8:85:0f:03:81:c5:fa:f7:b0:2b:28: 55:80:a4:36:8a:52:5d:99:46:af:84:10:c5:18:08:64:d9:0b: 77:3c:6d:cf:b0:3a:46:7f:a9:a4:8f:bc:cb:41:d3:ba:b6:37: ee:ae:8c:78:06:21:1c:1d:55:54:48:be:4e:5e:07:f4:fe:83: c5:6c:a0:95:83:42:e5:f4:24:3d:5b:c1:44:15:6a:5b:d3:3a: ae:27:b7:3d:fa:5a:9c:ff:25:fd:33:17:76:7f:d7:66:30:06: aa:e1:63:fc -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUBcr5cHb7NY/Il3+QeDQ8txrJDXowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIyNjE5MzgxNVoX DTI0MTIyNDE5NDMxNVowMzExMC8GA1UEAxMoNkNERjVDRDFGRERGRjJDMDI0QzEz QTI5MjY0RDcwRkE1MUY5NTg3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALCqx0aeH8ShetzIGK+qXhH70nrb3XdnLbCSJL159ZVWvwo5Q3tYbk/ntkzv PWjKTiZ4+i/BkZWSvWUBqZL2DMVS3Epcnm2i0eChp6444daG5KE2qgNOan6824UT h0StvOBudYWyS4GVielzXIDUNGOncOP+QLC8K4f+z0pI+UVeUsmv1LM3e+nj1r5J wPK20EApNDFv59udMFp2IEOUuJ+zyBYL2ebA8C76Ek9ksQMXwcW8vcLhQ6wOUGsj uiMvhzrNi9GwRi7dE9JPiqBFkMwqFpvMgrnhyZeMMrHlkOHycb28AtYqKRMYhwA+ HuWUqk3DDi9BA6YGCEl8EE1NjrUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGzfXNH93/LAJME6KSZNcPpR+Vh6MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83ZDI2NjUxMS02MzllLTRjMmItOTYzNC05Y2MxZTIyZmE3MDgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdkMjY2NTEx LTYzOWUtNGMyYi05NjM0LTljYzFlMjJmYTcwOC8wLzZDREY1Q0QxRkRERkYyQzAy NEMxM0EyOTI2NEQ3MEZBNTFGOTU4N0EubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnotowDQYJKoZIhvcNAQELBQADggEBACD/6SHQ8+V4MLWy2ExGI50NPoXkdYn8 3dt85Tm8uG8tBYBZr5U0CN4DHmPb2TRLnckV3mwe4xOvLiCG/krACONGJvfb5BfM RY8xWI+bRC3hP6wwMCh+CX+xoafLWh2mtKol0l+aUi9W5iLLqZtMZoG7tVfXVzE9 yejTOQOaaDJQKZUO2jXyyy+yI+gW5OlkcEKpo0SWmXyohQ8DgcX697ArKFWApDaK Ul2ZRq+EEMUYCGTZC3c8bc+wOkZ/qaSPvMtB07q2N+6ujHgGIRwdVVRIvk5eB/T+ g8VsoJWDQuX0JD1bwUQValvTOq4ntz36Wpz/Jf0zF3Z/12YwBqrhY/w= -----END CERTIFICATE-----Generated at Wed May 8 21:02:16 2024 by rpki-client on console-fra.rpki-client.org