$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer File: C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer (raw, json) Hash identifier: jxwB12+AN97WIeafMgKEiJW6qXEuttpErax6enOSjwU= Subject key identifier: C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5F1A1C429E540DBA958D70E02A575E21AF66882D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft caRepository: rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 18 Sep 2024 20:20:45 +0000 Certificate not after: Wed 17 Sep 2025 20:25:45 +0000 Subordinate resources: IP: 103.160.212.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:1a:1c:42:9e:54:0d:ba:95:8d:70:e0:2a:57:5e:21:af:66:88:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 18 20:20:45 2024 GMT Not After : Sep 17 20:25:45 2025 GMT Subject: CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ae:c1:e2:a5:ea:21:38:aa:00:55:34:93:99: 9d:b3:b5:ab:7d:8b:38:2a:16:88:43:43:f4:88:71: 42:6b:48:63:d2:f1:5c:2c:05:7d:01:aa:04:37:a0: 7a:f9:48:86:1d:e0:a1:64:46:8e:77:02:a0:7e:54: 04:98:d6:64:f8:18:67:cb:f6:5d:17:72:0c:8c:fe: b2:df:9b:bc:c8:83:e4:7a:29:9a:6e:9f:4f:6c:34: a3:93:81:5b:b9:a1:66:6a:be:73:1d:8e:ff:be:0e: f0:b0:bd:1d:45:66:ec:56:34:ca:3c:2c:4c:a8:90: 29:5c:ef:ff:5e:e3:c3:27:25:b7:1c:82:db:06:92: d3:8b:46:02:7f:40:1a:73:a0:83:ea:c9:1f:85:9c: 1f:ea:f2:ca:e0:30:ad:73:94:0c:1c:f7:75:6b:c7: 47:93:b2:b8:e3:22:81:e8:a7:51:be:a8:0a:15:d5: 86:92:cf:18:90:b9:0d:d2:94:8e:b8:38:8f:4f:0f: bd:41:ab:53:f2:c4:a2:7f:01:99:21:e5:fd:26:b5: 77:8a:3b:ef:51:d3:19:5c:9d:d1:ac:5f:13:bb:12: 00:bc:f1:aa:0c:28:5a:29:84:8f:68:79:75:83:38: 40:50:75:ed:4c:02:2f:b2:8b:32:90:25:9f:16:bf: f3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.212.0/23 Signature Algorithm: sha256WithRSAEncryption 75:95:77:24:64:0e:fe:1f:f7:35:68:fd:a9:ed:d6:cc:08:cc: fa:6e:2a:46:8a:12:28:e8:dd:6d:d5:04:b6:49:9c:d6:12:5f: 96:bd:37:ac:c5:7a:4e:32:72:b2:fd:83:41:42:a7:e3:78:e2: 8f:b1:0b:ab:6d:d3:a8:3b:fc:39:45:ad:bd:2c:79:7e:aa:7e: 1d:51:6c:6b:5f:da:47:88:01:27:db:95:2a:83:df:ed:94:84: 53:a9:ff:d0:13:42:83:7e:57:ed:a6:f0:ed:dd:0e:f7:21:6d: cb:50:98:68:b0:9f:07:4c:b6:14:51:a4:ac:4e:27:30:0f:1f: 76:3f:59:02:a1:cd:3f:50:72:ed:ed:ba:03:a6:34:89:77:17: a0:cc:71:ea:d1:3d:c7:46:4f:80:9b:25:d9:07:36:f8:04:0e: 34:25:3e:13:8b:87:7a:e0:6e:97:08:8e:6b:9e:9c:1a:3d:dd: c9:1d:d0:77:dc:ca:d4:2d:8e:55:32:e6:c0:dc:ad:88:e1:0e: ae:b6:6c:1c:6d:6f:49:06:40:3f:f9:1f:30:a6:a3:86:40:ad: 80:62:e7:76:46:f7:29:34:42:c4:f6:60:3d:65:37:d7:67:91: 9d:45:60:8d:02:a2:5a:c6:6c:bb:be:18:74:b2:c6:d6:9f:f5: ec:fc:59:6c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXxocQp5UDbqVjXDgKldeIa9miC0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxODIwMjA0NVoX DTI1MDkxNzIwMjU0NVowMzExMC8GA1UEAxMoQzZFM0EyMjgxN0NFNkUwOThERkM2 NzRCMjYyODhDODNENkMzRjFDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKOuweKl6iE4qgBVNJOZnbO1q32LOCoWiEND9IhxQmtIY9LxXCwFfQGqBDeg evlIhh3goWRGjncCoH5UBJjWZPgYZ8v2XRdyDIz+st+bvMiD5Hopmm6fT2w0o5OB W7mhZmq+cx2O/74O8LC9HUVm7FY0yjwsTKiQKVzv/17jwycltxyC2waS04tGAn9A GnOgg+rJH4WcH+ryyuAwrXOUDBz3dWvHR5OyuOMigeinUb6oChXVhpLPGJC5DdKU jrg4j08PvUGrU/LEon8BmSHl/Sa1d4o771HTGVyd0axfE7sSALzxqgwoWimEj2h5 dYM4QFB17UwCL7KLMpAlnxa/8y8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMbjoigXzm4JjfxnSyYojIPWw/HOMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82YmVlMWVlMS1hNWI1LTRjNjQtYmJiYi0yNjM2MzUyZGFjZmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZiZWUxZWUx LWE1YjUtNGM2NC1iYmJiLTI2MzYzNTJkYWNmYy8wL0M2RTNBMjI4MTdDRTZFMDk4 REZDNjc0QjI2Mjg4QzgzRDZDM0YxQ0UubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnoNQwDQYJKoZIhvcNAQELBQADggEBAHWVdyRkDv4f9zVo/ant1swIzPpuKkaK Eijo3W3VBLZJnNYSX5a9N6zFek4ycrL9g0FCp+N44o+xC6tt06g7/DlFrb0seX6q fh1RbGtf2keIASfblSqD3+2UhFOp/9ATQoN+V+2m8O3dDvchbctQmGiwnwdMthRR pKxOJzAPH3Y/WQKhzT9Qcu3tugOmNIl3F6DMcerRPcdGT4CbJdkHNvgEDjQlPhOL h3rgbpcIjmuenBo93ckd0HfcytQtjlUy5sDcrYjhDq62bBxtb0kGQD/5HzCmo4ZA rYBi53ZG9yk0QsT2YD1lN9dnkZ1FYI0ColrGbLu+GHSyxtaf9ez8WWw= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:51 2024 by rpki-client on console-ams.rpki-client.org