$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer File: 6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer (raw, json) Hash identifier: t5SMwQM0gd31iZfsHC5zj3I32pGVR3jWXcQwiVbFx4o= Subject key identifier: 6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 28416AE9F1B2443036384D075EDD7480231C4110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft caRepository: rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 14 Sep 2023 11:01:12 +0000 Certificate not after: Thu 12 Sep 2024 11:06:12 +0000 Subordinate resources: IP: 103.175.158.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:41:6a:e9:f1:b2:44:30:36:38:4d:07:5e:dd:74:80:23:1c:41:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 14 11:01:12 2023 GMT Not After : Sep 12 11:06:12 2024 GMT Subject: CN=6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b6:2b:c9:b1:49:3f:9a:a0:54:bf:de:0f:a3: 7d:96:0f:00:5b:8d:6d:87:bb:8d:ca:55:9f:25:32: db:6d:f9:0c:5a:46:82:f7:76:5a:6e:8e:e7:77:fc: 6d:91:20:d7:0f:53:09:79:95:68:50:5c:44:b6:a2: 5c:95:78:3f:f1:ae:14:bb:da:17:a4:af:d9:de:f1: 0b:23:0d:0c:b3:26:2f:6e:17:7f:f7:9f:3b:f2:fe: f4:9d:5f:ca:17:14:b8:18:00:60:a3:ba:c3:74:a6: 59:50:2c:df:de:59:e0:5c:9e:b9:53:4c:6f:66:97: 30:74:b9:4c:94:25:11:cc:46:9c:73:50:d6:33:99: 26:02:34:5a:23:b3:91:30:bd:fe:00:2f:fa:dd:81: 37:43:1c:7d:c5:36:9c:1c:9a:79:ba:f6:24:d4:51: 91:43:8c:d6:56:3e:23:6e:6b:aa:f1:15:53:73:d2: 58:ad:53:2b:01:a6:43:46:45:d0:34:79:b7:f0:5f: aa:32:3a:59:80:f4:66:71:b9:89:96:d1:27:68:63: 8e:33:c2:90:7d:90:7c:31:f0:10:0b:22:a2:ed:0e: 5a:aa:bc:a7:f8:fe:f7:34:41:7f:61:3b:a2:54:08: fd:57:d8:28:8c:cb:a8:65:41:b8:59:80:dc:5b:70: 79:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.158.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:be:ff:e1:8a:69:88:5d:5b:c5:34:1c:26:19:e8:2d:b9:49: 22:9d:2c:7c:ea:c9:13:df:4c:21:cc:54:0c:0e:05:5d:20:32: 38:0d:16:2d:87:3a:b1:11:5b:10:ff:9d:96:91:9f:fb:22:c8: 24:3e:bb:b6:ed:8f:6d:49:d9:ec:99:a9:47:f1:4a:9b:92:22: 64:c9:30:5c:84:59:7c:e1:aa:41:a5:de:97:b8:f0:0b:a1:ca: 2d:4f:68:8a:1f:44:df:39:cd:ac:95:f2:66:ba:a1:8b:98:19: f3:d9:dc:72:fe:a8:71:25:97:ed:fe:df:92:60:01:2c:f1:1d: e4:11:ce:27:b1:50:7b:db:f0:91:98:5f:e2:1c:3f:4f:8e:e1: e9:be:31:09:e4:f1:bb:38:65:16:4c:0c:a8:24:b7:51:40:ef: 41:8c:20:df:fe:8c:a1:78:0e:8d:81:ce:69:bb:ab:1a:ee:56: 02:62:f1:93:3e:c6:ca:84:55:65:ee:90:9c:39:5a:e5:63:27: 41:b5:07:92:81:12:21:2d:2a:f8:1b:c6:25:4e:21:b4:1e:d3: 58:5c:24:c1:c7:7a:32:de:a5:ec:66:81:50:6c:b5:5f:bd:88: ff:f3:c4:d7:27:48:e3:27:bd:c2:85:ae:66:d1:8b:9b:66:b7: 58:65:41:a2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKEFq6fGyRDA2OE0HXt10gCMcQRAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkxNDExMDExMloX DTI0MDkxMjExMDYxMlowMzExMC8GA1UEAxMoNkNGQUJCQkM4OEQzOUM3Rjc4MDk1 REE3RDNEMzVERDNBQTJFOTU2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKu2K8mxST+aoFS/3g+jfZYPAFuNbYe7jcpVnyUy2235DFpGgvd2Wm6O53f8 bZEg1w9TCXmVaFBcRLaiXJV4P/GuFLvaF6Sv2d7xCyMNDLMmL24Xf/efO/L+9J1f yhcUuBgAYKO6w3SmWVAs395Z4FyeuVNMb2aXMHS5TJQlEcxGnHNQ1jOZJgI0WiOz kTC9/gAv+t2BN0McfcU2nByaebr2JNRRkUOM1lY+I25rqvEVU3PSWK1TKwGmQ0ZF 0DR5t/BfqjI6WYD0ZnG5iZbRJ2hjjjPCkH2QfDHwEAsiou0OWqq8p/j+9zRBf2E7 olQI/VfYKIzLqGVBuFmA3FtweZcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGz6u7yI05x/eAldp9PTXdOqLpVnMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83Mzg3NGNmMy1hZGIxLTQ5NDctYTdlNC1hMmQzMmM1NGVkMWYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczODc0Y2Yz LWFkYjEtNDk0Ny1hN2U0LWEyZDMyYzU0ZWQxZi8wLzZDRkFCQkJDODhEMzlDN0Y3 ODA5NURBN0QzRDM1REQzQUEyRTk1NjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnr54wDQYJKoZIhvcNAQELBQADggEBAC6+/+GKaYhdW8U0HCYZ6C25SSKdLHzq yRPfTCHMVAwOBV0gMjgNFi2HOrERWxD/nZaRn/siyCQ+u7btj21J2eyZqUfxSpuS ImTJMFyEWXzhqkGl3pe48Auhyi1PaIofRN85zayV8ma6oYuYGfPZ3HL+qHEll+3+ 35JgASzxHeQRziexUHvb8JGYX+IcP0+O4em+MQnk8bs4ZRZMDKgkt1FA70GMIN/+ jKF4Do2Bzmm7qxruVgJi8ZM+xsqEVWXukJw5WuVjJ0G1B5KBEiEtKvgbxiVOIbQe 01hcJMHHejLepexmgVBstV+9iP/zxNcnSOMnvcKFrmbRi5tmt1hlQaI= -----END CERTIFICATE-----Generated at Wed May 8 14:59:52 2024 by rpki-client on console-ams.rpki-client.org