$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.cer File: 19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.cer (raw, json) Hash identifier: KXxJiyRQNFFJIjXeKVH063kR8nV4vBCgowv6j0+UILQ= Subject key identifier: 19:B0:5C:44:D9:C6:EB:80:26:B6:C6:50:65:89:E4:C2:FB:B1:32:D3 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 66348A70947C3B8739F14665818A65F1FF140A27 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft caRepository: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 13 Sep 2024 08:06:34 +0000 Certificate not after: Fri 12 Sep 2025 08:11:34 +0000 Subordinate resources: IP: 160.30.224.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:34:8a:70:94:7c:3b:87:39:f1:46:65:81:8a:65:f1:ff:14:0a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Sep 13 08:06:34 2024 GMT Not After : Sep 12 08:11:34 2025 GMT Subject: CN=19B05C44D9C6EB8026B6C6506589E4C2FBB132D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bc:3d:50:80:d3:21:e8:47:ff:5f:5c:a9:38: 9e:fd:4a:7f:cc:2e:9e:8d:e8:20:99:84:78:0d:ca: 8b:fd:55:a0:5a:f2:ca:fe:6b:5d:5c:75:ff:24:ae: bd:06:b0:7c:19:23:c7:a7:9e:b2:e6:d5:08:98:5a: 8e:1b:44:76:85:2c:29:ae:94:87:2a:cd:37:16:2a: 0c:f0:27:40:94:1d:51:cb:ab:c6:ad:1a:77:d3:5f: 8b:88:a0:ab:65:81:54:42:25:d9:53:7a:48:41:ca: 4f:c1:9a:67:99:e9:2d:2c:ce:31:a6:fa:97:61:4a: 2e:2c:79:0f:de:b3:98:7d:a7:8b:be:0a:e8:5b:50: 1d:05:b1:dd:02:1a:29:33:3c:3e:9a:06:48:d2:d8: c6:50:a0:80:67:01:62:d7:5a:fc:7e:92:18:83:b4: 31:74:94:d4:ae:26:d3:0c:d1:58:84:64:58:d7:b1: cf:8b:e0:c6:1a:68:8b:0e:78:4b:b1:69:9a:de:64: 19:da:41:0c:87:c2:bf:a4:ad:88:6a:d2:a2:e2:6b: 96:b4:c2:95:53:50:84:95:23:16:30:0d:c6:48:9c: 4f:57:4d:f6:c5:05:56:80:ec:66:0e:fc:59:4f:4b: 2b:07:05:47:81:33:43:7c:35:a3:aa:42:a7:c4:10: 97:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:B0:5C:44:D9:C6:EB:80:26:B6:C6:50:65:89:E4:C2:FB:B1:32:D3 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.30.224.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:47:f0:69:bd:3a:5d:68:e5:33:3d:bc:72:c1:09:0c:b3:3a: 4a:07:06:9a:80:13:82:38:61:3d:23:4c:aa:b0:fc:50:5d:9a: 07:03:49:48:28:a5:7e:6f:a7:bc:08:5f:3e:aa:5e:2b:42:e0: 0b:fb:50:dc:6d:fb:5b:b9:97:94:f2:d5:5a:e0:2c:e1:12:b1: 64:db:c4:c2:5a:c7:97:0c:b5:36:4e:a4:8d:f3:db:ba:bd:3b: a7:05:8a:b0:c3:65:fc:65:5d:b9:f3:89:18:21:48:5d:d4:3d: f2:49:59:4e:0d:d2:2f:38:fb:57:7e:08:ac:4b:13:20:81:2c: a6:c7:c1:c9:6f:5d:88:a7:80:71:d1:a7:6d:d0:62:d1:b3:65: 68:89:b7:04:ad:3c:a7:67:4d:7e:10:20:42:51:de:23:32:21: 50:3d:ae:4e:b9:18:e5:f3:6f:26:ea:b4:90:40:94:d8:ff:71: 40:17:96:bb:cf:70:bb:e1:77:0a:a5:ff:1c:bc:32:87:75:49: c8:45:a2:e1:64:fc:bd:b8:4a:70:a7:32:42:bd:c5:c0:90:aa: 21:59:44:99:1e:a5:9b:a4:d8:65:48:c7:8c:8c:b1:fb:54:97: 65:6e:2f:80:a4:70:11:1c:d0:0f:61:9f:8a:f8:f6:46:c8:a2: 7f:f2:57:91 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZjSKcJR8O4c58UZlgYpl8f8UCicwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDkxMzA4MDYzNFoX DTI1MDkxMjA4MTEzNFowMzExMC8GA1UEAxMoMTlCMDVDNDREOUM2RUI4MDI2QjZD NjUwNjU4OUU0QzJGQkIxMzJEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANS8PVCA0yHoR/9fXKk4nv1Kf8wuno3oIJmEeA3Ki/1VoFryyv5rXVx1/ySu vQawfBkjx6eesubVCJhajhtEdoUsKa6UhyrNNxYqDPAnQJQdUcurxq0ad9Nfi4ig q2WBVEIl2VN6SEHKT8GaZ5npLSzOMab6l2FKLix5D96zmH2ni74K6FtQHQWx3QIa KTM8PpoGSNLYxlCggGcBYtda/H6SGIO0MXSU1K4m0wzRWIRkWNexz4vgxhpoiw54 S7Fpmt5kGdpBDIfCv6StiGrSouJrlrTClVNQhJUjFjANxkicT1dN9sUFVoDsZg78 WU9LKwcFR4EzQ3w1o6pCp8QQl+8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBmwXETZxuuAJrbGUGWJ5ML7sTLTMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wNDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0NTY1MTll LWFiNjEtNDk0My1iM2U4LTEwYmRkNjA4MGZkYS8wLzE5QjA1QzQ0RDlDNkVCODAy NkI2QzY1MDY1ODlFNEMyRkJCMTMyRDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgHuAwDQYJKoZIhvcNAQELBQADggEBAE9H8Gm9Ol1o5TM9vHLBCQyzOkoHBpqA E4I4YT0jTKqw/FBdmgcDSUgopX5vp7wIXz6qXitC4Av7UNxt+1u5l5Ty1VrgLOES sWTbxMJax5cMtTZOpI3z27q9O6cFirDDZfxlXbnziRghSF3UPfJJWU4N0i84+1d+ CKxLEyCBLKbHwclvXYingHHRp23QYtGzZWiJtwStPKdnTX4QIEJR3iMyIVA9rk65 GOXzbybqtJBAlNj/cUAXlrvPcLvhdwql/xy8Mod1SchFouFk/L24SnCnMkK9xcCQ qiFZRJkepZuk2GVIx4yMsftUl2VuL4CkcBEc0A9hn4r49kbIon/yV5E= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org