$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer File: 6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer (raw, json) Hash identifier: AYmY80hjYxgsNNQsKAxBzwrQ6R09sTwTNuxGg+cw2B8= Subject key identifier: 6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 71D74E66279504C00AFCEE1B6A0B169811556039 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft caRepository: rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 20:20:47 +0000 Certificate not after: Tue 02 Jun 2026 20:25:47 +0000 Subordinate resources: IP: 103.152.118.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:d7:4e:66:27:95:04:c0:0a:fc:ee:1b:6a:0b:16:98:11:55:60:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 20:20:47 2025 GMT Not After : Jun 2 20:25:47 2026 GMT Subject: CN=6DCC69508EF4E670EFBC5C69203D6B120FA9392F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e9:a7:5a:82:21:42:77:db:be:5e:0f:95:b3: 39:60:34:b1:ec:24:01:9b:de:26:6d:4b:3c:ca:24: 25:ef:da:b3:6d:6a:40:79:62:9b:e7:4e:30:70:37: 78:6e:3b:1f:d3:03:4a:8b:c0:4b:05:7e:c5:e1:5e: d2:93:de:76:a4:e3:57:87:c3:14:b7:93:82:20:76: f9:a9:77:b3:9a:8a:c4:c9:a9:26:7e:53:7c:2f:d5: 4d:27:58:7d:07:1e:00:3a:15:8b:05:a7:f0:95:f6: a4:af:1d:b2:64:bd:d5:71:14:60:00:f7:8d:ca:68: 85:f3:31:2c:79:a4:0f:0e:81:0c:46:04:66:01:72: 5e:cf:c2:9f:8c:e4:a9:59:b3:aa:29:90:ab:0d:e8: 4e:f7:26:88:c4:9e:83:7b:7d:6a:37:f2:86:eb:cf: a4:45:18:a3:9f:c8:b5:a6:9b:79:af:75:cf:69:6b: 5b:e3:ae:f2:c3:ce:11:d9:fb:4a:19:82:53:f1:1d: cb:3d:43:54:6e:fb:31:3e:b8:2b:06:90:f9:84:b3: 91:b4:01:cd:6d:98:48:41:f5:be:af:c3:07:e0:71: fa:e0:85:15:a3:7a:c8:03:b8:cd:8d:c5:19:2e:79: b9:8e:1c:5c:ca:4e:e1:ef:0b:bc:81:c0:5b:6a:48: 54:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.118.0/23 Signature Algorithm: sha256WithRSAEncryption 52:1b:60:a9:52:7a:cd:22:d9:e0:db:10:85:91:6e:0b:53:61: 6d:ec:c8:48:2d:d8:86:f9:70:45:df:7e:b4:0d:b9:8c:91:53: d3:1f:89:eb:0c:ab:f0:14:d4:15:1e:b1:df:36:7d:5f:70:1c: c6:9e:ee:d1:e7:bc:b6:c5:2e:95:48:3f:c0:15:70:d3:1a:ab: 64:bb:90:5c:98:db:58:28:41:c2:80:0e:df:f4:8d:2a:a6:82: aa:57:25:79:f1:f6:56:38:22:8d:4a:b9:20:59:61:f7:eb:cf: 84:ae:f8:a7:8b:dc:92:ba:9d:7c:da:f4:f0:03:d8:fc:cb:1a: 2d:f9:a7:07:7e:34:e4:e6:15:3d:78:7b:5a:cb:fe:ce:86:cf: df:06:5c:d6:a8:26:b7:80:52:b4:53:1f:a9:47:3d:ce:82:3e: 39:99:af:4f:19:2d:28:91:0b:36:61:b1:dd:53:85:3f:58:5d: ce:3c:ef:75:63:2a:a4:7f:aa:2e:3e:df:17:fe:cf:85:ea:c1: 54:07:45:6a:75:41:d8:60:1e:bf:b1:5b:83:10:74:9a:f2:0c: b0:28:22:7f:4d:94:56:6e:51:fa:a3:5d:f3:e1:bb:36:a0:30: d6:be:6d:3f:03:a8:ef:e7:23:10:b8:b9:b6:99:7e:ac:4e:16: d3:2f:e8:ab -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUcddOZieVBMAK/O4bagsWmBFVYDkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzIwMjA0N1oX DTI2MDYwMjIwMjU0N1owMzExMC8GA1UEAxMoNkRDQzY5NTA4RUY0RTY3MEVGQkM1 QzY5MjAzRDZCMTIwRkE5MzkyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHpp1qCIUJ3275eD5WzOWA0sewkAZveJm1LPMokJe/as21qQHlim+dOMHA3 eG47H9MDSovASwV+xeFe0pPedqTjV4fDFLeTgiB2+al3s5qKxMmpJn5TfC/VTSdY fQceADoViwWn8JX2pK8dsmS91XEUYAD3jcpohfMxLHmkDw6BDEYEZgFyXs/Cn4zk qVmzqimQqw3oTvcmiMSeg3t9ajfyhuvPpEUYo5/Itaabea91z2lrW+Ou8sPOEdn7 ShmCU/Edyz1DVG77MT64KwaQ+YSzkbQBzW2YSEH1vq/DB+Bx+uCFFaN6yAO4zY3F GS55uY4cXMpO4e8LvIHAW2pIVOsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG3MaVCO9OZw77xcaSA9axIPqTkvMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMjA3M2FjZS1hNjkxLTQ4NjMtOWMxYy01OWIyZGI5Y2I0NjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QyMDczYWNl LWE2OTEtNDg2My05YzFjLTU5YjJkYjljYjQ2My8wLzZEQ0M2OTUwOEVGNEU2NzBF RkJDNUM2OTIwM0Q2QjEyMEZBOTM5MkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnmHYwDQYJKoZIhvcNAQELBQADggEBAFIbYKlSes0i2eDbEIWRbgtTYW3syEgt 2Ib5cEXffrQNuYyRU9MfiesMq/AU1BUesd82fV9wHMae7tHnvLbFLpVIP8AVcNMa q2S7kFyY21goQcKADt/0jSqmgqpXJXnx9lY4Io1KuSBZYffrz4Su+KeL3JK6nXza 9PAD2PzLGi35pwd+NOTmFT14e1rL/s6Gz98GXNaoJreAUrRTH6lHPc6CPjmZr08Z LSiRCzZhsd1ThT9YXc4873VjKqR/qi4+3xf+z4XqwVQHRWp1QdhgHr+xW4MQdJry DLAoIn9NlFZuUfqjXfPhuzagMNa+bT8DqO/nIxC4ubaZfqxOFtMv6Ks= -----END CERTIFICATE-----Generated at Tue Jun 3 23:50:21 2025 by rpki-client