$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer File: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer (raw, json) Hash identifier: zU1oR3CLroNUh85M2kPm3EeGsEqW0irTJ4vYDj3iZgs= Subject key identifier: 6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 628DC6D1DA1983C7B9DAB0061153E48C9C530686 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft caRepository: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 05 Dec 2023 12:08:44 +0000 Certificate not after: Tue 03 Dec 2024 12:13:44 +0000 Subordinate resources: IP: 103.156.226.0/23 IP: 2406:8ec0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:8d:c6:d1:da:19:83:c7:b9:da:b0:06:11:53:e4:8c:9c:53:06:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 5 12:08:44 2023 GMT Not After : Dec 3 12:13:44 2024 GMT Subject: CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:15:d0:5e:58:d4:33:0d:87:2d:5b:d7:c2:f4: 8c:bd:d1:33:c8:f7:ad:19:46:a5:03:d5:d2:46:b2: ac:01:64:02:c1:7a:e4:c1:ca:cd:29:7d:44:65:97: 20:b9:7d:a2:43:ae:59:68:0d:9b:3a:45:73:82:c9: 37:b7:83:4f:3f:c4:e3:10:96:87:56:c5:2d:a6:b1: 54:b6:11:12:5a:9c:34:dc:1f:c3:86:79:02:f8:b1: d2:c2:d9:df:22:92:06:0c:ef:ac:c7:17:08:bd:78: df:6c:af:99:80:9b:6b:d5:21:45:08:42:41:ed:c7: 19:83:d1:56:0e:5e:45:d3:36:03:1c:60:db:08:0b: 22:e3:fe:49:3e:16:23:a2:91:05:22:4a:83:de:b9: b8:7c:61:49:e0:c6:fd:84:6c:74:7f:40:61:6f:b8: 06:17:6c:5c:b4:d6:89:e4:c6:bf:1a:c6:28:39:aa: cb:29:9d:98:de:8a:94:8c:ff:cf:93:80:eb:7a:b5: c8:28:fe:99:ea:84:8a:6d:6e:e9:80:a6:5e:90:58: a4:15:b8:23:76:1c:83:5f:df:5c:83:9f:6b:84:63: 7b:de:ee:42:54:30:33:b5:43:9c:f6:03:bc:c3:13: 25:09:c6:d2:a6:b9:b4:9d:e9:96:26:96:60:a8:ca: 59:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.226.0/23 IPv6: 2406:8ec0::/32 Signature Algorithm: sha256WithRSAEncryption 52:33:e9:50:69:86:13:94:7e:0e:34:cc:48:cd:1f:13:c9:44: bb:bd:34:11:3f:b5:81:dd:f6:25:af:58:94:b2:09:ab:13:60: c6:d8:15:79:bc:0d:b5:7d:80:9c:43:35:64:e8:6b:77:4d:df: 67:bb:94:09:9f:60:c8:f0:41:af:d7:30:c7:7d:03:2d:d3:09: 1d:7a:a9:01:9a:17:66:7c:b9:53:c5:ea:e1:45:b2:58:79:7f: cb:7b:c2:aa:76:8d:5f:dc:33:56:52:26:4c:fc:51:71:eb:c1: 3f:f2:7c:63:12:08:39:0a:8a:40:6d:ce:ec:49:16:50:cc:d9: 76:6d:93:d4:5b:73:04:28:39:12:19:be:68:18:c2:2b:ea:0f: ac:87:81:db:fb:e1:2e:8e:a6:20:b3:ba:86:22:74:0e:0c:68: e7:e8:78:9b:77:91:38:de:cb:af:96:f5:1e:05:b6:11:4e:3b: d0:eb:66:af:f9:1b:ff:4c:ec:e1:ef:64:bd:9a:d6:92:f9:9f: 16:84:f7:45:27:d1:6f:9f:a6:a3:03:87:f2:4f:46:e7:a3:b7: 5b:68:ee:00:58:20:30:91:05:3a:80:e7:d3:b7:48:ac:03:ba: 95:89:f0:45:98:54:ae:0b:4f:19:44:ef:76:e2:9b:8c:93:0e: 79:12:a6:74 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUYo3G0doZg8e52rAGEVPkjJxTBoYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIwNTEyMDg0NFoX DTI0MTIwMzEyMTM0NFowMzExMC8GA1UEAxMoNkUxMjM1QzhGQzNGMkVGNkQ5RDI0 NUQwNjA3QUE2RDc2M0M1RDRFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN8V0F5Y1DMNhy1b18L0jL3RM8j3rRlGpQPV0kayrAFkAsF65MHKzSl9RGWX ILl9okOuWWgNmzpFc4LJN7eDTz/E4xCWh1bFLaaxVLYRElqcNNwfw4Z5Avix0sLZ 3yKSBgzvrMcXCL1432yvmYCba9UhRQhCQe3HGYPRVg5eRdM2Axxg2wgLIuP+ST4W I6KRBSJKg965uHxhSeDG/YRsdH9AYW+4BhdsXLTWieTGvxrGKDmqyymdmN6KlIz/ z5OA63q1yCj+meqEim1u6YCmXpBYpBW4I3Ycg1/fXIOfa4Rje97uQlQwM7VDnPYD vMMTJQnG0qa5tJ3pliaWYKjKWUMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG4SNcj8Py722dJF0GB6ptdjxdTnMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNTM1NWM1YS1lZmM4LTQ4ZjctOTAyZi02ZTMxZmM0Mjk5NWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1MzU1YzVh LWVmYzgtNDhmNy05MDJmLTZlMzFmYzQyOTk1YS8wLzZFMTIzNUM4RkMzRjJFRjZE OUQyNDVEMDYwN0FBNkQ3NjNDNUQ0RTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnnOIwDQQCAAIwBwMFACQGjsAwDQYJKoZIhvcNAQELBQADggEBAFIz6VBphhOU fg40zEjNHxPJRLu9NBE/tYHd9iWvWJSyCasTYMbYFXm8DbV9gJxDNWToa3dN32e7 lAmfYMjwQa/XMMd9Ay3TCR16qQGaF2Z8uVPF6uFFslh5f8t7wqp2jV/cM1ZSJkz8 UXHrwT/yfGMSCDkKikBtzuxJFlDM2XZtk9RbcwQoORIZvmgYwivqD6yHgdv74S6O piCzuoYidA4MaOfoeJt3kTjey6+W9R4FthFOO9DrZq/5G/9M7OHvZL2a1pL5nxaE 90Un0W+fpqMDh/JPRuejt1to7gBYIDCRBTqA59O3SKwDupWJ8EWYVK4LTxlE73bi m4yTDnkSpnQ= -----END CERTIFICATE-----Generated at Wed May 8 15:17:37 2024 by rpki-client on console-fra.rpki-client.org