$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6E740E0191A423D6D9A0908C8B778DD2416F842E.cer File: 6E740E0191A423D6D9A0908C8B778DD2416F842E.cer (raw, json) Hash identifier: MIz5TCAFQz2u3cwpOYTLEBkPoKOgF5ck3g+RNd1ArPM= Subject key identifier: 6E:74:0E:01:91:A4:23:D6:D9:A0:90:8C:8B:77:8D:D2:41:6F:84:2E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 491EE50605F3ADF118538EE8DBA989BA87E2CF2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6E740E0191A423D6D9A0908C8B778DD2416F842E.mft caRepository: rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 17:22:38 +0000 Certificate not after: Mon 30 Jun 2025 17:27:38 +0000 Subordinate resources: IP: 45.115.136.0/22 IP: 103.53.0.0/22 IP: 2402:2680::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:1e:e5:06:05:f3:ad:f1:18:53:8e:e8:db:a9:89:ba:87:e2:cf:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 17:22:38 2024 GMT Not After : Jun 30 17:27:38 2025 GMT Subject: CN=6E740E0191A423D6D9A0908C8B778DD2416F842E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:82:40:5d:ef:8a:f6:01:7d:4a:dc:4a:c7:69: 9c:3b:06:a4:29:41:eb:0f:ca:a2:7d:ef:3f:f8:ce: e5:c1:e6:ff:2c:57:77:1d:e1:7e:69:14:dc:ea:6d: 07:1f:27:07:10:cd:ed:6b:49:ce:c7:b6:20:69:b0: a5:f8:79:f9:8f:3a:4b:ef:f0:7a:58:99:2c:3f:5a: fc:2f:ca:52:fc:00:58:28:91:ba:7f:09:4a:85:05: f4:96:ae:1d:7a:70:9c:2b:1d:c1:38:e3:d1:be:5a: db:ae:74:8c:39:43:11:88:c3:98:8b:d1:bf:dd:6c: b7:52:f8:47:00:e7:85:d3:e0:10:e8:e3:a8:f2:41: 98:b3:eb:94:f9:30:e2:98:ec:79:0f:4e:31:37:d7: 61:23:79:b5:46:cd:4c:de:ca:22:cb:9f:09:15:5a: ba:4f:dd:76:3a:e4:33:8d:88:b9:11:42:ca:b8:47: d9:dd:e6:43:7f:ea:88:02:02:c2:79:d5:01:b9:bb: 97:e9:61:1d:5b:2e:88:cd:32:48:25:3e:00:4c:aa: 54:08:7e:1d:a6:51:ed:b0:bf:59:f3:ae:1c:ea:ed: eb:c2:4e:88:62:6b:b5:4a:7c:f2:27:34:d0:a0:f2: b7:72:4c:22:77:ca:c1:d5:1b:3f:1a:ab:7a:2d:03: 68:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6E:74:0E:01:91:A4:23:D6:D9:A0:90:8C:8B:77:8D:D2:41:6F:84:2E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6E740E0191A423D6D9A0908C8B778DD2416F842E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.115.136.0/22 103.53.0.0/22 IPv6: 2402:2680::/32 Signature Algorithm: sha256WithRSAEncryption 1a:a6:9f:9c:77:52:af:27:f0:56:46:62:09:7a:88:d7:6f:38: 2d:45:10:db:2c:e4:9f:2f:92:52:46:b9:46:ec:c8:0d:7c:1d: e2:27:95:02:a8:17:d9:06:43:b8:29:5f:4f:f7:1b:40:4d:9c: 21:98:04:e1:e3:b4:13:3d:61:db:e2:d6:2c:7e:bd:00:31:89: b8:64:44:8e:90:34:52:86:00:a9:55:11:bc:f0:63:b5:fd:62: f0:e0:23:87:5b:2b:5b:ed:b8:ba:5b:6f:dc:34:c5:2c:36:cc: 33:8b:02:88:71:c2:49:3b:21:b8:2f:cb:0e:04:28:ef:fb:01: e8:40:05:44:6d:c3:ea:38:4e:2e:0b:da:87:7a:55:55:74:7e: 6b:13:fc:10:ee:fe:00:0f:7e:6f:8f:02:36:0b:48:c9:fb:b0: f0:fe:83:29:3e:bb:bf:94:8f:28:28:a0:a8:bd:ed:d2:34:1a: 88:c0:61:82:7f:cc:84:f3:84:72:d0:e3:02:c8:5c:38:b0:e5: 99:68:53:29:2d:fd:50:29:2d:d5:cc:a4:1e:3a:5f:4f:08:ab: 69:cd:ca:61:a2:b2:9e:e4:45:d0:f5:99:bd:5c:92:8e:5d:bb: de:f3:dc:48:a3:c8:5e:2e:31:ef:cb:d3:d1:d6:cf:9a:cf:3c: b8:ad:77:a5 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUSR7lBgXzrfEYU47o26mJuofizy8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE3MjIzOFoX DTI1MDYzMDE3MjczOFowMzExMC8GA1UEAxMoNkU3NDBFMDE5MUE0MjNENkQ5QTA5 MDhDOEI3NzhERDI0MTZGODQyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqCQF3vivYBfUrcSsdpnDsGpClB6w/Kon3vP/jO5cHm/yxXdx3hfmkU3Opt Bx8nBxDN7WtJzse2IGmwpfh5+Y86S+/weliZLD9a/C/KUvwAWCiRun8JSoUF9Jau HXpwnCsdwTjj0b5a2650jDlDEYjDmIvRv91st1L4RwDnhdPgEOjjqPJBmLPrlPkw 4pjseQ9OMTfXYSN5tUbNTN7KIsufCRVauk/ddjrkM42IuRFCyrhH2d3mQ3/qiAIC wnnVAbm7l+lhHVsuiM0ySCU+AEyqVAh+HaZR7bC/WfOuHOrt68JOiGJrtUp88ic0 0KDyt3JMInfKwdUbPxqrei0DaIMCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG50DgGRpCPW2aCQjIt3jdJBb4QuMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lYzUxZTdhYi1hNjM4LTRmYTAtYmJjYy1iMGY4NTZhOGExNTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VjNTFlN2Fi LWE2MzgtNGZhMC1iYmNjLWIwZjg1NmE4YTE1Ny8wLzZFNzQwRTAxOTFBNDIzRDZE OUEwOTA4QzhCNzc4REQyNDE2Rjg0MkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAItc4gDBAJnNQAwDQQCAAIwBwMFACQCJoAwDQYJKoZIhvcNAQELBQADggEBABqm n5x3Uq8n8FZGYgl6iNdvOC1FENss5J8vklJGuUbsyA18HeInlQKoF9kGQ7gpX0/3 G0BNnCGYBOHjtBM9Ydvi1ix+vQAxibhkRI6QNFKGAKlVEbzwY7X9YvDgI4dbK1vt uLpbb9w0xSw2zDOLAohxwkk7Ibgvyw4EKO/7AehABURtw+o4Ti4L2od6VVV0fmsT /BDu/gAPfm+PAjYLSMn7sPD+gyk+u7+UjygooKi97dI0GojAYYJ/zITzhHLQ4wLI XDiw5ZloUykt/VApLdXMpB46X08Iq2nNymGisp7kRdD1mb1cko5du97z3EijyF4u Me/L09HWz5rPPLitd6U= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:49 2024 by rpki-client on console-fra.rpki-client.org