$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer File: B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer (raw, json) Hash identifier: G3kHlWoJouZz+gwX7MTO7nBDEp0XmuBQ6sR59QahVrs= Subject key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 45600C96EC66B4810D6CC24E763E2FFBDE9BAF61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft caRepository: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 12 Mar 2024 18:39:14 +0000 Certificate not after: Tue 11 Mar 2025 18:44:14 +0000 Subordinate resources: AS: 59153 IP: 103.253.212.0/22 IP: 202.10.32.0/20 IP: 2001:df1:7800::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:60:0c:96:ec:66:b4:81:0d:6c:c2:4e:76:3e:2f:fb:de:9b:af:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 12 18:39:14 2024 GMT Not After : Mar 11 18:44:14 2025 GMT Subject: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:33:fe:91:78:fe:87:f0:5a:30:67:6b:5d:7d: da:30:18:76:a7:98:15:3d:be:47:a8:a4:4c:b9:fc: 83:85:03:b7:8d:a4:94:60:e3:51:e4:0d:40:93:c4: 75:fb:0e:2b:26:53:c0:1d:e4:33:28:4f:2a:88:00: cd:09:24:2e:50:2c:cb:94:2a:fd:ef:a1:9e:93:82: 23:12:22:69:10:a9:1c:0f:29:46:1c:7e:2f:80:8f: c0:88:16:82:40:b1:36:35:28:da:eb:74:cf:65:fd: c4:2b:12:3c:50:1e:0a:9f:f2:44:cc:6a:82:24:51: 9c:c9:29:db:fc:d4:9d:ca:25:91:fe:8c:4d:bc:56: 40:04:6c:5e:82:7b:71:0a:39:ab:80:21:38:67:14: ac:e5:df:70:74:2d:70:f5:96:39:22:59:2b:08:5d: ce:94:d3:46:c6:7e:a4:77:d9:d8:d9:7f:7a:cd:51: bb:72:15:3b:85:44:a5:6f:67:47:3f:7f:df:35:c9: 0d:5b:e1:b0:54:26:4f:3b:47:6d:88:4a:38:f0:45: 16:f9:5e:e7:d2:f1:c3:76:64:8c:4d:d2:82:f0:70: 54:8a:49:00:67:c3:be:37:2e:56:63:60:69:ed:40: 06:c0:0c:e5:c9:44:58:4d:0f:7a:1e:93:1f:70:e2: 2d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.253.212.0/22 202.10.32.0/20 IPv6: 2001:df1:7800::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59153 Signature Algorithm: sha256WithRSAEncryption 47:62:3e:4f:c9:ff:91:f4:22:22:a4:90:e4:f5:4f:51:9d:46: 0c:3f:c8:2a:a1:65:fe:8e:52:69:24:e5:ec:90:cf:f9:17:bf: d9:c9:00:75:5a:55:8b:da:35:4d:07:f8:a8:b4:96:4e:85:88: 2a:e1:ab:a5:11:23:2b:0b:5f:0c:b4:a7:5d:1b:14:fc:4c:0b: ad:c5:0e:0d:73:a9:b4:7e:01:3b:7c:f7:49:84:92:b4:30:b3: 5c:b7:b1:39:00:94:71:9c:fd:3b:73:18:f3:0a:a6:1e:1c:5c: 3b:05:1d:79:70:c8:d9:dd:29:c1:d1:01:0d:b3:20:c4:c2:b3: 41:3b:b8:13:a8:29:e0:ed:f1:cf:71:45:6a:49:34:e8:e8:42: 96:dc:48:cd:f2:da:65:48:7a:d8:e1:a3:20:66:7c:02:6e:1c: aa:1a:1a:36:ae:4e:70:cd:29:82:d8:2c:0a:f0:7d:c4:24:b4: d1:b9:2c:da:35:86:b2:1f:7f:23:ac:c5:eb:71:f1:26:49:8d: 1e:63:0b:38:f4:ff:a6:66:59:66:1b:c8:7f:dd:5f:d9:b9:0b: 66:c7:62:78:b8:f4:0c:36:52:5f:4b:88:79:c2:4d:3c:4b:e5: 94:a5:90:4a:0e:2c:ed:7c:18:f2:e3:78:15:29:fc:75:15:6f: d5:52:74:40 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURWAMluxmtIENbMJOdj4v+96br2EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMxMjE4MzkxNFoX DTI1MDMxMTE4NDQxNFowMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2 QzJDMEIyOTdBMTA5MkFBQkU2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANQz/pF4/ofwWjBna1192jAYdqeYFT2+R6ikTLn8g4UDt42klGDjUeQNQJPE dfsOKyZTwB3kMyhPKogAzQkkLlAsy5Qq/e+hnpOCIxIiaRCpHA8pRhx+L4CPwIgW gkCxNjUo2ut0z2X9xCsSPFAeCp/yRMxqgiRRnMkp2/zUncolkf6MTbxWQARsXoJ7 cQo5q4AhOGcUrOXfcHQtcPWWOSJZKwhdzpTTRsZ+pHfZ2Nl/es1Ru3IVO4VEpW9n Rz9/3zXJDVvhsFQmTztHbYhKOPBFFvle59Lxw3ZkjE3SgvBwVIpJAGfDvjcuVmNg ae1ABsAM5clEWE0Peh6TH3DiLRkCAwEAAaOCAuswggLnMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLbxMiMhQS79BBpsLAspehCSqr5uMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBm LWU0YjMtNGE0ZS05N2ZkLWY2MWFiMTdkZWVlZC8wL0I2RjEzMjIzMjE0MTJFRkQw NDFBNkMyQzBCMjk3QTEwOTJBQUJFNkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BAJn/dQDBATKCiAwDwQCAAIwCQMHACABDfF4ADAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMA5xEwDQYJKoZIhvcNAQELBQADggEBAEdiPk/J/5H0IiKkkOT1T1GdRgw/ yCqhZf6OUmkk5eyQz/kXv9nJAHVaVYvaNU0H+Ki0lk6FiCrhq6URIysLXwy0p10b FPxMC63FDg1zqbR+ATt890mEkrQws1y3sTkAlHGc/TtzGPMKph4cXDsFHXlwyNnd KcHRAQ2zIMTCs0E7uBOoKeDt8c9xRWpJNOjoQpbcSM3y2mVIetjhoyBmfAJuHKoa GjauTnDNKYLYLArwfcQktNG5LNo1hrIffyOsxetx8SZJjR5jCzj0/6ZmWWYbyH/d X9m5C2bHYni49Aw2Ul9LiHnCTTxL5ZSlkEoOLO18GPLjeBUp/HUVb9VSdEA= -----END CERTIFICATE-----Generated at Tue May 7 16:42:44 2024 by rpki-client on console-ams.rpki-client.org