$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer File: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer (raw, json) Hash identifier: H6/ipf8ga5gR9/0kchimu8d2nM/+jugJTxYoTwtoh/k= Subject key identifier: 6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 111458CE43A6C9E47851EA1E7D54F33EE94A9D0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft caRepository: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 29 Aug 2023 09:53:48 +0000 Certificate not after: Tue 27 Aug 2024 09:58:48 +0000 Subordinate resources: IP: 103.168.24.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Apr 2024 16:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:14:58:ce:43:a6:c9:e4:78:51:ea:1e:7d:54:f3:3e:e9:4a:9d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 29 09:53:48 2023 GMT Not After : Aug 27 09:58:48 2024 GMT Subject: CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:63:d3:ff:2d:cd:fa:06:aa:bd:93:1c:d9:22: bb:06:17:6a:40:72:cc:de:5d:ad:df:7e:e3:d7:a5: cb:91:bf:35:7f:52:6f:8c:45:45:35:b9:51:d0:00: 80:83:b9:de:7a:a2:2b:4d:7a:89:43:0d:8e:9f:fd: ad:aa:65:63:ac:20:54:c1:35:9a:50:7f:fe:55:87: 7d:48:db:75:d5:05:11:3e:1c:2e:e1:01:ed:4e:22: d1:9a:a5:d1:df:bc:29:7c:44:fe:17:f2:a2:5b:36: fc:f0:4a:da:43:fd:91:98:83:de:ba:21:04:28:59: 3b:87:89:52:c0:22:25:3c:e9:dd:5e:17:53:e4:f6: 48:cb:ed:18:62:e2:a1:35:05:63:6d:f0:10:8c:61: a6:50:a3:d9:d2:e5:53:d7:ab:c2:60:bc:42:3f:c8: d4:7e:74:f6:ef:27:a6:e1:43:6f:af:06:ed:78:a2: c2:6c:d3:93:95:45:30:ce:a6:5e:cb:97:06:29:4f: f1:b7:e6:9d:5e:73:03:c3:3e:17:19:79:50:1b:9a: cf:45:82:7a:8c:50:67:ea:88:ac:96:bc:92:95:54: 02:cd:cf:81:90:52:5d:0c:a5:f4:74:4f:40:ce:83: fa:5b:27:67:8f:a8:a9:c2:10:fb:e8:e6:7e:2c:84: 67:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.24.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:b1:c9:16:19:8d:e2:58:7c:bb:5e:de:40:c5:72:ac:b0:94: e4:c1:10:ea:12:6b:1b:7d:0a:70:ba:4c:4f:6f:0f:63:0e:a9: 66:5c:95:e2:2b:dd:4e:37:f0:fb:ec:49:d9:72:ee:37:14:cf: 51:d2:31:fb:42:88:b6:78:9a:30:e0:c6:cf:5a:f1:46:b6:92: 3d:5b:1a:ab:ff:de:23:04:fb:38:4a:d0:4d:29:af:40:6f:02: 4e:93:f2:44:f1:f4:11:18:08:ad:2f:69:ee:90:0d:f2:a8:7b: 1b:48:5c:a1:85:ac:0c:e8:bc:e8:88:15:bf:4e:03:28:fa:13: f1:e8:52:77:1b:f6:35:8b:92:27:32:db:25:22:d8:2b:91:a2: b8:9e:19:95:31:7a:f2:cd:7e:2c:64:15:bc:b7:64:e4:04:96: 1e:51:55:46:7b:f8:2c:de:37:45:07:a2:ae:1d:5b:67:5b:21: 16:66:3b:f7:fb:98:2e:5b:dc:1c:85:73:b1:cc:61:56:2e:69: cc:8a:5e:04:f0:54:64:cc:f9:67:ea:9a:ba:61:02:a7:bc:5e: f5:fb:5f:a3:e1:b9:cc:0e:2d:6c:4e:28:a3:17:d6:5d:6d:e6: 63:74:6f:28:ed:b1:fc:9b:5a:84:8f:90:5c:bb:46:16:dc:19: 5b:7f:44:44 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUERRYzkOmyeR4UeoefVTzPulKnQowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgyOTA5NTM0OFoX DTI0MDgyNzA5NTg0OFowMzExMC8GA1UEAxMoNkRFQTlCMjc1RUNDRkI5MjBFMEE4 NEQwRDE1OEM2MDAwRjI1NjFGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJdj0/8tzfoGqr2THNkiuwYXakByzN5drd9+49ely5G/NX9Sb4xFRTW5UdAA gIO53nqiK016iUMNjp/9raplY6wgVME1mlB//lWHfUjbddUFET4cLuEB7U4i0Zql 0d+8KXxE/hfyols2/PBK2kP9kZiD3rohBChZO4eJUsAiJTzp3V4XU+T2SMvtGGLi oTUFY23wEIxhplCj2dLlU9erwmC8Qj/I1H509u8npuFDb68G7XiiwmzTk5VFMM6m XsuXBilP8bfmnV5zA8M+Fxl5UBuaz0WCeoxQZ+qIrJa8kpVUAs3PgZBSXQyl9HRP QM6D+lsnZ4+oqcIQ++jmfiyEZ7UCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG3qmydezPuSDgqE0NFYxgAPJWH3MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jMWI3N2QxZS0xNTg1LTQ2MDQtYjZiMS0wNzFmMGEyOTQwYzQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MxYjc3ZDFl LTE1ODUtNDYwNC1iNmIxLTA3MWYwYTI5NDBjNC8wLzZERUE5QjI3NUVDQ0ZCOTIw RTBBODREMEQxNThDNjAwMEYyNTYxRjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqBgwDQYJKoZIhvcNAQELBQADggEBAG2xyRYZjeJYfLte3kDFcqywlOTBEOoS axt9CnC6TE9vD2MOqWZcleIr3U438PvsSdly7jcUz1HSMftCiLZ4mjDgxs9a8Ua2 kj1bGqv/3iME+zhK0E0pr0BvAk6T8kTx9BEYCK0vae6QDfKoextIXKGFrAzovOiI Fb9OAyj6E/HoUncb9jWLkicy2yUi2CuRorieGZUxevLNfixkFby3ZOQElh5RVUZ7 +CzeN0UHoq4dW2dbIRZmO/f7mC5b3ByFc7HMYVYuacyKXgTwVGTM+WfqmrphAqe8 XvX7X6PhucwOLWxOKKMX1l1t5mN0byjtsfybWoSPkFy7RhbcGVt/REQ= -----END CERTIFICATE-----Generated at Fri Mar 29 12:21:55 2024 by rpki-client on console-fra.rpki-client.org