$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer File: C00606846C7D0E540F5703EC90A0C331460D7ECA.cer (raw, json) Hash identifier: feOjF4xhN9fwH2oh1djLe+AUsf3MaQM2QyvatggmGd0= Subject key identifier: C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7AEF54D6DE34532239D3D20DFA3BE3B54BCFADBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft caRepository: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 17:28:05 +0000 Certificate not after: Mon 30 Jun 2025 17:33:05 +0000 Subordinate resources: IP: 103.71.160.0/22 IP: 2406:9880::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ef:54:d6:de:34:53:22:39:d3:d2:0d:fa:3b:e3:b5:4b:cf:ad:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 17:28:05 2024 GMT Not After : Jun 30 17:33:05 2025 GMT Subject: CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a7:c7:52:31:e2:15:9a:d0:08:30:0d:a2:67: 9d:11:4c:bc:20:bf:78:f4:a1:85:61:df:67:77:77: 61:77:18:de:dd:3a:f6:2d:ba:c2:ce:a9:98:39:49: ec:be:36:8c:15:73:58:77:cf:76:19:25:77:ac:68: 2c:68:d4:c5:0e:63:77:8c:e7:4f:4b:10:dd:e8:0e: 33:20:d8:b4:24:41:0e:f3:d7:19:8b:87:36:dd:09: 8f:4e:fe:30:0c:86:76:8b:2e:e8:1c:1a:df:7e:10: 3c:3a:32:82:ee:ae:1e:b4:ae:45:82:05:5e:76:84: 30:d9:17:e3:98:82:2f:e5:53:00:4f:cd:cc:b6:b8: 23:38:9d:ba:64:e3:97:0c:82:67:28:c4:c4:09:1e: 17:73:ea:1c:82:7e:bb:ba:ed:c6:69:2a:37:4f:05: ad:ee:ca:03:8b:a2:2d:1c:a6:bc:ab:01:63:6b:6f: ba:65:7c:f4:78:da:21:0c:06:cd:6a:e0:27:0d:a3: e6:9b:63:19:aa:96:97:f9:49:92:59:3b:7e:7a:95: 5b:4f:92:eb:1a:ed:cd:21:8f:b9:c2:81:33:66:a2: ac:78:6e:6e:ef:99:9c:49:21:6e:80:f4:d2:e1:6a: ac:91:4b:79:40:9e:b4:7a:7a:5d:ab:26:93:95:f9: b4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.71.160.0/22 IPv6: 2406:9880::/32 Signature Algorithm: sha256WithRSAEncryption 28:22:6f:9d:7e:c6:85:6e:62:93:b9:15:ed:eb:47:79:7c:48: 94:9d:8e:1f:04:2e:0b:25:8e:27:9d:a9:e4:34:f1:cb:20:36: e3:88:29:5c:22:aa:35:50:40:b3:d7:d4:6d:02:b6:7b:dc:3b: 4f:e7:ad:25:bb:80:3b:2a:b6:87:9c:8c:b5:28:a1:f7:10:7a: 8d:a1:5e:6a:51:94:70:c0:0c:f6:74:73:1b:4e:e1:8b:5d:45: 69:88:ae:d5:08:4e:0a:19:5b:a4:7f:6f:35:ff:27:79:d4:0e: 51:ff:53:c2:83:cf:fa:ba:dd:a6:8a:0f:49:1b:b1:aa:11:84: f2:91:ff:13:31:04:0b:56:f6:84:45:e7:d3:dc:32:84:f8:a6: bd:05:46:08:57:b6:62:7c:93:45:b6:b5:86:82:b7:2e:68:4d: 19:b1:94:d9:a6:e5:86:11:0b:37:3f:87:c7:79:0d:61:46:48: 53:fb:06:cb:75:84:8d:11:da:9d:68:dc:e9:8f:65:4d:94:73: 7f:79:a5:6c:25:2b:82:6f:0d:fc:52:54:a3:ce:1b:1e:7b:c8: 46:eb:4d:4c:5b:2c:44:cf:80:58:9e:7d:66:44:87:ca:74:8a: 49:21:ff:5e:95:af:5f:ec:43:84:1c:b2:b7:04:47:24:2b:62: d5:a9:be:a2 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUeu9U1t40UyI509IN+jvjtUvPrbowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE3MjgwNVoX DTI1MDYzMDE3MzMwNVowMzExMC8GA1UEAxMoQzAwNjA2ODQ2QzdEMEU1NDBGNTcw M0VDOTBBMEMzMzE0NjBEN0VDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO2nx1Ix4hWa0AgwDaJnnRFMvCC/ePShhWHfZ3d3YXcY3t069i26ws6pmDlJ 7L42jBVzWHfPdhkld6xoLGjUxQ5jd4znT0sQ3egOMyDYtCRBDvPXGYuHNt0Jj07+ MAyGdosu6Bwa334QPDoygu6uHrSuRYIFXnaEMNkX45iCL+VTAE/NzLa4IzidumTj lwyCZyjExAkeF3PqHIJ+u7rtxmkqN08Fre7KA4uiLRymvKsBY2tvumV89HjaIQwG zWrgJw2j5ptjGaqWl/lJklk7fnqVW0+S6xrtzSGPucKBM2airHhubu+ZnEkhboD0 0uFqrJFLeUCetHp6Xasmk5X5tJ0CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMAGBoRsfQ5UD1cD7JCgwzFGDX7KMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yMTMzNGQwMy1lYWU0LTRkMjAtYmE1NC1iMTg4OWQ5MjQ3YWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIxMzM0ZDAz LWVhZTQtNGQyMC1iYTU0LWIxODg5ZDkyNDdhYy8wL0MwMDYwNjg0NkM3RDBFNTQw RjU3MDNFQzkwQTBDMzMxNDYwRDdFQ0EubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnR6AwDQQCAAIwBwMFACQGmIAwDQYJKoZIhvcNAQELBQADggEBACgib51+xoVu YpO5Fe3rR3l8SJSdjh8ELgsljiedqeQ08csgNuOIKVwiqjVQQLPX1G0CtnvcO0/n rSW7gDsqtoecjLUoofcQeo2hXmpRlHDADPZ0cxtO4YtdRWmIrtUITgoZW6R/bzX/ J3nUDlH/U8KDz/q63aaKD0kbsaoRhPKR/xMxBAtW9oRF59PcMoT4pr0FRghXtmJ8 k0W2tYaCty5oTRmxlNmm5YYRCzc/h8d5DWFGSFP7Bst1hI0R2p1o3OmPZU2Uc395 pWwlK4JvDfxSVKPOGx57yEbrTUxbLETPgFiefWZEh8p0ikkh/16Vr1/sQ4QcsrcE RyQrYtWpvqI= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:51 2024 by rpki-client on console-ams.rpki-client.org