$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer File: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer (raw, json) Hash identifier: JCrmCDkJGqOmbSGDUIVKz9HbW+nL8rEqLGn3UdsESxk= Subject key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6DAACF712857FCFCEFDCE014203435804662A13E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft caRepository: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 18 Apr 2024 22:38:54 +0000 Certificate not after: Thu 17 Apr 2025 22:43:54 +0000 Subordinate resources: IP: 202.51.16.0/20 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:aa:cf:71:28:57:fc:fc:ef:dc:e0:14:20:34:35:80:46:62:a1:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 18 22:38:54 2024 GMT Not After : Apr 17 22:43:54 2025 GMT Subject: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c4:8c:9f:6e:0c:0e:1e:ce:10:c9:e0:c8:3d: 35:12:19:93:f7:39:7d:5e:0c:2f:68:41:02:48:9f: c9:fe:d1:b8:2e:e7:dc:94:d9:8a:da:7a:b7:7a:34: 0c:41:ad:7b:79:46:59:d0:35:2d:42:6d:9e:78:fe: 0e:d4:17:91:f2:4c:44:59:a3:5f:e7:a7:02:22:e7: 00:17:0e:15:bc:75:2a:1b:a7:a6:5f:c7:74:06:bf: 2b:06:f8:13:a4:15:51:6c:10:55:0f:e4:71:dc:7d: 1f:5e:cc:76:48:56:f3:02:a0:0e:23:31:66:8a:25: 79:4d:d5:9c:0e:4f:5a:29:ee:91:06:b6:dd:59:fb: 99:42:2b:86:a4:70:7d:a3:d5:1e:af:62:ec:69:80: 46:2b:ab:06:6d:38:88:29:cc:7e:2b:a8:95:45:d2: d3:e1:db:04:57:4b:24:38:e8:c4:1b:9b:b4:5b:d2: c4:42:13:ee:ea:d5:3c:14:7e:4f:cf:99:d3:ea:5e: 6b:46:ca:94:fc:6f:09:b5:d5:03:c0:98:28:10:61: f4:f5:88:80:84:a1:53:99:75:ce:b2:89:14:5a:c0: a9:0b:4d:a7:87:fe:b1:29:bd:71:94:b6:9f:66:c1: b6:60:e3:26:4c:18:17:53:f7:ea:b2:02:95:d8:bb: 75:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.16.0/20 Signature Algorithm: sha256WithRSAEncryption 0f:a2:28:d4:43:96:ef:62:33:e7:99:f3:1b:40:f9:2b:0e:57: b3:dd:14:48:87:c4:d5:f3:8e:67:34:51:f7:c6:e9:1d:63:e7: 1c:c0:71:bb:30:a0:58:ef:87:ae:67:2a:4f:17:ef:dd:26:6e: 36:ce:3f:2d:d0:aa:d2:95:5b:1e:74:4d:f1:fd:84:32:51:6a: 39:4e:f6:a6:0b:a3:03:eb:b3:55:c0:36:45:2d:52:2a:fb:da: d8:91:93:fa:5c:ed:12:0e:20:b0:88:32:ed:99:73:c6:f6:3d: 33:a3:75:ed:02:81:95:f2:b0:7a:5c:f4:ac:f1:5a:12:6b:b9: 46:ff:2a:77:83:b7:0c:ca:4b:cd:09:a0:ee:6b:dd:2a:ec:6f: c7:fa:6a:e3:2f:af:e4:ed:98:1d:15:b1:b9:d9:85:22:7d:1b: b4:ec:79:b8:9d:e7:e1:19:bf:b6:3b:c0:22:5d:07:70:3f:e6: 20:57:80:fd:ee:5f:10:b9:f9:4b:9e:14:49:24:c3:43:2d:2b: 30:78:d8:cb:a8:80:4d:ee:3a:01:23:b7:5e:b1:6a:12:63:52: 5c:ce:1e:21:3c:bf:e9:1d:40:88:5d:d6:f6:92:cb:e8:ca:01: 3f:bf:08:01:77:d6:6c:26:e1:3a:a8:f7:53:a2:f8:49:7e:97: f8:a0:85:fc -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbarPcShX/Pzv3OAUIDQ1gEZioT4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQxODIyMzg1NFoX DTI1MDQxNzIyNDM1NFowMzExMC8GA1UEAxMoOUU2QTY3RDVCOUQ3MjVDMUY0MDlB OUZCM0JGMzVBMDcxQUI0MjBBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3EjJ9uDA4ezhDJ4Mg9NRIZk/c5fV4ML2hBAkifyf7RuC7n3JTZitp6t3o0 DEGte3lGWdA1LUJtnnj+DtQXkfJMRFmjX+enAiLnABcOFbx1Khunpl/HdAa/Kwb4 E6QVUWwQVQ/kcdx9H17MdkhW8wKgDiMxZooleU3VnA5PWinukQa23Vn7mUIrhqRw faPVHq9i7GmARiurBm04iCnMfiuolUXS0+HbBFdLJDjoxBubtFvSxEIT7urVPBR+ T8+Z0+pea0bKlPxvCbXVA8CYKBBh9PWIgIShU5l1zrKJFFrAqQtNp4f+sSm9cZS2 n2bBtmDjJkwYF1P36rICldi7dc0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ5qZ9W51yXB9Amp+zvzWgcatCCgMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85OTRlNmIyZC0zZGRiLTQ2ZWItODNlZi1jOTliMjAwMzc4M2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5NGU2YjJk LTNkZGItNDZlYi04M2VmLWM5OWIyMDAzNzgzZi8wLzlFNkE2N0Q1QjlENzI1QzFG NDA5QTlGQjNCRjM1QTA3MUFCNDIwQTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATKMxAwDQYJKoZIhvcNAQELBQADggEBAA+iKNRDlu9iM+eZ8xtA+SsOV7PdFEiH xNXzjmc0UffG6R1j5xzAcbswoFjvh65nKk8X790mbjbOPy3QqtKVWx50TfH9hDJR ajlO9qYLowPrs1XANkUtUir72tiRk/pc7RIOILCIMu2Zc8b2PTOjde0CgZXysHpc 9KzxWhJruUb/KneDtwzKS80JoO5r3Srsb8f6auMvr+TtmB0VsbnZhSJ9G7Tsebid 5+EZv7Y7wCJdB3A/5iBXgP3uXxC5+UueFEkkw0MtKzB42MuogE3uOgEjt16xahJj UlzOHiE8v+kdQIhd1vaSy+jKAT+/CAF31mwm4Tqo91Oi+El+l/ighfw= -----END CERTIFICATE-----Generated at Wed May 8 09:50:34 2024 by rpki-client on console-fra.rpki-client.org