$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer File: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer (raw, json) Hash identifier: Gn5mmj8fDE979RW/oLXdcC+51Gjmp+bmmbF4AVDcsZ4= Subject key identifier: 6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1DBD827331B1148CEEA7FDEAF3F770D90443CD68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft caRepository: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 30 Jul 2024 13:23:24 +0000 Certificate not after: Tue 29 Jul 2025 13:28:24 +0000 Subordinate resources: IP: 103.168.24.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:bd:82:73:31:b1:14:8c:ee:a7:fd:ea:f3:f7:70:d9:04:43:cd:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 30 13:23:24 2024 GMT Not After : Jul 29 13:28:24 2025 GMT Subject: CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:63:d3:ff:2d:cd:fa:06:aa:bd:93:1c:d9:22: bb:06:17:6a:40:72:cc:de:5d:ad:df:7e:e3:d7:a5: cb:91:bf:35:7f:52:6f:8c:45:45:35:b9:51:d0:00: 80:83:b9:de:7a:a2:2b:4d:7a:89:43:0d:8e:9f:fd: ad:aa:65:63:ac:20:54:c1:35:9a:50:7f:fe:55:87: 7d:48:db:75:d5:05:11:3e:1c:2e:e1:01:ed:4e:22: d1:9a:a5:d1:df:bc:29:7c:44:fe:17:f2:a2:5b:36: fc:f0:4a:da:43:fd:91:98:83:de:ba:21:04:28:59: 3b:87:89:52:c0:22:25:3c:e9:dd:5e:17:53:e4:f6: 48:cb:ed:18:62:e2:a1:35:05:63:6d:f0:10:8c:61: a6:50:a3:d9:d2:e5:53:d7:ab:c2:60:bc:42:3f:c8: d4:7e:74:f6:ef:27:a6:e1:43:6f:af:06:ed:78:a2: c2:6c:d3:93:95:45:30:ce:a6:5e:cb:97:06:29:4f: f1:b7:e6:9d:5e:73:03:c3:3e:17:19:79:50:1b:9a: cf:45:82:7a:8c:50:67:ea:88:ac:96:bc:92:95:54: 02:cd:cf:81:90:52:5d:0c:a5:f4:74:4f:40:ce:83: fa:5b:27:67:8f:a8:a9:c2:10:fb:e8:e6:7e:2c:84: 67:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.24.0/23 Signature Algorithm: sha256WithRSAEncryption 55:8b:a4:64:0b:4e:1b:51:f0:a4:28:eb:e3:df:aa:e4:84:7e: 29:9f:1f:f3:ff:cb:ea:8e:5c:64:ff:63:c8:7d:1a:7f:70:4f: c3:e6:0b:85:60:e1:2b:c9:28:71:5d:18:f5:34:cb:42:5d:52: cc:34:1b:cb:4c:45:a2:fa:d9:6b:24:23:f0:ff:81:1a:62:4d: e5:24:fc:13:2f:bf:d8:a9:3f:b6:5b:89:fe:1c:ac:c6:40:bf: f0:20:a5:6f:d0:79:42:16:86:d6:ea:f1:c7:aa:d0:d6:72:4d: 21:b3:57:78:79:d2:75:3b:ec:3b:41:ea:eb:bf:38:54:a6:6e: 5c:36:cd:91:4c:87:98:ad:d4:4f:cb:8b:b7:07:bf:5e:50:e0: 84:bd:f0:65:ef:07:90:7d:be:5a:ba:f9:bc:fb:eb:7d:55:82: 12:23:6e:ed:c2:45:60:e0:e1:59:b7:3f:2a:23:c5:9c:18:2c: bc:f4:e4:ed:55:32:e9:5e:59:7f:28:cc:29:30:da:32:a0:0c: 62:0c:2f:40:49:09:1b:73:c4:83:a3:fc:32:82:86:c9:dd:a9: 1c:af:ee:a7:0b:3c:00:84:86:ef:24:37:a0:55:84:c4:f7:d9: 50:e0:2e:54:92:15:77:7a:90:86:38:8f:c7:d5:bc:1c:15:50: ca:a4:d5:54 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHb2CczGxFIzup/3q8/dw2QRDzWgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDczMDEzMjMyNFoX DTI1MDcyOTEzMjgyNFowMzExMC8GA1UEAxMoNkRFQTlCMjc1RUNDRkI5MjBFMEE4 NEQwRDE1OEM2MDAwRjI1NjFGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJdj0/8tzfoGqr2THNkiuwYXakByzN5drd9+49ely5G/NX9Sb4xFRTW5UdAA gIO53nqiK016iUMNjp/9raplY6wgVME1mlB//lWHfUjbddUFET4cLuEB7U4i0Zql 0d+8KXxE/hfyols2/PBK2kP9kZiD3rohBChZO4eJUsAiJTzp3V4XU+T2SMvtGGLi oTUFY23wEIxhplCj2dLlU9erwmC8Qj/I1H509u8npuFDb68G7XiiwmzTk5VFMM6m XsuXBilP8bfmnV5zA8M+Fxl5UBuaz0WCeoxQZ+qIrJa8kpVUAs3PgZBSXQyl9HRP QM6D+lsnZ4+oqcIQ++jmfiyEZ7UCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG3qmydezPuSDgqE0NFYxgAPJWH3MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jMWI3N2QxZS0xNTg1LTQ2MDQtYjZiMS0wNzFmMGEyOTQwYzQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MxYjc3ZDFl LTE1ODUtNDYwNC1iNmIxLTA3MWYwYTI5NDBjNC8wLzZERUE5QjI3NUVDQ0ZCOTIw RTBBODREMEQxNThDNjAwMEYyNTYxRjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqBgwDQYJKoZIhvcNAQELBQADggEBAFWLpGQLThtR8KQo6+PfquSEfimfH/P/ y+qOXGT/Y8h9Gn9wT8PmC4Vg4SvJKHFdGPU0y0JdUsw0G8tMRaL62WskI/D/gRpi TeUk/BMvv9ipP7Zbif4crMZAv/AgpW/QeUIWhtbq8ceq0NZyTSGzV3h50nU77DtB 6uu/OFSmblw2zZFMh5it1E/Li7cHv15Q4IS98GXvB5B9vlq6+bz7631VghIjbu3C RWDg4Vm3PyojxZwYLLz05O1VMuleWX8ozCkw2jKgDGIML0BJCRtzxIOj/DKChsnd qRyv7qcLPACEhu8kN6BVhMT32VDgLlSSFXd6kIY4j8fVvBwVUMqk1VQ= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:42 2024 by rpki-client on console-ams.rpki-client.org