$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer File: 30C896473FC5DE403F4651059F6BE1586BFAC473.cer (raw, json) Hash identifier: UAHKNcKvTiLRBBHBb3bqCTt0BB+A6l8vAF3ioSdtpeI= Subject key identifier: 30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 67E440835BF8160E95B3DA7CEBAB5AFE8750EC6E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft caRepository: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 22 Aug 2024 07:25:56 +0000 Certificate not after: Thu 21 Aug 2025 07:30:56 +0000 Subordinate resources: IP: 157.66.66.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e4:40:83:5b:f8:16:0e:95:b3:da:7c:eb:ab:5a:fe:87:50:ec:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 22 07:25:56 2024 GMT Not After : Aug 21 07:30:56 2025 GMT Subject: CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:72:3e:a7:c3:f8:70:0c:a1:5c:cf:34:a0:0d: 7d:d9:aa:67:72:48:f5:4e:ba:22:79:83:7f:ea:05: 96:3c:a4:ae:de:ac:e1:4f:bd:a3:e3:bd:b7:c2:ba: c5:5e:4d:80:a0:17:ce:60:b4:69:dd:ad:c0:1d:33: d1:1f:73:bc:5e:90:7e:fb:16:f6:26:1b:64:c2:55: 4d:52:f0:96:8f:9f:fc:80:18:6b:36:35:ef:3e:1b: 1c:6e:bc:5f:3e:61:fc:ca:4d:27:53:74:37:b4:d8: ea:82:ab:a1:68:51:a0:11:97:f0:ed:04:2b:3d:5f: 75:d1:e2:4f:4b:3e:43:a0:44:87:13:f9:b9:54:15: dd:82:12:55:8f:31:82:cd:66:c6:94:07:88:48:0f: 31:1e:24:32:8f:8f:c3:58:34:b7:8d:eb:40:ad:02: ac:d4:df:cf:42:1f:d7:79:4a:a0:57:43:53:bf:a3: ee:15:58:62:90:ab:2c:22:41:d5:44:9f:4c:9a:61: aa:0c:99:a3:d7:60:32:5f:c3:41:6a:63:f0:a2:78: ff:dc:96:49:b9:b5:4b:1d:f5:0c:78:8b:c9:13:cc: 72:0a:5a:5b:83:5b:bc:c5:86:d3:92:14:de:ff:06: b0:80:bd:c2:0f:3f:92:86:ab:62:21:af:18:93:ef: d1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.66.0/23 Signature Algorithm: sha256WithRSAEncryption 21:f0:51:3d:31:94:26:11:07:00:7e:cf:91:f5:3e:ef:2e:00: 6e:a4:74:a9:9f:32:52:ae:71:05:8e:3a:cb:fd:ca:8a:fb:1c: 10:64:f2:e5:b0:d0:65:75:af:bd:9f:bf:41:0d:46:ea:8c:92: 4e:97:f1:21:46:f0:e4:1a:8e:28:a4:c0:a4:97:2b:b3:94:8c: 3f:68:79:f5:4b:91:97:59:f2:9a:fb:33:bb:1c:f2:85:8d:11: 8d:49:92:ea:1c:3a:a6:18:8a:ff:44:d4:ac:c9:bd:e0:47:08: 46:8f:62:c9:5a:14:ee:eb:31:0b:00:fd:db:98:03:fb:91:aa: bf:8e:3f:f1:9d:3b:6c:c5:ae:89:cb:46:31:9c:c2:f0:db:bc: d1:ed:38:1a:6f:62:b1:7a:04:6a:f9:a8:fe:57:d8:00:08:38: ab:42:99:3e:49:49:68:af:b1:30:d3:50:e0:ec:04:25:47:30: 8a:c2:db:7b:1b:90:52:56:32:86:5b:a3:91:20:7b:d5:1f:7a: 9d:78:f4:16:68:ab:e6:20:1e:07:7d:e9:f9:55:5d:89:6c:12: c7:a4:9b:a3:17:4f:1a:e3:1e:68:af:40:ca:ea:43:40:15:16: 71:06:36:5d:14:d8:bb:95:78:20:89:35:44:b3:87:7e:93:b6: 3d:0f:ad:dc -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZ+RAg1v4Fg6Vs9p866ta/odQ7G4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDgyMjA3MjU1NloX DTI1MDgyMTA3MzA1NlowMzExMC8GA1UEAxMoMzBDODk2NDczRkM1REU0MDNGNDY1 MTA1OUY2QkUxNTg2QkZBQzQ3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9yPqfD+HAMoVzPNKANfdmqZ3JI9U66InmDf+oFljykrt6s4U+9o+O9t8K6 xV5NgKAXzmC0ad2twB0z0R9zvF6QfvsW9iYbZMJVTVLwlo+f/IAYazY17z4bHG68 Xz5h/MpNJ1N0N7TY6oKroWhRoBGX8O0EKz1fddHiT0s+Q6BEhxP5uVQV3YISVY8x gs1mxpQHiEgPMR4kMo+Pw1g0t43rQK0CrNTfz0If13lKoFdDU7+j7hVYYpCrLCJB 1USfTJphqgyZo9dgMl/DQWpj8KJ4/9yWSbm1Sx31DHiLyRPMcgpaW4NbvMWG05IU 3v8GsIC9wg8/koarYiGvGJPv0eMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDDIlkc/xd5AP0ZRBZ9r4Vhr+sRzMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83NjcwYWU3Ni05NTk0LTQ5ODAtYjQxMC00OTFhNjMxOWZmM2EvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2NzBhZTc2 LTk1OTQtNDk4MC1iNDEwLTQ5MWE2MzE5ZmYzYS8wLzMwQzg5NjQ3M0ZDNURFNDAz RjQ2NTEwNTlGNkJFMTU4NkJGQUM0NzMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdQkIwDQYJKoZIhvcNAQELBQADggEBACHwUT0xlCYRBwB+z5H1Pu8uAG6kdKmf MlKucQWOOsv9yor7HBBk8uWw0GV1r72fv0ENRuqMkk6X8SFG8OQajiikwKSXK7OU jD9oefVLkZdZ8pr7M7sc8oWNEY1JkuocOqYYiv9E1KzJveBHCEaPYslaFO7rMQsA /duYA/uRqr+OP/GdO2zFronLRjGcwvDbvNHtOBpvYrF6BGr5qP5X2AAIOKtCmT5J SWivsTDTUODsBCVHMIrC23sbkFJWMoZbo5Ege9Ufep149BZoq+YgHgd96flVXYls Esekm6MXTxrjHmivQMrqQ0AVFnEGNl0U2LuVeCCJNUSzh36Ttj0Prdw= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:50 2024 by rpki-client on console-ams.rpki-client.org