$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer File: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer (raw, json) Hash identifier: cbGvIP2V1iKRMJfZUaA321jQmrmtbGr+4/utNuhv2nI= Subject key identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 3E5EC354664B371BF16892FEE0EE3077F617DFBE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft caRepository: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 17 May 2024 06:18:02 +0000 Certificate not after: Fri 16 May 2025 06:23:02 +0000 Subordinate resources: IP: 160.19.86.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:5e:c3:54:66:4b:37:1b:f1:68:92:fe:e0:ee:30:77:f6:17:df:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 17 06:18:02 2024 GMT Not After : May 16 06:23:02 2025 GMT Subject: CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:24:be:f5:21:b5:12:91:6e:52:bf:fa:16:c1: 63:d4:5a:97:ea:91:80:e5:4b:8b:bc:3b:45:3d:a6: 3e:12:2b:19:57:a2:1d:dc:8c:94:4d:5a:c8:41:09: 5d:75:ea:43:95:01:6f:2e:4c:b0:42:bc:5e:17:47: 8f:88:c2:c6:e1:18:e2:01:59:e5:87:5a:41:79:d6: 8e:6f:74:f7:5b:d0:96:d5:05:82:fb:d0:c5:3e:af: e1:d2:9d:00:b9:85:1b:3e:18:a3:e4:db:5b:30:bd: 55:a0:aa:fb:cb:36:28:63:a8:9c:f0:f6:4f:78:a1: 90:50:85:71:79:e2:1d:1d:2d:2c:12:93:1d:f9:82: a9:31:33:cc:d7:f9:7b:49:96:eb:ce:ea:dd:c4:39: 72:39:fc:d0:07:8c:76:4e:e8:56:16:ed:c7:ae:71: 54:3f:ac:34:67:7c:9f:73:78:66:dd:6f:8f:b6:f7: ef:6f:86:bd:c7:58:57:59:2f:61:4b:be:77:0f:19: 21:be:b6:25:5f:da:23:1a:8c:40:a4:d0:9c:5d:71: f4:0a:5c:79:9a:5b:ff:75:76:4a:70:6a:0b:ff:3a: f8:17:d0:10:5c:4a:3e:30:55:90:8a:b1:c4:44:91: eb:af:c9:56:c2:e0:92:e8:83:db:e3:be:f9:46:2c: c8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.86.0/24 Signature Algorithm: sha256WithRSAEncryption 70:21:cb:55:17:ed:ad:f1:72:ed:1a:6a:73:77:92:38:ae:c5: b9:7d:0c:ee:4c:96:c1:59:9b:78:3b:05:58:72:f4:54:d6:ea: 93:b3:38:d9:ed:5a:4a:7e:84:17:d3:b1:8b:11:83:2c:a4:2d: 4a:ba:6e:44:80:da:94:1c:ee:b4:3c:29:a5:55:17:da:1e:f7: ed:60:da:99:09:f6:68:07:b0:de:f1:66:e7:c5:b5:79:d9:43: f5:e5:25:e5:10:10:ea:bb:82:10:59:28:00:8c:ba:ba:36:cb: 64:a8:64:14:56:b7:b9:4c:9a:ab:3e:09:52:a2:41:b8:27:a6: 6b:99:f4:75:cd:52:f1:31:86:1a:0e:ac:43:93:60:4b:01:aa: f1:ca:8f:d3:4e:69:41:c3:9e:b8:fe:9e:39:d1:16:97:5b:9d: 76:f9:f7:6d:14:0f:7e:d9:86:21:ee:6e:34:ef:3c:a8:23:4e: 8d:7b:9d:ca:19:63:ba:b7:8e:44:89:fd:91:cf:56:28:0d:f8: 87:03:6d:f8:75:b6:3a:12:64:e5:09:ea:61:6d:f7:98:5a:20: eb:c2:c0:c1:68:45:1d:6e:9b:0d:2b:46:c4:35:b6:02:82:70: 8c:b2:b1:de:c9:5d:20:0c:f0:d0:2b:36:15:9d:03:ec:35:5d: 5f:e3:00:44 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUPl7DVGZLNxvxaJL+4O4wd/YX374wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDUxNzA2MTgwMloX DTI1MDUxNjA2MjMwMlowMzExMC8GA1UEAxMoMzQwQTk4QzFFOTZBMzkwOUNFQjBC RUI1ODhDNDBDRkJERDNDQTI5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJgkvvUhtRKRblK/+hbBY9Ral+qRgOVLi7w7RT2mPhIrGVeiHdyMlE1ayEEJ XXXqQ5UBby5MsEK8XhdHj4jCxuEY4gFZ5YdaQXnWjm9091vQltUFgvvQxT6v4dKd ALmFGz4Yo+TbWzC9VaCq+8s2KGOonPD2T3ihkFCFcXniHR0tLBKTHfmCqTEzzNf5 e0mW687q3cQ5cjn80AeMdk7oVhbtx65xVD+sNGd8n3N4Zt1vj7b372+GvcdYV1kv YUu+dw8ZIb62JV/aIxqMQKTQnF1x9ApceZpb/3V2SnBqC/86+BfQEFxKPjBVkIqx xESR66/JVsLgkuiD2+O++UYsyHUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDQKmMHpajkJzrC+tYjEDPvdPKKVMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zMTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxNDRkOTdh LWUzZmItNGZmYy1iN2Y3LWY3YjhiNjY1OWFjNC8wLzM0MEE5OEMxRTk2QTM5MDlD RUIwQkVCNTg4QzQwQ0ZCREQzQ0EyOTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgE1YwDQYJKoZIhvcNAQELBQADggEBAHAhy1UX7a3xcu0aanN3kjiuxbl9DO5M lsFZm3g7BVhy9FTW6pOzONntWkp+hBfTsYsRgyykLUq6bkSA2pQc7rQ8KaVVF9oe 9+1g2pkJ9mgHsN7xZufFtXnZQ/XlJeUQEOq7ghBZKACMuro2y2SoZBRWt7lMmqs+ CVKiQbgnpmuZ9HXNUvExhhoOrEOTYEsBqvHKj9NOaUHDnrj+njnRFpdbnXb5920U D37ZhiHubjTvPKgjTo17ncoZY7q3jkSJ/ZHPVigN+IcDbfh1tjoSZOUJ6mFt95ha IOvCwMFoRR1umw0rRsQ1tgKCcIyysd7JXSAM8NArNhWdA+w1XV/jAEQ= -----END CERTIFICATE-----Generated at Fri Jun 21 22:04:32 2024 by rpki-client on console-fra.rpki-client.org