$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer File: 295131167768CC78482F796BB58CF5A01A014393.cer (raw, json) Hash identifier: VzpjrHyfixqj05n58gSXnKE81QpQk5Vevb7z2HJn5GM= Subject key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 08448BEA2BD85D1757ABC9A2B89469BAC3455EDC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft caRepository: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 25 Jul 2024 08:20:43 +0000 Certificate not after: Thu 24 Jul 2025 08:25:43 +0000 Subordinate resources: IP: 160.25.50.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:44:8b:ea:2b:d8:5d:17:57:ab:c9:a2:b8:94:69:ba:c3:45:5e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 25 08:20:43 2024 GMT Not After : Jul 24 08:25:43 2025 GMT Subject: CN=295131167768CC78482F796BB58CF5A01A014393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:46:08:61:88:0e:70:e8:fd:fd:1f:e9:88:7b: 5c:67:c2:e3:89:c8:16:5b:46:a5:df:f2:e7:fd:70: 07:d3:32:53:9e:e5:13:17:71:b0:e6:12:84:5f:84: 29:8e:31:0c:f7:b0:de:31:23:66:da:35:92:ba:bf: 92:a0:c2:7f:11:f5:99:ba:fc:31:df:21:1d:ed:a8: c3:38:03:6a:24:35:ee:ea:a6:db:a1:6c:33:a0:ea: bb:db:c3:d3:e5:72:e6:52:0e:17:80:ea:c1:5f:96: 4b:d1:1c:b7:aa:5d:8e:80:52:20:11:d5:af:25:37: 1f:16:8f:07:a8:c4:af:f3:e9:02:92:6a:7d:a2:f0: 40:f3:32:a9:41:e3:5c:f8:c3:08:47:5d:f1:57:bd: 92:e3:35:83:63:b3:b4:26:49:da:f0:91:c3:4c:05: 11:51:81:78:1a:ef:52:f9:8f:41:fd:24:fc:a7:68: ad:03:9d:16:bd:03:ba:17:aa:4e:ed:b8:4b:10:5e: c8:97:f2:8b:2f:f6:da:4a:72:12:b4:4c:2b:47:27: f3:93:30:8f:ca:6b:46:8e:ba:45:91:59:04:ab:db: 16:93:2a:08:d5:c4:67:c8:7f:1b:e3:b5:ef:5d:70: 7f:70:85:21:da:cd:5e:84:ac:b9:2c:00:6c:50:ea: 1f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.50.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:89:b0:f2:d8:94:6d:ad:48:e0:ed:c0:3d:9c:16:9b:45:e7: 3c:8a:26:43:fe:96:1e:24:29:39:50:56:63:46:8d:9e:30:2e: 0e:f1:1a:42:7e:19:8f:67:fc:b1:a1:16:c0:ee:2a:f6:3a:b8: 7e:e3:2f:2e:f0:8e:0d:7f:20:00:e2:48:b3:24:94:87:cf:95: a2:07:72:51:e7:a3:4a:89:7b:89:03:be:08:41:14:4d:bd:c4: bf:60:78:16:04:f0:01:13:e5:2c:71:f2:86:72:b2:bd:e6:8b: 37:3e:7e:e8:83:e1:0b:5d:db:2a:78:c6:43:61:66:af:f7:a5: dd:42:b5:9b:ef:95:f3:e4:30:17:9d:c3:42:2f:06:fe:90:d8: b3:70:4a:7f:3f:a8:16:06:27:38:e5:2a:be:4e:88:76:86:b5: 60:e8:fa:52:f3:72:22:c6:6d:04:a0:27:cc:15:9d:8f:2e:31: a5:92:d2:05:f5:36:95:9c:4a:84:d4:97:6f:e9:83:30:ff:6a: c6:eb:48:92:f5:06:ef:91:95:fe:b0:20:1f:fa:9e:5f:53:9f: ca:f9:a3:f6:55:34:21:08:29:66:7a:12:d6:2e:28:65:58:eb: 22:0e:cb:88:1d:a6:a3:14:fc:39:d1:a9:15:8c:d3:49:b9:a3: 94:1f:30:da -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUCESL6ivYXRdXq8miuJRpusNFXtwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDcyNTA4MjA0M1oX DTI1MDcyNDA4MjU0M1owMzExMC8GA1UEAxMoMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3 OTZCQjU4Q0Y1QTAxQTAxNDM5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZGCGGIDnDo/f0f6Yh7XGfC44nIFltGpd/y5/1wB9MyU57lExdxsOYShF+E KY4xDPew3jEjZto1krq/kqDCfxH1mbr8Md8hHe2owzgDaiQ17uqm26FsM6Dqu9vD 0+Vy5lIOF4DqwV+WS9Ect6pdjoBSIBHVryU3HxaPB6jEr/PpApJqfaLwQPMyqUHj XPjDCEdd8Ve9kuM1g2OztCZJ2vCRw0wFEVGBeBrvUvmPQf0k/KdorQOdFr0Duheq Tu24SxBeyJfyiy/22kpyErRMK0cn85Mwj8prRo66RZFZBKvbFpMqCNXEZ8h/G+O1 711wf3CFIdrNXoSsuSwAbFDqH4UCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFClRMRZ3aMx4SC95a7WM9aAaAUOTMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80OWVjYTUwYi01NzIyLTQ5MTgtODMxNC04NTlkM2MxZjU1YTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ5ZWNhNTBi LTU3MjItNDkxOC04MzE0LTg1OWQzYzFmNTVhMi8wLzI5NTEzMTE2Nzc2OENDNzg0 ODJGNzk2QkI1OENGNUEwMUEwMTQzOTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgGTIwDQYJKoZIhvcNAQELBQADggEBAGuJsPLYlG2tSODtwD2cFptF5zyKJkP+ lh4kKTlQVmNGjZ4wLg7xGkJ+GY9n/LGhFsDuKvY6uH7jLy7wjg1/IADiSLMklIfP laIHclHno0qJe4kDvghBFE29xL9geBYE8AET5Sxx8oZysr3mizc+fuiD4Qtd2yp4 xkNhZq/3pd1CtZvvlfPkMBedw0IvBv6Q2LNwSn8/qBYGJzjlKr5OiHaGtWDo+lLz ciLGbQSgJ8wVnY8uMaWS0gX1NpWcSoTUl2/pgzD/asbrSJL1Bu+Rlf6wIB/6nl9T n8r5o/ZVNCEIKWZ6EtYuKGVY6yIOy4gdpqMU/DnRqRWM00m5o5QfMNo= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:50 2024 by rpki-client on console-ams.rpki-client.org