$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer File: 1391AB90F1BF56A92FBDF7B8F48207992410775E.cer (raw, json) Hash identifier: 1v11JE9ZPTHDFv3jgxEydrIy526H8LDBhNZ1qyke4VA= Subject key identifier: 13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 5CC816ADADAAE01562419D05CA20959B1523DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft caRepository: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 30 May 2024 07:18:38 +0000 Certificate not after: Thu 29 May 2025 07:23:38 +0000 Subordinate resources: IP: 160.19.146.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c8:16:ad:ad:aa:e0:15:62:41:9d:05:ca:20:95:9b:15:23:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 30 07:18:38 2024 GMT Not After : May 29 07:23:38 2025 GMT Subject: CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:40:3a:85:02:42:85:1f:84:51:41:a8:bc:2f: 59:7e:5d:31:8e:b6:a7:bb:94:70:1f:d0:57:b0:a6: 2e:5b:37:9f:3a:fb:22:20:e0:8f:c9:a3:a5:68:11: 77:5c:fa:28:a2:70:30:cb:f7:b2:ff:33:15:a9:74: 3e:94:fc:da:cc:be:e8:1d:3e:ec:d8:89:29:f1:5e: 2d:dd:c9:f1:c3:1b:bc:25:dc:33:32:f2:69:3a:0e: 02:78:cb:85:18:f6:4a:b2:91:66:dc:69:49:90:59: 20:01:a1:5c:05:02:0d:0a:b6:a9:91:e8:5a:6a:bc: 26:a8:47:7a:29:73:81:9e:6b:37:f7:e3:6c:4c:73: af:82:b8:c8:1a:c1:90:47:f9:b1:37:3b:ac:7e:49: 10:79:24:c7:08:e0:52:11:07:33:43:31:9b:57:28: 63:e6:34:a1:fa:89:d5:24:f9:65:be:27:b7:29:8d: f0:60:d5:23:2c:a9:55:41:13:b4:29:c5:ab:6a:88: b1:42:24:01:1a:6a:73:d8:d6:6c:83:93:ff:26:0f: d4:f5:66:5c:22:94:b7:96:61:76:bc:af:a7:13:e5: 60:a5:f0:7d:39:c5:76:2f:41:3a:a1:e3:42:ae:ef: cd:96:e8:cb:e2:56:d0:85:09:05:27:b5:e4:32:e6: 7d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.146.0/23 Signature Algorithm: sha256WithRSAEncryption 06:80:4e:fc:c3:5c:e1:e2:d3:cb:1a:17:94:90:73:a3:a4:fd: b7:ef:ed:1f:f0:c3:f6:ca:2f:a8:7b:1c:78:33:e8:04:f1:c3: 80:91:91:5c:0d:6f:ce:fd:32:19:2f:c0:1c:e2:70:7e:e0:79: 8c:40:2a:f4:f7:94:fc:f3:ce:ee:01:c0:67:6b:87:45:0e:89: be:57:05:09:1d:f5:48:64:c1:9d:03:cc:c0:39:cb:f2:95:46: bc:86:ea:2c:3b:1b:8b:df:7f:b5:1a:30:58:ab:3d:9e:b5:63: 49:a6:a5:de:05:cf:dc:1b:95:51:20:75:8e:a4:33:1a:a9:88: df:b1:58:1f:8d:49:92:9a:11:05:1e:7b:e8:99:23:43:84:65: 28:67:ce:5f:d9:a6:4f:96:bb:93:2a:f5:b2:45:fe:92:81:43: 1f:2c:bf:ed:88:7c:61:a1:b7:a2:51:cb:55:2f:b4:d6:80:0e: 2c:93:aa:20:d1:14:7c:43:e3:11:6e:be:dc:e1:38:85:0e:6e: 