$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer File: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer (raw, json) Hash identifier: vM2zkNFJy7Jm8l2b3C8Avkp9itLImkrVnCQ00MOzXfw= Subject key identifier: 0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 7333E450760B44B3DF1C4F6FB4D645F7B8F920A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft caRepository: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 11 Sep 2024 08:48:59 +0000 Certificate not after: Wed 10 Sep 2025 08:53:59 +0000 Subordinate resources: IP: 157.20.98.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:33:e4:50:76:0b:44:b3:df:1c:4f:6f:b4:d6:45:f7:b8:f9:20:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Sep 11 08:48:59 2024 GMT Not After : Sep 10 08:53:59 2025 GMT Subject: CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b3:a3:c8:34:03:33:c6:39:a8:ea:d4:8c:9b: 94:57:76:f7:88:d1:55:20:67:cc:40:7e:d9:65:91: 18:a0:d0:c8:97:b8:8e:26:67:d3:a9:07:bd:42:33: 7d:ff:fc:ae:de:fe:e4:b6:d1:3d:17:ea:c9:74:81: 5f:ee:e3:f8:9d:21:ea:5c:e6:f8:05:c9:6a:30:00: 41:6d:71:50:b6:bc:45:6c:c9:09:6e:5d:b5:6b:d1: 92:e1:b6:c2:e3:29:68:8b:e9:c7:2c:b2:92:7b:7a: 49:5f:4e:98:ce:7c:d5:26:ec:2a:6a:df:39:7d:33: 50:20:49:82:65:8c:93:f9:fb:4b:e5:d5:a2:77:6d: 09:2b:60:f8:f0:da:40:bd:0c:11:40:34:d5:d9:ed: ac:83:bb:cb:d0:d0:79:e8:b6:ea:f2:dd:a8:2b:26: 40:1c:de:8d:65:9e:dd:da:41:fd:74:ff:15:be:91: 04:49:71:0f:6a:11:bb:c5:30:3d:62:f9:ca:e5:93: 07:ce:be:a2:b1:cf:3b:ec:0b:df:1f:cb:2b:db:5b: 43:c6:54:35:84:7f:a5:5d:b3:da:f5:50:c5:1e:63: 39:61:4c:62:1d:23:99:f3:7a:02:7b:5d:ca:b3:9c: 4e:45:7f:70:58:46:86:77:c9:c3:80:74:48:c8:3f: 2b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.98.0/23 Signature Algorithm: sha256WithRSAEncryption 24:a2:69:52:cd:5c:5c:32:55:4a:6d:72:b7:3b:bb:88:d2:f4: a1:57:b4:78:b7:6a:66:ca:ef:31:0d:ba:cf:16:d7:42:82:00: c8:58:fb:e1:dd:6b:a2:47:7e:ac:cf:09:d5:58:19:ca:74:e1: a2:95:26:90:92:c7:df:90:10:23:b6:2a:84:92:ef:32:ca:ac: f1:96:35:6b:5d:f8:36:f5:bf:63:eb:4f:b2:19:d3:d7:7e:5b: eb:a0:e8:89:4c:c9:e6:66:ce:95:6b:c2:13:be:39:b9:80:9a: 9e:6c:58:04:1e:17:9b:2d:fb:73:a4:d4:25:4c:57:2a:45:cc: e9:7b:c7:55:dc:5c:53:f7:b3:30:fd:f5:67:a9:f2:00:63:24: 5a:38:50:9b:1e:f5:fc:9a:11:5e:92:e0:4b:7a:77:12:cc:58: 42:81:76:b6:1c:d2:2f:ab:fd:ab:d3:ad:42:10:87:70:c4:3e: a0:68:ed:20:5a:35:07:e9:03:41:dc:ff:56:ca:5f:e7:80:ba: 15:0f:10:0a:5a:f0:b8:d6:17:64:c9:5a:a9:d5:28:d4:a6:44: de:6d:86:1b:c1:c8:43:3a:6e:cd:34:ae:a4:a9:10:21:b2:dc: 0f:26:62:97:3c:b0:93:d2:22:67:29:b5:64:9d:d1:59:9c:5d: f1:33:18:dc -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUczPkUHYLRLPfHE9vtNZF97j5IKgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDkxMTA4NDg1OVoX DTI1MDkxMDA4NTM1OVowMzExMC8GA1UEAxMoMEMxRkJFODBGMjFFQjI2Njg2OTc4 QjNFNzY5NDg1QzA4M0ZCN0RDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKzo8g0AzPGOajq1IyblFd294jRVSBnzEB+2WWRGKDQyJe4jiZn06kHvUIz ff/8rt7+5LbRPRfqyXSBX+7j+J0h6lzm+AXJajAAQW1xULa8RWzJCW5dtWvRkuG2 wuMpaIvpxyyyknt6SV9OmM581SbsKmrfOX0zUCBJgmWMk/n7S+XVondtCStg+PDa QL0MEUA01dntrIO7y9DQeei26vLdqCsmQBzejWWe3dpB/XT/Fb6RBElxD2oRu8Uw PWL5yuWTB86+orHPO+wL3x/LK9tbQ8ZUNYR/pV2z2vVQxR5jOWFMYh0jmfN6Antd yrOcTkV/cFhGhnfJw4B0SMg/KxsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAwfvoDyHrJmhpeLPnaUhcCD+33NMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMzQ2YzBlMi04MTk0LTQwMjQtYmNiMy1kMDI5NTZjZTNhOTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEzNDZjMGUy LTgxOTQtNDAyNC1iY2IzLWQwMjk1NmNlM2E5OS8wLzBDMUZCRTgwRjIxRUIyNjY4 Njk3OEIzRTc2OTQ4NUMwODNGQjdEQ0QubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFGIwDQYJKoZIhvcNAQELBQADggEBACSiaVLNXFwyVUptcrc7u4jS9KFXtHi3 ambK7zENus8W10KCAMhY++Hda6JHfqzPCdVYGcp04aKVJpCSx9+QECO2KoSS7zLK rPGWNWtd+Db1v2PrT7IZ09d+W+ug6IlMyeZmzpVrwhO+ObmAmp5sWAQeF5st+3Ok 1CVMVypFzOl7x1XcXFP3szD99Wep8gBjJFo4UJse9fyaEV6S4Et6dxLMWEKBdrYc 0i+r/avTrUIQh3DEPqBo7SBaNQfpA0Hc/1bKX+eAuhUPEApa8LjWF2TJWqnVKNSm RN5thhvByEM6bs00rqSpECGy3A8mYpc8sJPSImcptWSd0VmcXfEzGNw= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:50 2024 by rpki-client on console-ams.rpki-client.org