$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer File: 07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer (raw, json) Hash identifier: oKhh4piCZ0SfOLgaCfSogsnNEE8jj9SjMUIoOXjt4+0= Subject key identifier: 07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 70454346D0731EEFEA0C31E6E896D37AC97C673B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft caRepository: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Jul 2024 12:16:48 +0000 Certificate not after: Tue 01 Jul 2025 12:21:48 +0000 Subordinate resources: IP: 160.22.24.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:45:43:46:d0:73:1e:ef:ea:0c:31:e6:e8:96:d3:7a:c9:7c:67:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 2 12:16:48 2024 GMT Not After : Jul 1 12:21:48 2025 GMT Subject: CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c3:42:f0:11:d9:7c:3a:3d:33:c4:65:88:9e: ed:5d:1d:29:33:b4:df:48:a1:78:e3:b0:aa:c1:6b: 4e:dd:4d:ab:81:11:68:c4:ae:f6:38:40:a1:af:1a: 18:60:af:26:67:51:20:0f:85:c3:fc:33:9e:23:93: 00:b8:36:5c:06:dc:f2:58:2d:60:81:98:5e:5b:29: c6:e1:79:99:87:fd:3c:11:9c:98:aa:6e:a2:b9:0d: 14:87:b6:bf:00:13:20:04:df:6b:28:6c:68:ed:08: 5c:61:ec:49:4b:27:78:77:bf:59:d6:bc:c7:c3:40: eb:88:a0:52:c0:e1:e6:b3:67:82:33:ed:ec:4f:7e: 21:29:eb:5a:56:13:06:d9:89:eb:4d:41:94:eb:62: ff:a1:a0:08:82:26:2a:da:b4:74:a2:6b:7e:73:9c: 31:95:c9:8b:6b:90:0a:66:e5:bb:30:a0:fc:e7:bc: c4:83:0a:32:1a:50:a2:ee:f2:7a:7a:89:3d:f7:24: 27:bd:59:54:33:78:5f:83:68:16:54:fa:6a:03:ed: 8c:56:6d:55:36:cb:3f:7d:4d:84:da:c3:0c:41:c3: 6d:4b:3a:2a:2c:77:29:d2:63:b7:22:7f:c0:df:62: 9b:48:bb:96:2a:68:0e:0d:59:8e:4d:d5:f4:47:0f: 6d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.24.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:11:c9:93:32:13:f9:04:21:68:4a:be:40:4d:a8:38:55:77: ec:17:8f:49:41:be:d5:63:e8:c1:c9:ee:33:d0:76:a7:28:3a: 37:8e:65:c3:d4:50:5c:1a:be:af:91:f4:2d:cb:72:03:1a:70: b8:17:51:91:37:d9:af:9c:0f:50:36:9a:ea:3e:33:d4:8f:89: 63:57:e4:3f:1e:20:12:ca:b8:a4:b2:52:5e:3a:87:2d:95:8d: 1b:a0:42:0d:e4:50:47:34:30:4d:3d:66:9d:8c:6c:58:de:42: 7c:48:5c:e1:70:63:bc:04:be:56:4e:b8:f8:50:5a:f9:00:48: 21:bb:f5:dc:99:10:78:a5:fd:ab:51:74:b4:0b:9f:c5:81:92: 1e:b7:9e:11:7d:1d:9f:e3:c5:b8:fe:d5:08:84:cc:0e:f9:10: 40:50:f5:73:97:0d:43:14:be:bf:58:25:c3:ab:8b:c4:4b:70: 79:7f:7b:0c:de:a5:83:9a:49:cc:37:df:98:ee:9e:c5:0f:cc: d6:28:f1:f1:1c:b0:74:d2:23:37:ac:61:a7:76:43:3b:1b:f2: 8b:81:ac:16:40:80:fa:60:f5:f8:7e:05:9d:88:73:45:12:88: 97:e6:14:ce:50:71:dd:0c:e8:d0:9a:bf:ae:3c:29:00:cc:17: d4:cc:b5:66 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUcEVDRtBzHu/qDDHm6JbTesl8ZzswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDcwMjEyMTY0OFoX DTI1MDcwMTEyMjE0OFowMzExMC8GA1UEAxMoMDdBRDU4MEFCNUNENzZCOTQ4NTZG OUFDNzQyRURENzU3RTc4ODBCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXDQvAR2Xw6PTPEZYie7V0dKTO030iheOOwqsFrTt1Nq4ERaMSu9jhAoa8a GGCvJmdRIA+Fw/wzniOTALg2XAbc8lgtYIGYXlspxuF5mYf9PBGcmKpuorkNFIe2 vwATIATfayhsaO0IXGHsSUsneHe/Wda8x8NA64igUsDh5rNngjPt7E9+ISnrWlYT BtmJ601BlOti/6GgCIImKtq0dKJrfnOcMZXJi2uQCmbluzCg/Oe8xIMKMhpQou7y enqJPfckJ71ZVDN4X4NoFlT6agPtjFZtVTbLP31NhNrDDEHDbUs6Kix3KdJjtyJ/ wN9im0i7lipoDg1Zjk3V9EcPbWECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAetWAq1zXa5SFb5rHQu3XV+eICwMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lMjU2YmJiYS0xODI2LTRkODYtYjg3My0yZjZkZDYzMjU3NzEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UyNTZiYmJh LTE4MjYtNGQ4Ni1iODczLTJmNmRkNjMyNTc3MS8wLzA3QUQ1ODBBQjVDRDc2Qjk0 ODU2RjlBQzc0MkVERDc1N0U3ODgwQjAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFhgwDQYJKoZIhvcNAQELBQADggEBAF8RyZMyE/kEIWhKvkBNqDhVd+wXj0lB vtVj6MHJ7jPQdqcoOjeOZcPUUFwavq+R9C3LcgMacLgXUZE32a+cD1A2muo+M9SP iWNX5D8eIBLKuKSyUl46hy2VjRugQg3kUEc0ME09Zp2MbFjeQnxIXOFwY7wEvlZO uPhQWvkASCG79dyZEHil/atRdLQLn8WBkh63nhF9HZ/jxbj+1QiEzA75EEBQ9XOX DUMUvr9YJcOri8RLcHl/ewzepYOaScw335junsUPzNYo8fEcsHTSIzesYad2Qzsb 8ouBrBZAgPpg9fh+BZ2Ic0USiJfmFM5Qcd0M6NCav648KQDMF9TMtWY= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:50 2024 by rpki-client on console-ams.rpki-client.org