$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A6053DEB0B12DBEE36D52629512562089CCBC1A1.cer File: A6053DEB0B12DBEE36D52629512562089CCBC1A1.cer (raw, json) Hash identifier: 9q7lxPRZUNlZtIewWn0U8iYwebA3ULgn7UpKFbRO2zs= Subject key identifier: A6:05:3D:EB:0B:12:DB:EE:36:D5:26:29:51:25:62:08:9C:CB:C1:A1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3E5669B5ED42C51082DC05B19B581D7B0D3971D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/A6053DEB0B12DBEE36D52629512562089CCBC1A1.mft caRepository: rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 30 Jan 2024 16:20:23 +0000 Certificate not after: Tue 28 Jan 2025 16:25:23 +0000 Subordinate resources: IP: 103.104.99.0/24 IP: 2001:df3:3900::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:56:69:b5:ed:42:c5:10:82:dc:05:b1:9b:58:1d:7b:0d:39:71:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 30 16:20:23 2024 GMT Not After : Jan 28 16:25:23 2025 GMT Subject: CN=A6053DEB0B12DBEE36D52629512562089CCBC1A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:2a:43:9e:0d:3a:41:73:a3:3d:b0:90:b2:b0: 7d:7e:50:c6:b1:21:42:df:ed:3a:cd:43:94:98:31: 67:4e:57:e8:7f:dd:f6:3e:4f:b1:66:49:c0:94:a9: 3b:d7:01:fe:e0:10:4c:80:1e:6a:e8:3e:aa:13:65: 98:90:be:10:24:b4:a4:91:56:53:3a:b6:a8:6e:fa: d1:04:7e:15:20:fc:d1:00:90:0c:72:0b:31:4c:87: 8a:3e:af:ec:d7:a8:5e:30:9a:5f:f6:10:05:37:40: dc:31:da:7b:4b:83:ee:7d:15:3f:16:24:34:02:26: d3:db:df:9f:33:b3:bf:5e:e2:cd:ec:2f:f6:e0:d3: a5:69:49:53:5e:4e:51:a3:9b:e6:53:6b:5b:a9:0a: d1:24:0e:b5:5a:23:a8:be:cd:c4:c2:3d:e2:a8:05: 5e:a0:83:9b:34:ea:76:64:5c:35:dc:aa:b0:9e:99: dc:51:18:76:5c:f8:86:06:1d:43:ba:43:d1:79:f8: 0c:56:c1:b4:b9:45:5a:e0:f0:7e:73:7e:74:8f:23: eb:7b:bf:f5:7f:3d:88:a0:33:6f:a6:e6:68:9b:10: 63:d9:bb:08:8e:8a:00:1f:9c:83:8d:0b:6e:65:56: f5:60:f0:23:df:a9:ff:6c:a1:b6:c7:3a:ea:af:81: d7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A6:05:3D:EB:0B:12:DB:EE:36:D5:26:29:51:25:62:08:9C:CB:C1:A1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/A6053DEB0B12DBEE36D52629512562089CCBC1A1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.104.99.0/24 IPv6: 2001:df3:3900::/48 Signature Algorithm: sha256WithRSAEncryption 13:25:43:51:e0:f3:8c:a6:bb:49:3f:c2:a6:22:9b:28:ff:6b: 25:31:ea:1c:0f:20:c5:58:ec:ca:34:4d:3e:11:1f:ea:06:51: a6:e1:19:9c:a2:9c:f5:89:f8:4c:50:2e:de:a4:77:7f:e7:51: 9e:34:d9:b8:99:d8:e1:b0:72:d0:e4:93:ca:66:cb:65:70:c1: 6f:60:54:c3:b2:ae:e8:86:1b:7f:39:83:89:0e:93:67:f7:b6: bb:6c:81:ef:f5:c2:a5:3f:99:43:54:37:b1:92:65:96:13:e3: a7:0a:eb:3f:a0:13:83:6e:e0:85:4f:2e:7b:c1:db:e2:05:18: c8:a6:54:75:5b:a8:bd:88:13:d2:f8:92:60:3a:00:84:22:fa: 93:d1:d9:57:86:a6:55:c5:1a:0f:49:c7:ef:c7:73:5c:09:5a: e0:ac:28:bb:74:0f:dc:15:3c:f8:9f:64:f9:7d:be:7c:d3:94: 8c:70:5a:19:fc:b0:16:b6:9d:af:86:3d:4c:61:25:7e:75:ff: 74:7b:3d:69:c1:23:f8:18:0b:14:50:82:97:1c:3e:39:f0:73: e0:7b:26:8c:5f:6c:62:c5:e7:bb:87:6c:59:db:3d:f7:96:89: 24:55:f0:3b:75:3b:6f:6f:74:de:68:8c:7e:13:6f:56:ff:d5: 8a:4a:9a:2f -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUPlZpte1CxRCC3AWxm1gdew05cdAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEzMDE2MjAyM1oX DTI1MDEyODE2MjUyM1owMzExMC8GA1UEAxMoQTYwNTNERUIwQjEyREJFRTM2RDUy NjI5NTEyNTYyMDg5Q0NCQzFBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO8qQ54NOkFzoz2wkLKwfX5QxrEhQt/tOs1DlJgxZ05X6H/d9j5PsWZJwJSp O9cB/uAQTIAeaug+qhNlmJC+ECS0pJFWUzq2qG760QR+FSD80QCQDHILMUyHij6v 7NeoXjCaX/YQBTdA3DHae0uD7n0VPxYkNAIm09vfnzOzv17izewv9uDTpWlJU15O UaOb5lNrW6kK0SQOtVojqL7NxMI94qgFXqCDmzTqdmRcNdyqsJ6Z3FEYdlz4hgYd Q7pD0Xn4DFbBtLlFWuDwfnN+dI8j63u/9X89iKAzb6bmaJsQY9m7CI6KAB+cg40L bmVW9WDwI9+p/2yhtsc66q+B1wMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKYFPesLEtvuNtUmKVElYgicy8GhMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jM2Q3ZjllYi0zYzJkLTQxYTEtOTA4MS0wNzgwYTU4ODczZWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzZDdmOWVi LTNjMmQtNDFhMS05MDgxLTA3ODBhNTg4NzNlYS8wL0E2MDUzREVCMEIxMkRCRUUz NkQ1MjYyOTUxMjU2MjA4OUNDQkMxQTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnaGMwDwQCAAIwCQMHACABDfM5ADANBgkqhkiG9w0BAQsFAAOCAQEAEyVDUeDz jKa7ST/CpiKbKP9rJTHqHA8gxVjsyjRNPhEf6gZRpuEZnKKc9Yn4TFAu3qR3f+dR njTZuJnY4bBy0OSTymbLZXDBb2BUw7Ku6IYbfzmDiQ6TZ/e2u2yB7/XCpT+ZQ1Q3 sZJllhPjpwrrP6ATg27ghU8ue8Hb4gUYyKZUdVuovYgT0viSYDoAhCL6k9HZV4am VcUaD0nH78dzXAla4Kwou3QP3BU8+J9k+X2+fNOUjHBaGfywFradr4Y9TGElfnX/ dHs9acEj+BgLFFCClxw+OfBz4HsmjF9sYsXnu4dsWds995aJJFXwO3U7b2903miM fhNvVv/VikqaLw== -----END CERTIFICATE-----Generated at Wed May 8 10:06:51 2024 by rpki-client on console-ams.rpki-client.org