$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer File: B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer (raw, json) Hash identifier: iKeeKw8QIY5TOGKRPrI5cSwgQyCQ+7QDB8WEPoI9WoU= Subject key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2654E947546668CB32A21CC26B5383591F95E59F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft caRepository: rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 17 Oct 2023 09:23:30 +0000 Certificate not after: Tue 15 Oct 2024 09:28:30 +0000 Subordinate resources: AS: 137363 IP: 103.116.172.0/22 IP: 202.10.32.0/23 IP: 202.10.48.0/21 IP: 202.10.62.0/24 IP: 2402:fdc0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:54:e9:47:54:66:68:cb:32:a2:1c:c2:6b:53:83:59:1f:95:e5:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 17 09:23:30 2023 GMT Not After : Oct 15 09:28:30 2024 GMT Subject: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c5:f2:a1:8a:e2:8b:a8:9d:2e:1f:c9:f5:b9: 62:68:13:ae:c4:26:f8:b9:a4:4f:51:fd:0b:6e:ce: 1e:41:74:19:f1:03:ca:b1:0f:7e:31:88:c2:02:2d: 5f:fd:1c:70:93:8e:63:8c:ee:15:e7:55:3d:92:e7: af:d8:f8:0a:0a:01:f1:e6:b9:f4:1d:a8:7f:fc:db: b3:b1:0c:d9:b4:48:a1:80:40:98:21:24:a4:c6:4d: 72:fe:da:5d:2a:f4:f1:8c:0f:2f:84:d1:85:ef:23: fa:bd:cb:42:53:97:d7:04:53:f1:ef:d2:02:0d:a7: 0f:df:e6:1b:d4:57:02:70:bf:92:14:1e:e8:b0:86: 0e:94:63:4d:a6:b6:37:3f:d1:34:81:5d:81:85:1d: c5:c5:86:24:ae:42:8e:23:77:32:65:ce:c9:d5:9a: da:bc:18:ae:7a:04:9b:94:62:46:7a:c0:44:fd:aa: cf:62:04:f8:2a:ab:e8:d7:99:33:bb:08:8a:40:de: 22:4e:da:cc:b6:ce:a3:b4:7d:59:a4:e3:6d:d9:cf: 71:ae:fc:2b:44:04:3b:b9:6d:43:e8:13:50:49:61: 78:c0:90:f4:76:c2:11:d1:53:4a:91:86:8e:ba:d1: 4b:97:ed:e9:0e:4b:3a:2b:a3:1e:7f:1f:09:b4:9c: 14:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.116.172.0/22 202.10.32.0/23 202.10.48.0/21 202.10.62.0/24 IPv6: 2402:fdc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 137363 Signature Algorithm: sha256WithRSAEncryption 7d:5e:8e:b2:72:c6:e8:b1:b7:ab:70:6d:2f:ad:8a:6d:36:a5: 5a:ca:20:b4:7b:ef:95:1c:4e:1b:d8:a1:fd:95:35:72:a0:13: 84:53:a9:ee:a1:a1:7d:cd:e0:7d:57:2b:1d:c7:fa:10:f8:0c: f1:ef:65:23:72:76:30:63:3d:4a:51:85:bf:1f:cb:83:98:0f: 81:25:c3:27:e4:b6:97:a0:de:44:8c:01:27:03:9c:7e:61:ee: 16:87:b2:a2:f1:0c:70:c8:f5:d0:e7:32:2f:40:0d:84:d7:a6: 85:32:02:86:d5:df:8a:03:f1:c4:ed:17:f6:ef:e3:1f:a9:08: 96:59:7e:44:42:13:e3:63:c5:bf:4c:8f:89:1c:55:86:04:9e: 48:69:0b:a7:ad:ae:5f:b9:05:ab:49:28:fe:c0:71:a1:f2:ca: 63:fb:55:55:55:b8:6a:f4:21:38:fe:2b:f1:65:bc:fd:31:ef: 2f:f9:24:99:82:18:df:4f:a8:96:92:91:28:af:f5:a1:77:58: 26:7c:3f:77:04:e4:f9:71:ec:0c:5e:64:8b:c9:57:85:af:3d: 7c:17:29:0d:a2:d4:62:ef:e8:c9:4d:9c:d0:a7:fd:1e:fc:d2: 39:89:5a:5b:03:35:5d:2a:db:ff:0c:f6:18:09:b5:9a:9f:4c: c3:c8:16:b9 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgIUJlTpR1RmaMsyohzCa1ODWR+V5Z8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAxNzA5MjMzMFoX DTI0MTAxNTA5MjgzMFowMzExMC8GA1UEAxMoQjZFRTFGNjFENkU4RTlFRUM2NDBD Q0MxRDc5MURCQTEyNDk5M0NBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPF8qGK4ouonS4fyfW5YmgTrsQm+LmkT1H9C27OHkF0GfEDyrEPfjGIwgIt X/0ccJOOY4zuFedVPZLnr9j4CgoB8ea59B2of/zbs7EM2bRIoYBAmCEkpMZNcv7a XSr08YwPL4TRhe8j+r3LQlOX1wRT8e/SAg2nD9/mG9RXAnC/khQe6LCGDpRjTaa2 Nz/RNIFdgYUdxcWGJK5CjiN3MmXOydWa2rwYrnoEm5RiRnrARP2qz2IE+Cqr6NeZ M7sIikDeIk7azLbOo7R9WaTjbdnPca78K0QEO7ltQ+gTUElheMCQ9HbCEdFTSpGG jrrRS5ft6Q5LOiujHn8fCbScFFUCAwEAAaOCAvUwggLxMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLbuH2HW6OnuxkDMwdeR26EkmTyjMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMTA4NWI0YS1mNTczLTQyZjMtODI1Yy0xY2YwYzg3MmIxNTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxMDg1YjRh LWY1NzMtNDJmMy04MjVjLTFjZjBjODcyYjE1Mi8wL0I2RUUxRjYxRDZFOEU5RUVD NjQwQ0NDMUQ3OTFEQkExMjQ5OTNDQTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgD BAJndKwDBAHKCiADBAPKCjADBADKCj4wDQQCAAIwBwMFACQC/cAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAhiTMA0GCSqGSIb3DQEBCwUAA4IBAQB9Xo6ycsbosber cG0vrYptNqVayiC0e++VHE4b2KH9lTVyoBOEU6nuoaF9zeB9Vysdx/oQ+Azx72Uj cnYwYz1KUYW/H8uDmA+BJcMn5LaXoN5EjAEnA5x+Ye4Wh7Ki8QxwyPXQ5zIvQA2E 16aFMgKG1d+KA/HE7Rf27+MfqQiWWX5EQhPjY8W/TI+JHFWGBJ5IaQunra5fuQWr SSj+wHGh8spj+1VVVbhq9CE4/ivxZbz9Me8v+SSZghjfT6iWkpEor/Whd1gmfD93 BOT5cewMXmSLyVeFrz18FykNotRi7+jJTZzQp/0e/NI5iVpbAzVdKtv/DPYYCbWa n0zDyBa5 -----END CERTIFICATE-----Generated at Wed May 8 14:59:58 2024 by rpki-client on console-ams.rpki-client.org