$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer File: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer (raw, json) Hash identifier: wQ6uNxDeIc3fBwSgmhFG9Fvgy2mR1GGMrimiVlvV3PA= Subject key identifier: 6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 31EC5386B673A126F41EF4ACC85BF3AA27A2EB1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft caRepository: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 24 May 2024 16:24:33 +0000 Certificate not after: Fri 23 May 2025 16:29:33 +0000 Subordinate resources: IP: 2001:df3:cf40::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ec:53:86:b6:73:a1:26:f4:1e:f4:ac:c8:5b:f3:aa:27:a2:eb:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 24 16:24:33 2024 GMT Not After : May 23 16:29:33 2025 GMT Subject: CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7d:2c:51:23:0a:72:a1:09:95:f4:c4:f7:b7: 07:9d:d2:ef:7a:65:bb:63:9c:d8:7f:93:9b:fc:7a: 8a:cc:b9:6a:3d:d6:10:cd:b9:de:6d:f7:b3:6d:a5: 43:dc:94:76:74:69:48:82:9a:44:82:cb:e6:ec:bb: 85:7e:6d:7e:b3:4f:99:50:85:5b:27:52:45:53:e4: 47:fe:6d:3e:dd:1a:a5:a3:d4:b6:25:44:37:5c:39: ad:67:94:02:68:d6:82:5f:14:98:ce:c1:8b:8c:df: b6:95:e7:6a:9c:49:84:e8:6f:b2:18:d6:a4:f7:5a: 4b:58:7e:df:30:71:e7:9a:79:5e:84:45:42:05:d8: 54:91:c8:62:a7:e7:a4:11:3c:35:ee:78:cc:dc:94: 5e:0a:40:7a:33:5a:bb:d2:39:b3:0b:7b:f1:98:73: b8:fc:a8:4f:60:55:be:93:0f:dc:db:28:2d:4b:0f: 6a:0c:7c:99:bd:50:f9:0b:06:58:86:c8:e8:bb:f5: f3:39:57:f6:da:c2:61:f4:77:ba:0f:0d:18:17:bf: 7e:d1:9a:6e:53:db:d9:18:15:21:74:96:9b:2a:97: 8f:f7:46:09:0c:52:12:1c:4e:d1:d3:26:d1:17:02: e1:58:0c:2b:3f:28:eb:5f:f1:31:2a:4b:df:75:eb: 40:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:cf40::/48 Signature Algorithm: sha256WithRSAEncryption 32:06:c7:44:3c:31:6e:64:2f:a9:49:8e:59:e7:54:20:71:eb: 02:44:ef:08:20:bf:51:9e:ec:5b:87:1d:c1:36:51:3f:f1:c8: 0b:94:3a:f8:e7:00:fc:18:e9:78:6e:58:56:14:91:8f:9f:9e: 97:b1:63:25:fc:c6:bb:80:0e:87:63:c1:31:67:e1:6e:cb:bc: a4:c9:24:c3:9b:63:c3:e8:03:b5:fd:2d:cb:00:57:f0:61:5b: 6c:22:36:49:81:e3:6c:d1:4c:73:d7:a3:ed:2e:85:55:b0:2c: 0c:f3:5f:16:3d:42:37:29:68:61:8d:3c:93:f7:d9:b4:41:c1: 90:85:79:0d:c4:c0:b1:9b:94:62:67:60:ed:32:d9:ee:34:31: 72:70:53:4a:d2:fe:07:1f:f0:61:0b:39:c0:53:df:79:7a:f8: 60:44:34:08:63:b0:90:31:91:70:a8:69:8d:66:49:48:3b:87: e7:ef:50:e9:19:6c:ff:20:95:56:e9:4f:36:af:a6:d9:44:a1: 32:63:26:94:25:e8:66:19:8f:df:50:8a:53:dd:63:7f:6b:37: 43:13:42:e1:ad:c2:56:10:14:6a:97:42:37:e4:67:fe:1a:68: 3c:26:d5:50:53:89:73:e6:6e:82:57:89:5e:1e:ed:86:f9:92: 81:d5:8c:ae -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUMexThrZzoSb0HvSsyFvzqiei6x4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyNDE2MjQzM1oX DTI1MDUyMzE2MjkzM1owMzExMC8GA1UEAxMoNkYyOUI1QUVBMEZEN0VDNTY4QUE0 NUExNzIxRDhFNURFQTkyNkMwRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMF9LFEjCnKhCZX0xPe3B53S73plu2Oc2H+Tm/x6isy5aj3WEM253m33s22l Q9yUdnRpSIKaRILL5uy7hX5tfrNPmVCFWydSRVPkR/5tPt0apaPUtiVEN1w5rWeU AmjWgl8UmM7Bi4zftpXnapxJhOhvshjWpPdaS1h+3zBx55p5XoRFQgXYVJHIYqfn pBE8Ne54zNyUXgpAejNau9I5swt78ZhzuPyoT2BVvpMP3NsoLUsPagx8mb1Q+QsG WIbI6Lv18zlX9trCYfR3ug8NGBe/ftGablPb2RgVIXSWmyqXj/dGCQxSEhxO0dMm 0RcC4VgMKz8o61/xMSpL33XrQIECAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG8pta6g/X7FaKpFoXIdjl3qkmwPMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hYWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FhYjRlMTRk LTAyMWQtNDBkYy05MjNhLWMxMmQxYWY0NDNiNS8xLzZGMjlCNUFFQTBGRDdFQzU2 OEFBNDVBMTcyMUQ4RTVERUE5MjZDMEYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ3zz0AwDQYJKoZIhvcNAQELBQADggEBADIGx0Q8MW5kL6lJjlnnVCBx6wJE 7wggv1Ge7FuHHcE2UT/xyAuUOvjnAPwY6XhuWFYUkY+fnpexYyX8xruADodjwTFn 4W7LvKTJJMObY8PoA7X9LcsAV/BhW2wiNkmB42zRTHPXo+0uhVWwLAzzXxY9Qjcp aGGNPJP32bRBwZCFeQ3EwLGblGJnYO0y2e40MXJwU0rS/gcf8GELOcBT33l6+GBE NAhjsJAxkXCoaY1mSUg7h+fvUOkZbP8glVbpTzavptlEoTJjJpQl6GYZj99QilPd Y39rN0MTQuGtwlYQFGqXQjfkZ/4aaDwm1VBTiXPmboJXiV4e7Yb5koHVjK4= -----END CERTIFICATE-----Generated at Sun Jun 23 00:03:57 2024 by rpki-client on console-ams.rpki-client.org