1a:38:db:76:99:61:58:5d:74:8c:94:40:5c:e3:e1:3b:46:0a: db:22:77:ef:0d:96:73:b7:20:5e:b4:42:e0:33:a1:03:6b:49: b4:4b:5c:67:38:42:3c:7b:92:63:01:ee:d3:23:86:ff:14:51: 29:86:f0:66 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgITXMgWra2q4BViQZ0FyiCVmxUj2zANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKDYwRjhCRTlDMTY2 MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQwHhcNMjQwNTMwMDcxODM4WhcN MjUwNTI5MDcyMzM4WjAzMTEwLwYDVQQDEygxMzkxQUI5MEYxQkY1NkE5MkZCREY3 QjhGNDgyMDc5OTI0MTA3NzVFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEA6hQJChR+EUUGovC9Zfl0xjranu5RwH9BXsKYuWzefOvsiIOCPyaOlaBF3 XPooonAwy/ey/zMVqXQ+lPzazL7oHT7s2Ikp8V4t3cnxwxu8JdwzMvJpOg4CeMuF GPZKspFm3GlJkFkgAaFcBQINCrapkehaarwmqEd6KXOBnms39+NsTHOvgrjIGsGQ R/mxNzusfkkQeSTHCOBSEQczQzGbVyhj5jSh+onVJPllvie3KY3wYNUjLKlVQRO0 KcWraoixQiQBGmpz2NZsg5P/Jg/U9WZcIpS3lmF2vK+nE+VgpfB9OcV2L0E6oeNC ru/NlujL4lbQhQkFJ7XkMuZ92QIDAQABo4ICuDCCArQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUE5GrkPG/Vqkvvfe49IIHmSQQd14wHwYDVR0jBBgwFoAUYPi+ nBZiXEJLJp7gbGSoO6uFBtQwDgYDVR0PAQH/BAQDAgEGMGkGA1UdHwRiMGAwXqBc oFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzEv NjBGOEJFOUMxNjYyNUM0MjRCMjY5RUUwNkM2NEE4M0JBQjg1MDZENC5jcmwwfgYI KwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0 L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvWVBp LW5CWmlYRUpMSnA3Z2JHU29PNnVGQnRRLmNlcjCCASkGCCsGAQUFBwELBIIBGzCC ARcwUwYIKwYBBQUHMAWGR3JzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L2I5YjliZDM4LTJlZmEtNGQ0Yy1hOTU2LTQyNDkyYTNlNjAwMC8wMIGABggrBgEF BQcwCoZ0cnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjliOWJkMzgt MmVmYS00ZDRjLWE5NTYtNDI0OTJhM2U2MDAwLzAvMTM5MUFCOTBGMUJGNTZBOTJG QkRGN0I4RjQ4MjA3OTkyNDEwNzc1RS5tZnQwPQYIKwYBBQUHMA2GMWh0dHBzOi8v cmVwby1ycGtpLmlkbmljLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AaATkjANBgkqhkiG9w0BAQsFAAOCAQEABoBO/MNc4eLTyxoXlJBzo6T9t+/tH/DD 9sovqHsceDPoBPHDgJGRXA1vzv0yGS/AHOJwfuB5jEAq9PeU/PPO7gHAZ2uHRQ6J vlcFCR31SGTBnQPMwDnL8pVGvIbqLDsbi99/tRowWKs9nrVjSaal3gXP3BuVUSB1 jqQzGqmI37FYH41JkpoRBR576JkjQ4RlKGfOX9mmT5a7kyr1skX+koFDHyy/7Yh8 YaG3olHLVS+01oAOLJOqINEUfEPjEW6+3OE4hQ5uGjjbdplhWF10jJRAXOPhO0YK 2yJ37w2Wc7cgXrRC4DOhA2tJtEtcZzhCPHuSYwHu0yOG/xRRKYbwZg== -----END CERTIFICATE-----Generated at Fri Jun 21 21:25:33 2024 by rpki-client on console-ams.rpki-client.org