$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer File: B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer (raw, json) Hash identifier: eqPNj7Hg3JGSRfExTTtxev1JmaDkx1YUl5nv3FapJi8= Subject key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0AD1C1604510A96EE2357CF047813C4167BD221A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft caRepository: rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 17 Sep 2024 22:50:28 +0000 Certificate not after: Tue 16 Sep 2025 22:55:28 +0000 Subordinate resources: AS: 137363 IP: 103.116.172.0/22 IP: 202.10.32.0/23 IP: 202.10.48.0/21 IP: 202.10.62.0/24 IP: 2402:fdc0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d1:c1:60:45:10:a9:6e:e2:35:7c:f0:47:81:3c:41:67:bd:22:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 17 22:50:28 2024 GMT Not After : Sep 16 22:55:28 2025 GMT Subject: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c5:f2:a1:8a:e2:8b:a8:9d:2e:1f:c9:f5:b9: 62:68:13:ae:c4:26:f8:b9:a4:4f:51:fd:0b:6e:ce: 1e:41:74:19:f1:03:ca:b1:0f:7e:31:88:c2:02:2d: 5f:fd:1c:70:93:8e:63:8c:ee:15:e7:55:3d:92:e7: af:d8:f8:0a:0a:01:f1:e6:b9:f4:1d:a8:7f:fc:db: b3:b1:0c:d9:b4:48:a1:80:40:98:21:24:a4:c6:4d: 72:fe:da:5d:2a:f4:f1:8c:0f:2f:84:d1:85:ef:23: fa:bd:cb:42:53:97:d7:04:53:f1:ef:d2:02:0d:a7: 0f:df:e6:1b:d4:57:02:70:bf:92:14:1e:e8:b0:86: 0e:94:63:4d:a6:b6:37:3f:d1:34:81:5d:81:85:1d: c5:c5:86:24:ae:42:8e:23:77:32:65:ce:c9:d5:9a: da:bc:18:ae:7a:04:9b:94:62:46:7a:c0:44:fd:aa: cf:62:04:f8:2a:ab:e8:d7:99:33:bb:08:8a:40:de: 22:4e:da:cc:b6:ce:a3:b4:7d:59:a4:e3:6d:d9:cf: 71:ae:fc:2b:44:04:3b:b9:6d:43:e8:13:50:49:61: 78:c0:90:f4:76:c2:11:d1:53:4a:91:86:8e:ba:d1: 4b:97:ed:e9:0e:4b:3a:2b:a3:1e:7f:1f:09:b4:9c: 14:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.116.172.0/22 202.10.32.0/23 202.10.48.0/21 202.10.62.0/24 IPv6: 2402:fdc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 137363 Signature Algorithm: sha256WithRSAEncryption 8a:e5:5b:9f:9d:1a:86:cb:06:c0:61:e3:5d:cc:56:30:d6:4a: f5:c9:d6:a4:e0:da:fa:a5:b2:9a:a0:8b:52:20:c8:c0:37:bb: 0e:6c:7a:28:2a:ff:e2:16:2f:4c:53:27:54:9e:45:23:cb:2c: d0:af:1a:6e:b3:7f:96:05:2d:d9:2c:e0:b2:90:db:5a:05:29: 09:4e:63:a5:a7:02:3f:6b:63:0d:ed:e4:c7:e5:9f:e9:38:61: c6:71:5b:c3:0f:6a:17:b1:65:9c:3c:d1:b3:65:dd:fb:9d:41: 8e:83:7f:fb:d1:e6:29:d8:8c:a2:b5:6d:60:1e:5c:4e:d4:58: 2a:e5:43:d5:97:f2:64:2b:02:c7:cf:44:0d:99:99:00:49:f3: 9c:85:50:66:fa:f9:e0:ce:1a:32:ad:6c:35:b0:07:d3:a9:87: 53:59:78:a0:b7:fc:66:13:9e:c0:0d:b7:de:ec:47:87:98:14: fc:aa:0b:41:5a:5c:cb:e4:5a:01:99:86:6d:50:eb:76:01:6a: 2c:b8:f4:9f:60:89:ee:b5:12:94:41:89:ef:d4:e7:7a:34:64: db:6e:c3:2d:5a:84:ae:14:31:cd:7c:f6:76:86:93:ae:84:56: e0:47:80:d4:be:96:ef:7a:a3:b8:1a:3e:f7:75:8c:72:a7:71: 38:7e:d2:06 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgIUCtHBYEUQqW7iNXzwR4E8QWe9IhowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxNzIyNTAyOFoX DTI1MDkxNjIyNTUyOFowMzExMC8GA1UEAxMoQjZFRTFGNjFENkU4RTlFRUM2NDBD Q0MxRDc5MURCQTEyNDk5M0NBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPF8qGK4ouonS4fyfW5YmgTrsQm+LmkT1H9C27OHkF0GfEDyrEPfjGIwgIt X/0ccJOOY4zuFedVPZLnr9j4CgoB8ea59B2of/zbs7EM2bRIoYBAmCEkpMZNcv7a XSr08YwPL4TRhe8j+r3LQlOX1wRT8e/SAg2nD9/mG9RXAnC/khQe6LCGDpRjTaa2 Nz/RNIFdgYUdxcWGJK5CjiN3MmXOydWa2rwYrnoEm5RiRnrARP2qz2IE+Cqr6NeZ M7sIikDeIk7azLbOo7R9WaTjbdnPca78K0QEO7ltQ+gTUElheMCQ9HbCEdFTSpGG jrrRS5ft6Q5LOiujHn8fCbScFFUCAwEAAaOCAvUwggLxMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLbuH2HW6OnuxkDMwdeR26EkmTyjMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMTA4NWI0YS1mNTczLTQyZjMtODI1Yy0xY2YwYzg3MmIxNTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxMDg1YjRh LWY1NzMtNDJmMy04MjVjLTFjZjBjODcyYjE1Mi8wL0I2RUUxRjYxRDZFOEU5RUVD NjQwQ0NDMUQ3OTFEQkExMjQ5OTNDQTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgD BAJndKwDBAHKCiADBAPKCjADBADKCj4wDQQCAAIwBwMFACQC/cAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAhiTMA0GCSqGSIb3DQEBCwUAA4IBAQCK5VufnRqGywbA YeNdzFYw1kr1ydak4Nr6pbKaoItSIMjAN7sObHooKv/iFi9MUydUnkUjyyzQrxpu s3+WBS3ZLOCykNtaBSkJTmOlpwI/a2MN7eTH5Z/pOGHGcVvDD2oXsWWcPNGzZd37 nUGOg3/70eYp2IyitW1gHlxO1Fgq5UPVl/JkKwLHz0QNmZkASfOchVBm+vngzhoy rWw1sAfTqYdTWXigt/xmE57ADbfe7EeHmBT8qgtBWlzL5FoBmYZtUOt2AWosuPSf YInutRKUQYnv1Od6NGTbbsMtWoSuFDHNfPZ2hpOuhFbgR4DUvpbveqO4Gj73dYxy p3E4ftIG -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:31 2024 by rpki-client on console-ams.rpki-client.org