$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A6053DEB0B12DBEE36D52629512562089CCBC1A1.cer File: A6053DEB0B12DBEE36D52629512562089CCBC1A1.cer (raw, json) Hash identifier: I9bxmTPNLJRmhC1a6o7m8YdTSkHQnsWkq8Z8sBfx0ws= Subject key identifier: A6:05:3D:EB:0B:12:DB:EE:36:D5:26:29:51:25:62:08:9C:CB:C1:A1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 27EFBE0D72E77939E87C0155AA7E0FC7566AE375 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/A6053DEB0B12DBEE36D52629512562089CCBC1A1.mft caRepository: rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 01 Jan 2025 03:44:27 +0000 Certificate not after: Wed 31 Dec 2025 03:49:27 +0000 Subordinate resources: IP: 103.104.99.0/24 IP: 2001:df3:3900::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ef:be:0d:72:e7:79:39:e8:7c:01:55:aa:7e:0f:c7:56:6a:e3:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jan 1 03:44:27 2025 GMT Not After : Dec 31 03:49:27 2025 GMT Subject: CN=A6053DEB0B12DBEE36D52629512562089CCBC1A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:2a:43:9e:0d:3a:41:73:a3:3d:b0:90:b2:b0: 7d:7e:50:c6:b1:21:42:df:ed:3a:cd:43:94:98:31: 67:4e:57:e8:7f:dd:f6:3e:4f:b1:66:49:c0:94:a9: 3b:d7:01:fe:e0:10:4c:80:1e:6a:e8:3e:aa:13:65: 98:90:be:10:24:b4:a4:91:56:53:3a:b6:a8:6e:fa: d1:04:7e:15:20:fc:d1:00:90:0c:72:0b:31:4c:87: 8a:3e:af:ec:d7:a8:5e:30:9a:5f:f6:10:05:37:40: dc:31:da:7b:4b:83:ee:7d:15:3f:16:24:34:02:26: d3:db:df:9f:33:b3:bf:5e:e2:cd:ec:2f:f6:e0:d3: a5:69:49:53:5e:4e:51:a3:9b:e6:53:6b:5b:a9:0a: d1:24:0e:b5:5a:23:a8:be:cd:c4:c2:3d:e2:a8:05: 5e:a0:83:9b:34:ea:76:64:5c:35:dc:aa:b0:9e:99: dc:51:18:76:5c:f8:86:06:1d:43:ba:43:d1:79:f8: 0c:56:c1:b4:b9:45:5a:e0:f0:7e:73:7e:74:8f:23: eb:7b:bf:f5:7f:3d:88:a0:33:6f:a6:e6:68:9b:10: 63:d9:bb:08:8e:8a:00:1f:9c:83:8d:0b:6e:65:56: f5:60:f0:23:df:a9:ff:6c:a1:b6:c7:3a:ea:af:81: d7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A6:05:3D:EB:0B:12:DB:EE:36:D5:26:29:51:25:62:08:9C:CB:C1:A1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/A6053DEB0B12DBEE36D52629512562089CCBC1A1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.104.99.0/24 IPv6: 2001:df3:3900::/48 Signature Algorithm: sha256WithRSAEncryption 4b:44:ff:9d:36:f0:72:76:b6:12:99:b3:55:86:85:1d:7c:64: 52:bb:d3:e5:fd:db:03:5f:af:ea:d3:f8:4b:94:45:41:bf:f6: bb:cf:a6:fd:d5:32:da:f7:bf:e5:e2:b5:26:05:72:8e:fe:ef: 03:7e:b2:35:c0:e7:83:b8:4a:fb:c8:04:4c:32:6f:b4:a1:d6: 89:5e:89:b7:02:ed:9f:4d:9a:83:3d:5f:9c:ee:5b:6d:7c:b9: 22:04:3c:ba:96:bd:dd:71:2c:ba:b2:ae:f0:8a:5e:43:9f:f6: 0b:c2:62:92:83:4b:87:54:c8:ac:d8:14:86:3e:73:96:40:cd: 76:93:eb:1a:3c:2e:a9:7e:2a:e0:9e:61:8c:75:21:64:fb:f2: c9:b1:19:3c:94:30:e9:09:ef:0c:48:ab:20:77:57:5c:ce:fc: d5:9e:53:56:c5:e6:0e:ab:5e:23:87:0d:e5:09:c7:88:40:7a: b1:92:e0:a7:05:e3:c9:f1:10:09:78:22:4b:0e:b6:3b:f6:0d: 42:c6:01:9c:2e:bc:00:2b:0d:11:4e:28:74:d5:ff:df:db:62: b0:bd:13:27:23:31:09:52:d7:3b:e7:83:b1:08:f2:89:83:73: f8:cd:cc:32:d7:94:a7:8d:b7:70:db:77:9c:d1:62:a6:21:da: d3:40:c4:05 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUJ+++DXLneTnofAFVqn4Px1Zq43UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEwMTAzNDQyN1oX DTI1MTIzMTAzNDkyN1owMzExMC8GA1UEAxMoQTYwNTNERUIwQjEyREJFRTM2RDUy NjI5NTEyNTYyMDg5Q0NCQzFBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO8qQ54NOkFzoz2wkLKwfX5QxrEhQt/tOs1DlJgxZ05X6H/d9j5PsWZJwJSp O9cB/uAQTIAeaug+qhNlmJC+ECS0pJFWUzq2qG760QR+FSD80QCQDHILMUyHij6v 7NeoXjCaX/YQBTdA3DHae0uD7n0VPxYkNAIm09vfnzOzv17izewv9uDTpWlJU15O UaOb5lNrW6kK0SQOtVojqL7NxMI94qgFXqCDmzTqdmRcNdyqsJ6Z3FEYdlz4hgYd Q7pD0Xn4DFbBtLlFWuDwfnN+dI8j63u/9X89iKAzb6bmaJsQY9m7CI6KAB+cg40L bmVW9WDwI9+p/2yhtsc66q+B1wMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKYFPesLEtvuNtUmKVElYgicy8GhMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jM2Q3ZjllYi0zYzJkLTQxYTEtOTA4MS0wNzgwYTU4ODczZWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzZDdmOWVi LTNjMmQtNDFhMS05MDgxLTA3ODBhNTg4NzNlYS8wL0E2MDUzREVCMEIxMkRCRUUz NkQ1MjYyOTUxMjU2MjA4OUNDQkMxQTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnaGMwDwQCAAIwCQMHACABDfM5ADANBgkqhkiG9w0BAQsFAAOCAQEAS0T/nTbw cna2EpmzVYaFHXxkUrvT5f3bA1+v6tP4S5RFQb/2u8+m/dUy2ve/5eK1JgVyjv7v A36yNcDng7hK+8gETDJvtKHWiV6JtwLtn02agz1fnO5bbXy5IgQ8upa93XEsurKu 8IpeQ5/2C8JikoNLh1TIrNgUhj5zlkDNdpPrGjwuqX4q4J5hjHUhZPvyybEZPJQw 6QnvDEirIHdXXM781Z5TVsXmDqteI4cN5QnHiEB6sZLgpwXjyfEQCXgiSw62O/YN QsYBnC68ACsNEU4odNX/39tisL0TJyMxCVLXO+eDsQjyiYNz+M3MMteUp423cNt3 nNFipiHa00DEBQ== -----END CERTIFICATE-----Generated at Sun Feb 16 20:47:46 2025 by rpki-client