$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer File: 6DA2B28F4391C01434B7229FD4D68E661BF13061.cer (raw, json) Hash identifier: caJmnSab5MzD+dL1nwqxQWiWvNkJKtMZQTYx60S/XMM= Subject key identifier: 6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 441E3A50DC03DE482FDC8F51B421B62198A8C5AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft caRepository: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 08 Dec 2023 17:46:37 +0000 Certificate not after: Fri 06 Dec 2024 17:51:37 +0000 Subordinate resources: IP: 49.236.216.0/21 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:1e:3a:50:dc:03:de:48:2f:dc:8f:51:b4:21:b6:21:98:a8:c5:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 8 17:46:37 2023 GMT Not After : Dec 6 17:51:37 2024 GMT Subject: CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:98:43:f2:7d:a1:c8:5a:79:43:fa:ef:42:15: 2a:1c:ab:83:cc:2e:8a:00:29:6b:b1:3a:76:40:5d: e2:a4:40:8e:27:80:68:fb:cf:71:c8:47:ac:7f:01: 50:d8:2b:0e:a9:e8:f4:2b:8f:6a:fe:91:ae:3c:bc: 1d:23:9e:e6:af:b7:8c:6f:88:78:c1:91:e3:a0:78: ec:c9:86:a2:0a:4c:ff:f4:89:38:8a:11:b6:21:54: 03:fd:d9:0f:0c:6b:50:85:b3:c0:c7:0b:aa:82:95: 95:3e:be:b0:aa:eb:63:88:ac:7f:07:ba:00:a4:99: 0a:2f:04:c4:1a:75:a9:52:24:be:8a:b6:8a:b3:00: 35:99:b6:77:26:09:f1:bc:df:88:9a:04:d0:ec:98: e5:e4:76:5a:8f:d1:24:48:2a:16:8b:b0:a9:a1:12: 14:e4:67:a6:f0:a6:4f:ea:56:b5:2e:bf:5e:51:bd: 3d:1f:e4:ec:af:97:e5:dd:d9:85:bd:dd:47:52:8b: d0:74:89:f9:cf:76:4a:e1:be:eb:32:45:88:a6:95: 88:11:30:4f:97:76:06:dc:e1:ca:76:dd:04:c7:d0: f0:b3:52:84:e9:09:8f:a0:7b:cb:af:cf:4f:e2:0f: 87:c0:a8:97:f5:f9:ef:12:dc:af:5c:4b:a4:29:e3: a3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.236.216.0/21 Signature Algorithm: sha256WithRSAEncryption 83:d6:cb:65:21:17:31:f7:31:d9:10:11:0e:3f:b5:9e:d4:6a: 70:e2:d8:60:2d:eb:ce:c6:f1:82:0f:f1:42:e9:aa:6b:15:fc: 2d:f6:4a:4f:11:3d:dd:b6:24:b8:37:62:22:1b:b9:91:0d:29: 02:02:7a:ad:ec:e5:4c:d5:57:19:41:fb:ff:81:8c:2b:32:ad: 56:4d:55:6e:20:78:b7:8a:0e:3a:e9:8c:da:30:51:98:26:da: 9f:68:83:ec:f7:93:66:44:6b:b7:a5:9f:74:ac:13:7e:ad:fb: 50:c6:4a:30:db:3c:bb:da:d6:c2:34:11:92:1e:d4:fb:01:1b: 9e:61:1c:63:f3:cb:64:4a:5c:bf:b8:1d:95:70:ec:1c:29:75: cd:0b:75:76:9a:e6:5e:2b:d4:57:29:1d:52:ea:89:2b:26:11: 7b:d1:4d:63:03:61:3b:b8:b0:82:b4:cc:e1:7a:10:08:34:bb: ba:70:4e:65:48:c1:ad:cc:45:2a:22:71:e1:d9:21:60:cd:33: eb:75:3f:4d:ed:8f:f2:91:60:39:ce:a1:7c:50:c7:90:55:e1: f2:c2:f6:53:84:07:7b:45:1a:0c:1d:fa:68:37:7c:af:bb:7b: ff:14:7c:b7:e6:1d:c0:d4:de:25:1b:de:a8:1a:54:47:f9:51: 01:34:1b:a8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURB46UNwD3kgv3I9RtCG2IZioxa0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIwODE3NDYzN1oX DTI0MTIwNjE3NTEzN1owMzExMC8GA1UEAxMoNkRBMkIyOEY0MzkxQzAxNDM0Qjcy MjlGRDRENjhFNjYxQkYxMzA2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOYQ/J9ochaeUP670IVKhyrg8wuigApa7E6dkBd4qRAjieAaPvPcchHrH8B UNgrDqno9CuPav6Rrjy8HSOe5q+3jG+IeMGR46B47MmGogpM//SJOIoRtiFUA/3Z DwxrUIWzwMcLqoKVlT6+sKrrY4isfwe6AKSZCi8ExBp1qVIkvoq2irMANZm2dyYJ 8bzfiJoE0OyY5eR2Wo/RJEgqFouwqaESFORnpvCmT+pWtS6/XlG9PR/k7K+X5d3Z hb3dR1KL0HSJ+c92SuG+6zJFiKaViBEwT5d2BtzhynbdBMfQ8LNShOkJj6B7y6/P T+IPh8Col/X57xLcr1xLpCnjo0sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG2iso9DkcAUNLcin9TWjmYb8TBhMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83ZDBmOTljMy1lNTY3LTQxYWUtYWEwMC0yNmNiOTc4MWZiZTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdkMGY5OWMz LWU1NjctNDFhZS1hYTAwLTI2Y2I5NzgxZmJlOS8wLzZEQTJCMjhGNDM5MUMwMTQz NEI3MjI5RkQ0RDY4RTY2MUJGMTMwNjEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAMx7NgwDQYJKoZIhvcNAQELBQADggEBAIPWy2UhFzH3MdkQEQ4/tZ7UanDi2GAt 687G8YIP8ULpqmsV/C32Sk8RPd22JLg3YiIbuZENKQICeq3s5UzVVxlB+/+BjCsy rVZNVW4geLeKDjrpjNowUZgm2p9og+z3k2ZEa7eln3SsE36t+1DGSjDbPLva1sI0 EZIe1PsBG55hHGPzy2RKXL+4HZVw7Bwpdc0LdXaa5l4r1FcpHVLqiSsmEXvRTWMD YTu4sIK0zOF6EAg0u7pwTmVIwa3MRSoiceHZIWDNM+t1P03tj/KRYDnOoXxQx5BV 4fLC9lOEB3tFGgwd+mg3fK+7e/8UfLfmHcDU3iUb3qgaVEf5UQE0G6g= -----END CERTIFICATE-----Generated at Wed May 8 22:46:39 2024 by rpki-client on console-ams.rpki-client.org