$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer File: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer (raw, json) Hash identifier: rrn6QnlU5eTV5G2fcU31lxV4vaQ5RjzbREjZJvtMjRs= Subject key identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2BC9E3227136B0F48EDABC849192A76BC6EE5B5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft caRepository: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 27 Nov 2024 04:07:24 +0000 Certificate not after: Wed 26 Nov 2025 04:12:24 +0000 Subordinate resources: IP: 103.162.218.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c9:e3:22:71:36:b0:f4:8e:da:bc:84:91:92:a7:6b:c6:ee:5b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Nov 27 04:07:24 2024 GMT Not After : Nov 26 04:12:24 2025 GMT Subject: CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:aa:c7:46:9e:1f:c4:a1:7a:dc:c8:18:af:aa: 5e:11:fb:d2:7a:db:dd:77:67:2d:b0:92:24:bd:79: f5:95:56:bf:0a:39:43:7b:58:6e:4f:e7:b6:4c:ef: 3d:68:ca:4e:26:78:fa:2f:c1:91:95:92:bd:65:01: a9:92:f6:0c:c5:52:dc:4a:5c:9e:6d:a2:d1:e0:a1: a7:ae:38:e1:d6:86:e4:a1:36:aa:03:4e:6a:7e:bc: db:85:13:87:44:ad:bc:e0:6e:75:85:b2:4b:81:95: 89:e9:73:5c:80:d4:34:63:a7:70:e3:fe:40:b0:bc: 2b:87:fe:cf:4a:48:f9:45:5e:52:c9:af:d4:b3:37: 7b:e9:e3:d6:be:49:c0:f2:b6:d0:40:29:34:31:6f: e7:db:9d:30:5a:76:20:43:94:b8:9f:b3:c8:16:0b: d9:e6:c0:f0:2e:fa:12:4f:64:b1:03:17:c1:c5:bc: bd:c2:e1:43:ac:0e:50:6b:23:ba:23:2f:87:3a:cd: 8b:d1:b0:46:2e:dd:13:d2:4f:8a:a0:45:90:cc:2a: 16:9b:cc:82:b9:e1:c9:97:8c:32:b1:e5:90:e1:f2: 71:bd:bc:02:d6:2a:29:13:18:87:00:3e:1e:e5:94: aa:4d:c3:0e:2f:41:03:a6:06:08:49:7c:10:4d:4d: 8e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.218.0/23 Signature Algorithm: sha256WithRSAEncryption 77:06:8a:8e:41:3c:1c:58:89:11:f8:2e:1e:c7:a2:7d:cb:dd: f1:1e:c7:2f:fc:70:77:fb:09:da:0f:2e:c6:13:49:b9:60:df: 0c:f2:62:95:db:39:e8:48:cc:e7:74:b4:c0:a2:96:0a:53:3a: fc:b0:06:8f:52:11:34:1b:17:4e:ae:23:e3:fb:19:c3:f6:4e: f2:4b:85:d4:6c:eb:98:67:6d:21:6f:e8:6f:7a:1a:a5:d4:2f: 83:f4:42:a6:70:00:74:c9:cc:b2:aa:cf:65:12:b5:5a:c6:53: 3d:4d:d9:d6:e9:d2:65:13:bd:b2:da:9e:ed:90:d4:9f:54:55: c7:ca:b3:63:41:f3:b5:8b:86:f6:ba:36:ec:48:9c:62:21:2c: 37:fc:00:da:c1:0c:be:ca:2f:34:9b:d6:14:9f:17:79:19:e4: 43:d4:7c:8e:3f:1a:67:5d:9d:ce:a9:50:de:82:1a:95:79:4d: aa:08:9e:28:ac:f3:fa:49:c5:a8:91:93:6c:26:0b:50:4a:df: 06:4e:91:b5:69:c0:a1:6c:ee:be:18:49:5f:19:b2:da:24:cc: 23:5d:0c:51:ff:bc:22:ac:1c:dc:5d:5a:b5:51:1b:bc:b0:0e: 0a:cd:8e:b5:e3:ae:6b:a6:f1:18:ec:8f:9f:22:47:f7:bf:6e: 75:11:5a:d7 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUK8njInE2sPSO2ryEkZKna8buW1owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEyNzA0MDcyNFoX DTI1MTEyNjA0MTIyNFowMzExMC8GA1UEAxMoNkNERjVDRDFGRERGRjJDMDI0QzEz QTI5MjY0RDcwRkE1MUY5NTg3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALCqx0aeH8ShetzIGK+qXhH70nrb3XdnLbCSJL159ZVWvwo5Q3tYbk/ntkzv PWjKTiZ4+i/BkZWSvWUBqZL2DMVS3Epcnm2i0eChp6444daG5KE2qgNOan6824UT h0StvOBudYWyS4GVielzXIDUNGOncOP+QLC8K4f+z0pI+UVeUsmv1LM3e+nj1r5J wPK20EApNDFv59udMFp2IEOUuJ+zyBYL2ebA8C76Ek9ksQMXwcW8vcLhQ6wOUGsj uiMvhzrNi9GwRi7dE9JPiqBFkMwqFpvMgrnhyZeMMrHlkOHycb28AtYqKRMYhwA+ HuWUqk3DDi9BA6YGCEl8EE1NjrUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGzfXNH93/LAJME6KSZNcPpR+Vh6MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83ZDI2NjUxMS02MzllLTRjMmItOTYzNC05Y2MxZTIyZmE3MDgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdkMjY2NTEx LTYzOWUtNGMyYi05NjM0LTljYzFlMjJmYTcwOC8wLzZDREY1Q0QxRkRERkYyQzAy NEMxM0EyOTI2NEQ3MEZBNTFGOTU4N0EubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnotowDQYJKoZIhvcNAQELBQADggEBAHcGio5BPBxYiRH4Lh7Hon3L3fEexy/8 cHf7CdoPLsYTSblg3wzyYpXbOehIzOd0tMCilgpTOvywBo9SETQbF06uI+P7GcP2 TvJLhdRs65hnbSFv6G96GqXUL4P0QqZwAHTJzLKqz2UStVrGUz1N2dbp0mUTvbLa nu2Q1J9UVcfKs2NB87WLhva6NuxInGIhLDf8ANrBDL7KLzSb1hSfF3kZ5EPUfI4/ Gmddnc6pUN6CGpV5TaoIniis8/pJxaiRk2wmC1BK3wZOkbVpwKFs7r4YSV8Zstok zCNdDFH/vCKsHNxdWrVRG7ywDgrNjrXjrmum8Rjsj58iR/e/bnURWtc= -----END CERTIFICATE-----Generated at Sat Apr 5 08:44:50 2025 by rpki-client