$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer File: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer (raw, json) Hash identifier: Yu1h1JnQRAbaVTj7dOU2K8irEuvWjEaIE9TCNB27vm8= Subject key identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 5266936DA88D2B07BAED179F53CFFC8E088DA409 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft caRepository: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 05 Nov 2024 07:28:37 +0000 Certificate not after: Tue 04 Nov 2025 07:33:37 +0000 Subordinate resources: IP: 160.187.174.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:66:93:6d:a8:8d:2b:07:ba:ed:17:9f:53:cf:fc:8e:08:8d:a4:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 5 07:28:37 2024 GMT Not After : Nov 4 07:33:37 2025 GMT Subject: CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0b:0d:23:be:bf:83:4b:c9:71:e4:6f:e0:b7: 51:da:fb:ea:f5:25:4a:a0:0a:e4:ab:ad:83:c1:3a: ff:48:7a:df:e4:c6:83:5a:5c:51:2d:d3:18:d8:fb: 42:b1:78:5f:90:b3:d4:43:2c:5a:22:49:fa:87:03: d9:e2:02:86:c2:ae:9a:f2:26:9e:8e:9d:2c:f2:b4: ce:12:f1:6b:f0:1b:69:8b:4d:11:bd:62:ab:4b:7f: 82:55:74:8b:7a:86:6a:6f:0b:5d:56:aa:f9:7f:c5: 80:bc:47:2c:d9:b2:8b:ec:52:03:24:0d:44:26:f8: 0d:59:cf:c0:b5:ae:8c:38:54:3e:31:c2:f4:97:49: 6e:09:a1:f4:15:af:49:1b:af:22:78:5a:66:a2:27: 8d:9d:55:34:f2:db:06:c9:fb:7a:1a:c6:b9:45:b2: f3:d0:02:64:cc:73:40:76:26:f8:9e:43:0e:1a:bc: a1:5a:9d:af:53:97:65:ba:69:c5:2d:ce:5b:b6:88: c8:9b:af:8e:8d:0c:29:73:09:6f:c6:8c:a4:59:cd: 85:c0:c0:5d:34:1d:47:42:6e:fe:c7:3f:13:b0:d4: eb:4d:96:24:27:2e:33:90:e2:53:6e:ff:70:27:aa: d4:4a:fe:9e:5d:12:cd:c7:e6:a9:3e:bd:a7:1f:ba: 99:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.174.0/24 Signature Algorithm: sha256WithRSAEncryption 99:b3:b8:7a:9c:d4:e1:a3:4d:9f:a5:5f:47:74:b3:af:06:cd: 3a:fd:27:b8:d6:13:0a:e3:2d:a7:ae:89:55:af:90:5d:cc:05: 24:e7:06:d6:0f:57:1e:5d:41:2c:83:bd:ea:b5:78:b2:ae:1d: 57:55:6d:10:09:a0:43:e8:35:00:0b:0b:22:06:61:fe:ed:3f: d7:f1:f3:9f:38:92:33:c9:c9:8e:8a:5b:f7:c4:8e:25:3f:5d: 22:4a:28:2e:b4:9c:28:50:19:7e:09:5d:f4:df:4e:95:27:2a: 8a:45:9e:67:1b:a9:36:4d:b5:35:08:e5:0f:e0:df:f9:0a:90: 20:2f:e4:25:66:98:33:86:15:fe:2f:a7:0e:19:9f:94:25:8c: d9:48:7c:f5:c6:1f:ed:56:ed:6f:ad:e9:ed:85:bf:9f:4c:c4: d1:d3:bc:49:fa:c4:09:89:a1:de:4b:af:c4:3d:c2:f3:7c:d1: 3d:50:34:f6:5f:33:dd:49:d4:f7:d7:dc:8c:39:4d:ca:2b:92: a3:88:a7:95:2c:b4:24:a9:23:2c:9c:05:2f:ac:ec:61:8a:66: a5:f6:0f:e9:0b:fb:b2:ae:03:c7:fa:8e:58:eb:17:dc:d6:df: a7:c6:e0:4a:45:a0:f6:a4:db:55:c9:ff:75:c3:e3:da:08:9d: 20:b9:d1:60 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUUmaTbaiNKwe67RefU8/8jgiNpAkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTEwNTA3MjgzN1oX DTI1MTEwNDA3MzMzN1owMzExMC8GA1UEAxMoMkVDNzIxRjZGQzYxNkExQkUyRDkz OEYyMUVBRjJFODJFODA1OTgxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALsLDSO+v4NLyXHkb+C3Udr76vUlSqAK5Kutg8E6/0h63+TGg1pcUS3TGNj7 QrF4X5Cz1EMsWiJJ+ocD2eIChsKumvImno6dLPK0zhLxa/AbaYtNEb1iq0t/glV0 i3qGam8LXVaq+X/FgLxHLNmyi+xSAyQNRCb4DVnPwLWujDhUPjHC9JdJbgmh9BWv SRuvInhaZqInjZ1VNPLbBsn7ehrGuUWy89ACZMxzQHYm+J5DDhq8oVqdr1OXZbpp xS3OW7aIyJuvjo0MKXMJb8aMpFnNhcDAXTQdR0Ju/sc/E7DU602WJCcuM5DiU27/ cCeq1Er+nl0SzcfmqT69px+6macCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC7HIfb8YWob4tk48h6vLoLoBZgeMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4ODUzYWFi LThkNmMtNDU3Zi05ZDU3LTQ4NGFjYWNlYTlkOC8wLzJFQzcyMUY2RkM2MTZBMUJF MkQ5MzhGMjFFQUYyRTgyRTgwNTk4MUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgu64wDQYJKoZIhvcNAQELBQADggEBAJmzuHqc1OGjTZ+lX0d0s68GzTr9J7jW EwrjLaeuiVWvkF3MBSTnBtYPVx5dQSyDveq1eLKuHVdVbRAJoEPoNQALCyIGYf7t P9fx8584kjPJyY6KW/fEjiU/XSJKKC60nChQGX4JXfTfTpUnKopFnmcbqTZNtTUI 5Q/g3/kKkCAv5CVmmDOGFf4vpw4Zn5QljNlIfPXGH+1W7W+t6e2Fv59MxNHTvEn6 xAmJod5Lr8Q9wvN80T1QNPZfM91J1PfX3Iw5TcorkqOIp5UstCSpIyycBS+s7GGK ZqX2D+kL+7KuA8f6jljrF9zW36fG4EpFoPak21XJ/3XD49oInSC50WA= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:50 2024 by rpki-client on console-ams.rpki-client.org