$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer File: 405E466852C38FD4CD20BA6115840947D5D24F5D.cer (raw, json) Hash identifier: xfMWkRjJwPTxd2LZq01BQ1c8SrPJzS3BGxaXEWJAAP8= Subject key identifier: 40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6C1CBD0CC9A374130F4BF2BC4C1575560B42A4B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft caRepository: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 15 Aug 2024 07:43:54 +0000 Certificate not after: Thu 14 Aug 2025 07:48:54 +0000 Subordinate resources: IP: 160.25.203.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:1c:bd:0c:c9:a3:74:13:0f:4b:f2:bc:4c:15:75:56:0b:42:a4:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 15 07:43:54 2024 GMT Not After : Aug 14 07:48:54 2025 GMT Subject: CN=405E466852C38FD4CD20BA6115840947D5D24F5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b1:67:69:6f:b7:98:54:e5:04:8a:1f:22:65: 90:7b:3c:09:77:3b:04:a8:e7:12:c9:a3:d6:46:9e: 3a:cd:6e:a1:d7:14:94:92:3d:59:94:f9:58:70:21: c6:ba:bd:d6:61:12:c7:44:0d:8c:4c:cf:42:96:ca: c3:77:b9:41:4e:2a:17:4b:1c:9e:db:3d:f0:a8:b0: 14:ee:40:98:88:4f:06:50:56:21:fa:e9:cb:3e:13: 7f:58:49:14:10:a1:39:a0:e6:a6:a5:1d:8b:e6:9f: e1:ce:f3:35:da:31:88:3d:c2:eb:e9:fa:c9:ea:4d: 4b:0c:01:e3:5f:14:11:42:61:11:40:da:34:61:95: 4a:a0:cb:18:64:5a:35:55:02:51:30:9d:95:62:74: 64:cb:7a:a0:eb:fe:0a:1c:1e:fc:be:06:2c:31:74: cb:62:62:cf:65:d2:a7:a2:a6:e1:ea:a4:de:74:dc: 2b:bd:74:f1:de:89:ae:ad:97:11:66:4f:75:86:d6: 7b:04:91:73:86:7a:0d:19:47:cf:1e:ca:0d:f7:72: fb:62:c2:d3:d9:72:8a:99:2a:b7:e7:42:65:ee:49: 2e:fa:51:40:b6:99:cd:16:f0:13:b9:93:6c:55:2e: a0:59:ec:9b:82:e8:02:e8:cb:a8:8b:8a:f4:d7:83: 25:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.203.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:06:fb:44:40:77:ba:4d:2b:c4:fa:67:3e:6c:97:85:30:b5: 2b:d7:cf:82:d4:f9:10:ba:a8:8c:44:19:58:8a:b0:94:18:b6: ca:dc:44:51:3d:2a:40:56:1b:be:6f:f9:7e:0c:d7:6f:cf:85: a8:8e:cc:4e:57:0f:7a:b2:3d:53:d2:b9:ab:00:62:76:9d:1d: 42:79:b3:22:43:ba:c6:33:0b:14:16:63:0a:bd:4f:71:65:d8: 30:e1:6a:f7:25:43:a9:29:f0:ff:eb:0c:a9:b4:4e:c2:87:1a: 41:dd:c0:da:f0:81:78:b8:d4:4c:4d:87:4a:cd:ae:38:69:30: f7:4c:df:fa:6c:62:61:ce:86:4d:73:ce:0e:5b:17:8f:0a:0b: c3:9e:2d:73:ba:81:61:26:e0:41:06:d8:ed:0d:05:21:d0:12: 4b:08:89:00:01:d4:a0:e4:ed:48:fb:ac:a6:92:60:46:8a:cd: 7f:1d:05:93:f1:d3:12:89:15:89:d3:bf:59:07:83:01:b2:65: 84:68:0a:0a:ed:69:90:1c:b5:9c:6d:d1:4a:77:86:9f:2d:53: 2b:1a:0e:79:e8:54:00:47:e5:ee:b5:3d:ab:e7:1a:cc:76:14: c1:31:f7:ac:db:79:46:39:d3:e3:e9:1a:ad:79:2a:10:1a:e4: 10:15:25:30 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbBy9DMmjdBMPS/K8TBV1VgtCpLkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDgxNTA3NDM1NFoX DTI1MDgxNDA3NDg1NFowMzExMC8GA1UEAxMoNDA1RTQ2Njg1MkMzOEZENENEMjBC QTYxMTU4NDA5NDdENUQyNEY1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALqxZ2lvt5hU5QSKHyJlkHs8CXc7BKjnEsmj1kaeOs1uodcUlJI9WZT5WHAh xrq91mESx0QNjEzPQpbKw3e5QU4qF0scnts98KiwFO5AmIhPBlBWIfrpyz4Tf1hJ FBChOaDmpqUdi+af4c7zNdoxiD3C6+n6yepNSwwB418UEUJhEUDaNGGVSqDLGGRa NVUCUTCdlWJ0ZMt6oOv+Chwe/L4GLDF0y2Jiz2XSp6Km4eqk3nTcK7108d6Jrq2X EWZPdYbWewSRc4Z6DRlHzx7KDfdy+2LC09lyipkqt+dCZe5JLvpRQLaZzRbwE7mT bFUuoFnsm4LoAujLqIuK9NeDJY8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEBeRmhSw4/UzSC6YRWECUfV0k9dMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81YWM2MTU1ZS0yZDJmLTRmOWUtYjIxOC1lYjUyNWIzYTExMTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhYzYxNTVl LTJkMmYtNGY5ZS1iMjE4LWViNTI1YjNhMTExOS8wLzQwNUU0NjY4NTJDMzhGRDRD RDIwQkE2MTE1ODQwOTQ3RDVEMjRGNUQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgGcswDQYJKoZIhvcNAQELBQADggEBAGwG+0RAd7pNK8T6Zz5sl4UwtSvXz4LU +RC6qIxEGViKsJQYtsrcRFE9KkBWG75v+X4M12/PhaiOzE5XD3qyPVPSuasAYnad HUJ5syJDusYzCxQWYwq9T3Fl2DDhavclQ6kp8P/rDKm0TsKHGkHdwNrwgXi41ExN h0rNrjhpMPdM3/psYmHOhk1zzg5bF48KC8OeLXO6gWEm4EEG2O0NBSHQEksIiQAB 1KDk7Uj7rKaSYEaKzX8dBZPx0xKJFYnTv1kHgwGyZYRoCgrtaZActZxt0Up3hp8t UysaDnnoVABH5e61PavnGsx2FMEx96zbeUY50+PpGq15KhAa5BAVJTA= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org