$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer File: 6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer (raw, json) Hash identifier: 8cw3j4iRz8nnRSpMX0MII/4od9GDs6zkaY2Mn0hUN40= Subject key identifier: 6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 75543D6AFB0BC9D5E3412BADD6D7DB2486DE5634 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft caRepository: rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 20 Mar 2024 02:24:49 +0000 Certificate not after: Wed 19 Mar 2025 02:29:49 +0000 Subordinate resources: IP: 103.77.185.0/24 IP: 103.245.225.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:54:3d:6a:fb:0b:c9:d5:e3:41:2b:ad:d6:d7:db:24:86:de:56:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 20 02:24:49 2024 GMT Not After : Mar 19 02:29:49 2025 GMT Subject: CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:68:49:8e:c0:af:16:2d:7e:c0:d1:4e:06:3e: d0:f7:24:4e:55:e9:6f:eb:4b:b3:a9:3d:9b:4a:38: d8:54:3b:05:31:57:b9:21:0b:d1:37:cf:36:ee:95: 7e:17:fd:29:10:91:cd:aa:8b:b8:03:cb:8c:bb:76: e3:c8:0c:6c:cb:ee:01:e3:0c:c6:9b:6a:d8:2f:ab: b3:54:8d:3f:28:24:10:4a:e1:c7:49:2a:bb:6c:7a: 04:77:0c:5b:05:14:b5:78:bd:42:3d:22:f4:fb:5b: 32:ac:d3:dd:9b:e5:eb:7b:c4:79:3c:5a:94:13:c4: e0:f4:ac:49:59:14:e5:ab:54:0d:2f:20:74:f6:09: 59:ac:30:bd:b3:6c:26:94:a4:f4:b5:d9:5d:7e:e0: b8:2d:ac:9e:93:6e:e7:a1:d2:26:a9:d8:de:17:53: 89:37:f0:8d:4a:c1:44:71:76:04:f3:c4:e8:f3:cb: 89:ea:d8:0a:2a:8b:d0:fb:0e:eb:e9:33:87:77:f4: d2:eb:22:82:a1:37:53:e6:61:ab:e2:02:0c:ae:e8: 14:d5:5d:9b:76:eb:23:ab:21:f1:f2:6e:b7:73:b1: 84:37:63:89:44:6c:13:f6:56:8b:d9:70:de:7d:51: ee:80:5a:82:7b:c5:24:5f:bd:f3:b8:9d:0a:dd:a6: 62:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.77.185.0/24 103.245.225.0/24 Signature Algorithm: sha256WithRSAEncryption 79:ad:bd:a1:f1:9f:1b:ea:ab:7e:06:88:89:42:b1:f5:59:3f: 7e:39:e6:1c:19:c7:0c:79:94:d2:9e:dd:5a:2d:f3:89:03:49: 4d:55:43:4b:9e:dd:b2:1f:fe:e2:50:cb:1f:eb:68:8d:22:2a: 8e:be:93:f5:7e:3b:06:1d:ae:27:1c:45:af:61:1c:68:96:be: 43:54:6a:0e:89:f8:4d:f3:a5:4d:66:dd:e4:e4:6c:c7:df:04: b4:40:01:88:f1:32:05:be:d5:d0:7f:4f:b3:2b:d0:24:07:91: 35:9f:26:95:82:82:65:d1:cb:86:89:86:c8:3f:c2:a4:1b:11: 08:68:a2:1e:40:0e:a6:b8:7a:0a:eb:21:22:0c:7d:8d:1b:99: 6e:e2:f2:c9:91:7e:94:3a:b8:6d:3c:1f:45:86:fb:44:44:0e: ba:7e:6b:e9:58:7f:03:ca:d1:54:77:7d:36:2c:39:77:54:5d: 1c:af:f8:30:17:39:73:86:8b:1c:82:c8:cf:a3:3b:9e:6e:21: d2:9d:99:37:7f:92:f7:dd:41:02:31:f5:89:af:41:ff:eb:fc: 35:1f:8f:94:b4:86:a0:d9:dc:4f:01:36:c4:cc:37:49:4a:e0: 69:aa:78:bf:25:ad:dc:63:99:fc:18:5f:c8:8a:f3:ba:b8:dd: 15:13:4a:e3 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUdVQ9avsLydXjQSut1tfbJIbeVjQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMyMDAyMjQ0OVoX DTI1MDMxOTAyMjk0OVowMzExMC8GA1UEAxMoNkZCNERBRTc2QjEyQ0EwMEUwNzM0 NEE0REQyRjkzMzIzMkVDMjE4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJtoSY7ArxYtfsDRTgY+0PckTlXpb+tLs6k9m0o42FQ7BTFXuSEL0TfPNu6V fhf9KRCRzaqLuAPLjLt248gMbMvuAeMMxptq2C+rs1SNPygkEErhx0kqu2x6BHcM WwUUtXi9Qj0i9PtbMqzT3Zvl63vEeTxalBPE4PSsSVkU5atUDS8gdPYJWawwvbNs JpSk9LXZXX7guC2snpNu56HSJqnY3hdTiTfwjUrBRHF2BPPE6PPLierYCiqL0PsO 6+kzh3f00usigqE3U+Zhq+ICDK7oFNVdm3brI6sh8fJut3OxhDdjiURsE/ZWi9lw 3n1R7oBagnvFJF+987idCt2mYsMCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG+02udrEsoA4HNEpN0vkzIy7CGHMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83NmQ3MDM0Ni01YmRmLTQ5NjEtYTc0Zi01NWFlODU1NjcyYTEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2ZDcwMzQ2 LTViZGYtNDk2MS1hNzRmLTU1YWU4NTU2NzJhMS8wLzZGQjREQUU3NkIxMkNBMDBF MDczNDRBNEREMkY5MzMyMzJFQzIxODcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BABnTbkDBABn9eEwDQYJKoZIhvcNAQELBQADggEBAHmtvaHxnxvqq34GiIlCsfVZ P3455hwZxwx5lNKe3Vot84kDSU1VQ0ue3bIf/uJQyx/raI0iKo6+k/V+OwYdricc Ra9hHGiWvkNUag6J+E3zpU1m3eTkbMffBLRAAYjxMgW+1dB/T7Mr0CQHkTWfJpWC gmXRy4aJhsg/wqQbEQhooh5ADqa4egrrISIMfY0bmW7i8smRfpQ6uG08H0WG+0RE Drp+a+lYfwPK0VR3fTYsOXdUXRyv+DAXOXOGixyCyM+jO55uIdKdmTd/kvfdQQIx 9YmvQf/r/DUfj5S0hqDZ3E8BNsTMN0lK4GmqeL8lrdxjmfwYX8iK87q43RUTSuM= -----END CERTIFICATE-----Generated at Wed May 8 21:02:16 2024 by rpki-client on console-fra.rpki-client.org