$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer File: 277D3C0811B597BC22847329E543CCEE7E2449A0.cer (raw, json) Hash identifier: IasaK9IyHeFRuJ/tcNvT9TthPaeChh114fK2ANwbH0c= Subject key identifier: 27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0675F17164194B4C4FABA0EE43D1634964E7B254 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft caRepository: rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 18 Jul 2024 08:08:35 +0000 Certificate not after: Thu 17 Jul 2025 08:13:35 +0000 Subordinate resources: IP: 160.25.116.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:75:f1:71:64:19:4b:4c:4f:ab:a0:ee:43:d1:63:49:64:e7:b2:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 18 08:08:35 2024 GMT Not After : Jul 17 08:13:35 2025 GMT Subject: CN=277D3C0811B597BC22847329E543CCEE7E2449A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:67:f3:2f:f4:12:02:00:6f:f5:2e:3e:ef:72: 16:6a:6b:88:30:57:bb:f5:8e:cd:41:d9:e3:68:dc: 85:98:fd:a2:b9:63:b9:ec:af:ad:e2:cf:90:0c:9e: 0a:a3:48:f9:24:0f:6f:e7:1a:65:0e:a6:a4:73:b7: 3c:b4:3e:6b:18:91:a8:e8:9c:af:5e:6b:7b:7a:94: 03:1a:99:d1:f6:86:86:ce:27:35:84:85:82:57:aa: bf:0c:1f:84:34:c2:7f:99:6c:21:d3:cb:c5:0b:fd: c4:c9:c2:26:4b:39:41:91:dd:37:6c:be:94:11:ed: 1b:56:67:cc:8f:31:8e:bd:aa:f4:58:e8:11:17:30: be:24:b4:3e:a2:f4:0f:bb:42:e2:9c:8c:6f:a3:1f: 67:16:3e:03:44:da:da:76:ee:ed:0a:87:5d:fb:fd: 8c:ea:84:df:0c:75:1b:36:81:fe:16:66:5b:e3:99: b2:bc:c0:d5:98:73:7c:d3:9c:0e:d2:b1:42:13:fe: a6:95:2c:f4:f6:9a:54:21:70:47:08:b7:94:0c:77: ef:c1:76:0a:8e:34:6a:55:36:1f:46:17:06:62:c3: 77:8a:07:63:4d:7a:f1:2b:88:b0:e7:98:82:85:bd: ad:9c:f8:02:af:4d:84:3e:d8:3a:99:ca:f1:57:52: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.116.0/24 Signature Algorithm: sha256WithRSAEncryption 33:42:8a:e0:92:f2:cf:e6:ec:b8:0d:20:0f:16:7d:e5:e9:15: f5:67:af:b6:07:4b:72:64:e7:ab:9b:46:a6:04:40:8a:39:e5: 06:ba:2c:71:9c:b9:b3:85:7f:b2:97:2f:6b:50:70:97:15:7c: f8:fb:5a:80:d0:27:4e:a0:14:a1:da:bc:e4:9a:50:5e:15:7e: d5:23:c5:22:7e:6f:71:a7:8d:b6:8a:bc:37:b2:27:7c:ab:27: 4f:ce:fd:25:d9:72:5a:1c:56:dd:4d:b4:fb:0b:ae:79:cc:a5: 07:c3:51:c5:2b:ab:53:5a:02:dd:7b:15:37:aa:6f:47:6f:54: 0d:f4:dc:0b:62:45:a7:e5:39:c7:1c:bd:35:41:2c:28:d0:01: 51:6d:ac:5b:fd:ce:87:74:d2:84:d6:07:4d:d8:ef:52:ee:d8: d3:6e:90:09:87:77:80:5c:d0:c4:eb:fa:bb:61:58:a9:20:af: cd:c6:c5:71:66:02:df:69:ac:76:f8:cc:3d:0f:25:54:ef:37: 9e:06:42:4b:6f:a1:d4:b9:00:e3:81:28:0c:4e:a2:83:a0:37: e8:08:6e:c7:18:be:36:83:b7:a9:db:e0:65:06:d7:cd:5e:d3: cd:5a:86:7d:0f:b6:b6:d2:22:9d:73:a2:9f:b2:18:09:a3:fa: 02:3c:b5:31 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUBnXxcWQZS0xPq6DuQ9FjSWTnslQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDcxODA4MDgzNVoX DTI1MDcxNzA4MTMzNVowMzExMC8GA1UEAxMoMjc3RDNDMDgxMUI1OTdCQzIyODQ3 MzI5RTU0M0NDRUU3RTI0NDlBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALNn8y/0EgIAb/UuPu9yFmpriDBXu/WOzUHZ42jchZj9orljueyvreLPkAye CqNI+SQPb+caZQ6mpHO3PLQ+axiRqOicr15re3qUAxqZ0faGhs4nNYSFgleqvwwf hDTCf5lsIdPLxQv9xMnCJks5QZHdN2y+lBHtG1ZnzI8xjr2q9FjoERcwviS0PqL0 D7tC4pyMb6MfZxY+A0Ta2nbu7QqHXfv9jOqE3wx1GzaB/hZmW+OZsrzA1ZhzfNOc DtKxQhP+ppUs9PaaVCFwRwi3lAx378F2Co40alU2H0YXBmLDd4oHY0168SuIsOeY goW9rZz4Aq9NhD7YOpnK8VdSQ3MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCd9PAgRtZe8IoRzKeVDzO5+JEmgMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NzgyNTlkNi0yNjU1LTQ0MTctYmVjNC04M2VmNjY0NGY1N2UvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3ODI1OWQ2 LTI2NTUtNDQxNy1iZWM0LTgzZWY2NjQ0ZjU3ZS8wLzI3N0QzQzA4MTFCNTk3QkMy Mjg0NzMyOUU1NDNDQ0VFN0UyNDQ5QTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgGXQwDQYJKoZIhvcNAQELBQADggEBADNCiuCS8s/m7LgNIA8WfeXpFfVnr7YH S3Jk56ubRqYEQIo55Qa6LHGcubOFf7KXL2tQcJcVfPj7WoDQJ06gFKHavOSaUF4V ftUjxSJ+b3GnjbaKvDeyJ3yrJ0/O/SXZclocVt1NtPsLrnnMpQfDUcUrq1NaAt17 FTeqb0dvVA303AtiRaflOcccvTVBLCjQAVFtrFv9zod00oTWB03Y71Lu2NNukAmH d4Bc0MTr+rthWKkgr83GxXFmAt9prHb4zD0PJVTvN54GQktvodS5AOOBKAxOooOg N+gIbscYvjaDt6nb4GUG181e081ahn0PtrbSIp1zop+yGAmj+gI8tTE= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org