$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer File: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer (raw, json) Hash identifier: fpGdVDciUin0OyKcmdmnt8DEHfatw4LE2lbsPW9BAyY= Subject key identifier: 0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 5EF32EEFD07579F9837850304E169895E65E4739 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft caRepository: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 24 Aug 2024 13:59:23 +0000 Certificate not after: Sat 23 Aug 2025 14:04:23 +0000 Subordinate resources: IP: 160.22.204.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f3:2e:ef:d0:75:79:f9:83:78:50:30:4e:16:98:95:e6:5e:47:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 24 13:59:23 2024 GMT Not After : Aug 23 14:04:23 2025 GMT Subject: CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:91:51:e8:01:22:9e:bf:ba:de:c3:c7:d3:20: 90:f2:4b:f6:4f:19:bb:95:ec:fb:8c:71:90:1e:14: 5b:f7:a9:0a:76:2a:61:db:f5:3f:70:86:84:aa:19: be:ea:54:2e:42:c3:c5:9b:ad:ea:40:58:30:69:64: b1:39:cf:31:d5:e4:9c:b8:ce:95:d5:f7:80:53:f5: 6d:e7:42:2c:b0:7c:84:7f:44:e2:a9:ee:87:7f:a9: 37:73:47:63:b4:b3:89:49:cf:ea:f4:c7:52:f4:3f: 9b:fe:3f:24:1e:2e:49:80:a7:6d:50:47:67:16:6b: ec:22:1b:d5:ba:4b:9c:8b:ac:e4:25:59:aa:a7:32: e9:3c:75:50:51:c3:46:a6:bc:3e:cd:39:93:75:9f: 10:5a:a3:88:c7:ba:ea:17:3e:6d:86:7e:f1:ee:ee: 08:be:4f:2e:76:c3:0f:05:9a:41:79:29:88:a5:c0: ad:cb:90:71:88:09:b1:05:10:d7:99:4c:bd:d6:a9: e2:f3:cf:1b:3b:28:64:cd:a2:06:23:09:c5:94:fa: fd:4a:56:91:37:9b:8f:c8:4d:4b:58:58:07:dd:28: 3b:6e:60:b2:22:8b:bd:a5:43:33:d9:d9:46:d7:6f: 7a:79:24:da:0e:b2:7f:22:91:5b:73:c2:ba:bc:c7: b8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.204.0/23 Signature Algorithm: sha256WithRSAEncryption 21:f9:6a:2b:46:c8:31:38:bb:24:87:9c:c1:ee:58:4a:41:62: a6:c7:0d:dd:20:87:dc:ef:1b:25:18:70:21:f2:98:ef:ff:b9: 36:53:6a:d3:ce:03:98:ae:46:11:f8:e6:f1:a8:a5:42:67:a6: c7:ad:0e:ab:90:b5:b0:d4:0d:a7:f6:5f:4d:e2:f7:6e:e2:0f: ae:1a:2d:c1:51:2e:7e:cb:5d:c0:59:66:41:7b:ed:8b:09:a0: 01:36:ba:bf:bc:0f:2d:35:0d:fe:82:14:93:fc:1b:59:aa:24: 69:c4:64:3a:50:c0:d2:29:ec:09:f6:91:b2:c8:07:38:65:71: 7d:de:73:9a:4f:10:0b:81:7a:13:3c:ac:70:fd:0d:a8:7c:ff: 36:4a:e0:d3:dd:62:ce:e0:78:19:d5:00:1c:1c:98:55:1a:33: 93:fb:d2:ee:24:10:94:ec:b0:3d:d5:a1:38:c2:67:cd:32:20: c3:6e:6a:ca:5a:84:29:61:ec:4e:df:d1:f6:61:3c:ea:9f:4b: 3c:1a:ac:cf:95:7e:85:bd:bf:e4:30:b2:11:65:73:9f:0e:2b: 9f:98:00:0b:a7:a4:78:fa:3d:52:09:ea:54:2c:24:05:3e:c4: a4:52:fd:58:5f:69:1d:97:d1:cf:a7:56:c6:05:dd:06:e0:9f: dc:96:35:2b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXvMu79B1efmDeFAwThaYleZeRzkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDgyNDEzNTkyM1oX DTI1MDgyMzE0MDQyM1owMzExMC8GA1UEAxMoMEExQkZDRTY3NjFEOEI3RkIyMDlG N0NGOUVEMUIzREFGMDYwMzYxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKiRUegBIp6/ut7Dx9MgkPJL9k8Zu5Xs+4xxkB4UW/epCnYqYdv1P3CGhKoZ vupULkLDxZut6kBYMGlksTnPMdXknLjOldX3gFP1bedCLLB8hH9E4qnuh3+pN3NH Y7SziUnP6vTHUvQ/m/4/JB4uSYCnbVBHZxZr7CIb1bpLnIus5CVZqqcy6Tx1UFHD Rqa8Ps05k3WfEFqjiMe66hc+bYZ+8e7uCL5PLnbDDwWaQXkpiKXArcuQcYgJsQUQ 15lMvdap4vPPGzsoZM2iBiMJxZT6/UpWkTebj8hNS1hYB90oO25gsiKLvaVDM9nZ Rtdvenkk2g6yfyKRW3PCurzHuL0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAob/OZ2HYt/sgn3z57Rs9rwYDYSMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85YzFiNGMzOC03NzQ3LTQ1ZmMtYTU5MC1jYWM1MjE2M2Q1MzgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzljMWI0YzM4 LTc3NDctNDVmYy1hNTkwLWNhYzUyMTYzZDUzOC8wLzBBMUJGQ0U2NzYxRDhCN0ZC MjA5RjdDRjlFRDFCM0RBRjA2MDM2MTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFswwDQYJKoZIhvcNAQELBQADggEBACH5aitGyDE4uySHnMHuWEpBYqbHDd0g h9zvGyUYcCHymO//uTZTatPOA5iuRhH45vGopUJnpsetDquQtbDUDaf2X03i927i D64aLcFRLn7LXcBZZkF77YsJoAE2ur+8Dy01Df6CFJP8G1mqJGnEZDpQwNIp7An2 kbLIBzhlcX3ec5pPEAuBehM8rHD9Dah8/zZK4NPdYs7geBnVABwcmFUaM5P70u4k EJTssD3VoTjCZ80yIMNuaspahClh7E7f0fZhPOqfSzwarM+VfoW9v+QwshFlc58O K5+YAAunpHj6PVIJ6lQsJAU+xKRS/VhfaR2X0c+nVsYF3Qbgn9yWNSs= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:50 2024 by rpki-client on console-ams.rpki-client.org