$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer File: 6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer (raw, json) Hash identifier: o5I1gmtHdajv6iK+w15RNcW9ueSNvONO55HpWxYL6A4= Subject key identifier: 6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5E01EE1AA575BCB9D1C3D6E47AB49A85B9C65778 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft caRepository: rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 11:06:57 +0000 Certificate not after: Mon 29 Jul 2024 11:11:57 +0000 Subordinate resources: IP: 103.152.118.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:01:ee:1a:a5:75:bc:b9:d1:c3:d6:e4:7a:b4:9a:85:b9:c6:57:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 11:06:57 2023 GMT Not After : Jul 29 11:11:57 2024 GMT Subject: CN=6DCC69508EF4E670EFBC5C69203D6B120FA9392F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e9:a7:5a:82:21:42:77:db:be:5e:0f:95:b3: 39:60:34:b1:ec:24:01:9b:de:26:6d:4b:3c:ca:24: 25:ef:da:b3:6d:6a:40:79:62:9b:e7:4e:30:70:37: 78:6e:3b:1f:d3:03:4a:8b:c0:4b:05:7e:c5:e1:5e: d2:93:de:76:a4:e3:57:87:c3:14:b7:93:82:20:76: f9:a9:77:b3:9a:8a:c4:c9:a9:26:7e:53:7c:2f:d5: 4d:27:58:7d:07:1e:00:3a:15:8b:05:a7:f0:95:f6: a4:af:1d:b2:64:bd:d5:71:14:60:00:f7:8d:ca:68: 85:f3:31:2c:79:a4:0f:0e:81:0c:46:04:66:01:72: 5e:cf:c2:9f:8c:e4:a9:59:b3:aa:29:90:ab:0d:e8: 4e:f7:26:88:c4:9e:83:7b:7d:6a:37:f2:86:eb:cf: a4:45:18:a3:9f:c8:b5:a6:9b:79:af:75:cf:69:6b: 5b:e3:ae:f2:c3:ce:11:d9:fb:4a:19:82:53:f1:1d: cb:3d:43:54:6e:fb:31:3e:b8:2b:06:90:f9:84:b3: 91:b4:01:cd:6d:98:48:41:f5:be:af:c3:07:e0:71: fa:e0:85:15:a3:7a:c8:03:b8:cd:8d:c5:19:2e:79: b9:8e:1c:5c:ca:4e:e1:ef:0b:bc:81:c0:5b:6a:48: 54:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.118.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:de:a8:9d:ac:df:79:5b:02:46:83:0b:c3:61:4f:c9:74:8c: 5c:db:bb:75:6a:09:85:b2:ee:14:d8:78:eb:3b:b9:be:65:b7: e3:d2:f2:9d:63:34:84:c2:ec:fa:a3:a2:2d:cf:f3:5e:9c:ab: 93:c2:2b:05:a3:10:7d:70:36:11:91:20:ef:da:4d:b6:96:9e: 1e:f8:7f:41:6d:cd:d3:6f:f6:d0:64:95:2e:88:fd:5c:e5:a4: 37:f3:88:ad:87:5e:c5:da:25:13:0f:8c:d7:f0:cd:c0:46:b1: 29:08:d1:39:91:59:25:ac:18:40:44:88:1e:17:bb:a0:05:54: 64:aa:55:fb:8a:7b:4d:c8:59:c2:fd:77:42:bc:70:05:19:ee: f2:63:ff:d7:9a:c4:5d:d8:70:8b:7f:5a:06:02:35:0b:24:dd: 88:88:d1:cb:f2:63:97:c1:62:69:9c:e4:76:12:c9:65:47:e0: e2:72:de:f4:1c:78:84:95:dc:5d:f8:62:cb:a6:53:f0:65:91: eb:52:a9:0c:13:3a:f8:d1:9f:fd:25:4e:75:f3:37:cc:af:4f: a4:0e:8c:f5:5b:f3:23:01:ac:7e:f2:c4:1c:23:18:4a:ed:27: 0a:81:3b:3b:4b:28:27:64:c4:16:a4:8d:4c:63:88:8c:56:27: a7:f3:55:b4 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXgHuGqV1vLnRw9bkerSahbnGV3gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTExMDY1N1oX DTI0MDcyOTExMTE1N1owMzExMC8GA1UEAxMoNkRDQzY5NTA4RUY0RTY3MEVGQkM1 QzY5MjAzRDZCMTIwRkE5MzkyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHpp1qCIUJ3275eD5WzOWA0sewkAZveJm1LPMokJe/as21qQHlim+dOMHA3 eG47H9MDSovASwV+xeFe0pPedqTjV4fDFLeTgiB2+al3s5qKxMmpJn5TfC/VTSdY fQceADoViwWn8JX2pK8dsmS91XEUYAD3jcpohfMxLHmkDw6BDEYEZgFyXs/Cn4zk qVmzqimQqw3oTvcmiMSeg3t9ajfyhuvPpEUYo5/Itaabea91z2lrW+Ou8sPOEdn7 ShmCU/Edyz1DVG77MT64KwaQ+YSzkbQBzW2YSEH1vq/DB+Bx+uCFFaN6yAO4zY3F GS55uY4cXMpO4e8LvIHAW2pIVOsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG3MaVCO9OZw77xcaSA9axIPqTkvMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMjA3M2FjZS1hNjkxLTQ4NjMtOWMxYy01OWIyZGI5Y2I0NjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QyMDczYWNl LWE2OTEtNDg2My05YzFjLTU5YjJkYjljYjQ2My8wLzZEQ0M2OTUwOEVGNEU2NzBF RkJDNUM2OTIwM0Q2QjEyMEZBOTM5MkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnmHYwDQYJKoZIhvcNAQELBQADggEBAEveqJ2s33lbAkaDC8NhT8l0jFzbu3Vq CYWy7hTYeOs7ub5lt+PS8p1jNITC7Pqjoi3P816cq5PCKwWjEH1wNhGRIO/aTbaW nh74f0FtzdNv9tBklS6I/VzlpDfziK2HXsXaJRMPjNfwzcBGsSkI0TmRWSWsGEBE iB4Xu6AFVGSqVfuKe03IWcL9d0K8cAUZ7vJj/9eaxF3YcIt/WgYCNQsk3YiI0cvy Y5fBYmmc5HYSyWVH4OJy3vQceISV3F34YsumU/BlketSqQwTOvjRn/0lTnXzN8yv T6QOjPVb8yMBrH7yxBwjGErtJwqBOztLKCdkxBakjUxjiIxWJ6fzVbQ= -----END CERTIFICATE-----Generated at Tue May 7 18:07:11 2024 by rpki-client on console-fra.rpki-client.org