$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer File: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer (raw, json) Hash identifier: AJdVkvYPVCxqQsV3aLxWI4OrXHgm7FZGKPFRmMnXaws= Subject key identifier: 46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 46810F389388DD9C19F5EFECCE06640D13B15FB9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft caRepository: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 16 Aug 2024 04:17:18 +0000 Certificate not after: Fri 15 Aug 2025 04:22:18 +0000 Subordinate resources: IP: 160.25.236.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:81:0f:38:93:88:dd:9c:19:f5:ef:ec:ce:06:64:0d:13:b1:5f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 16 04:17:18 2024 GMT Not After : Aug 15 04:22:18 2025 GMT Subject: CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bf:52:3f:dd:48:5a:0e:28:70:c0:1d:37:cf: 35:4a:0d:2c:6f:c9:4b:b5:e7:e3:83:d0:f1:48:04: df:d7:33:a4:55:05:0e:72:14:46:2a:af:bc:94:07: 02:4e:ca:7c:49:2a:61:1c:b9:f5:10:b7:38:79:fb: 9b:ef:c7:f7:d4:e0:a0:84:84:c5:a2:b8:87:bb:b6: ea:98:cc:98:76:0d:bc:3e:a9:3b:89:91:a7:53:75: 53:c4:a4:60:f7:87:fc:a7:af:e6:78:03:85:c4:29: 3a:c9:ff:37:7e:f8:3a:6f:fb:31:dd:3b:7c:ff:64: d2:dd:fe:c8:51:46:72:46:40:20:cd:a7:1a:c8:c8: eb:3c:dd:ba:74:7c:cc:a0:db:10:08:10:3e:75:9a: 99:06:1d:9d:9a:ff:b1:fe:c5:25:23:bb:90:95:91: 95:db:dc:60:f8:90:55:67:2e:b6:ac:2f:b9:70:08: 27:48:3a:94:2d:c8:c6:56:43:b9:26:bc:82:a5:2f: 9b:3a:85:e3:e6:89:be:33:08:4e:ef:26:af:80:04: 0c:a4:f9:46:e4:9c:b0:70:d2:8a:a3:c9:01:38:ce: 92:5a:e1:9a:e5:ee:37:6b:1c:b6:21:52:61:11:d3: ab:b7:cb:fb:31:d0:ba:03:00:0d:0f:83:b7:34:38: 3c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.236.0/23 Signature Algorithm: sha256WithRSAEncryption 92:58:12:70:13:67:66:95:7f:34:d8:23:de:5f:5a:07:b6:cc: 3d:3e:00:95:a1:d2:68:27:4b:c5:93:f7:4b:ed:57:51:dc:d2: 52:fd:c9:b8:0c:b6:aa:ec:88:eb:ae:9e:6d:90:dd:f7:f1:3b: 77:0c:07:fa:d8:7d:d7:26:d2:43:c3:02:38:08:31:e3:ec:42: 0f:2a:95:3a:03:a4:bc:39:70:b6:68:f4:ee:f6:14:c0:1d:d3: e7:40:a5:ae:74:61:d8:77:71:19:ce:12:cd:78:47:7c:2b:f8: 46:d9:fd:0b:f7:15:c8:d2:f5:78:b8:fe:06:fe:e4:35:fd:b3: 69:6a:04:89:e2:28:5b:8a:f5:09:51:cb:2f:7e:16:e0:2f:5a: 51:dd:79:f3:65:95:5f:65:f7:71:b8:38:78:7b:30:01:6d:13: a2:28:a2:bf:e4:90:1b:b5:b9:16:3d:f7:ff:13:e8:61:9b:52: ab:0e:02:bc:27:a3:b5:15:14:ac:84:67:7d:0f:7a:3b:b6:e2: b3:3a:f0:07:15:ab:97:95:5d:7f:16:04:44:54:6c:46:17:ee: a1:72:62:16:2d:e7:da:8f:3e:2a:ed:a8:45:28:71:8e:6a:84: 19:57:ba:ff:69:30:8d:59:ba:45:a0:b2:b6:47:af:a3:9e:8c: 7e:64:74:60 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURoEPOJOI3ZwZ9e/szgZkDROxX7kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDgxNjA0MTcxOFoX DTI1MDgxNTA0MjIxOFowMzExMC8GA1UEAxMoNDY5Rjg3OTlDOTI4M0Y2QUZBQjIy N0E3QThFMDcwRDMyREMxRTg3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOO/Uj/dSFoOKHDAHTfPNUoNLG/JS7Xn44PQ8UgE39czpFUFDnIURiqvvJQH Ak7KfEkqYRy59RC3OHn7m+/H99TgoISExaK4h7u26pjMmHYNvD6pO4mRp1N1U8Sk YPeH/Kev5ngDhcQpOsn/N374Om/7Md07fP9k0t3+yFFGckZAIM2nGsjI6zzdunR8 zKDbEAgQPnWamQYdnZr/sf7FJSO7kJWRldvcYPiQVWcutqwvuXAIJ0g6lC3IxlZD uSa8gqUvmzqF4+aJvjMITu8mr4AEDKT5RuScsHDSiqPJATjOklrhmuXuN2sctiFS YRHTq7fL+zHQugMADQ+DtzQ4PBsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEafh5nJKD9q+rInp6jgcNMtweh2MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZWMyYTFhYy01YWU0LTQ3YWQtOGRiMS02NTJjN2YzZjdlOGYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RlYzJhMWFj LTVhZTQtNDdhZC04ZGIxLTY1MmM3ZjNmN2U4Zi8wLzQ2OUY4Nzk5QzkyODNGNkFG QUIyMjdBN0E4RTA3MEQzMkRDMUU4NzYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgGewwDQYJKoZIhvcNAQELBQADggEBAJJYEnATZ2aVfzTYI95fWge2zD0+AJWh 0mgnS8WT90vtV1Hc0lL9ybgMtqrsiOuunm2Q3ffxO3cMB/rYfdcm0kPDAjgIMePs Qg8qlToDpLw5cLZo9O72FMAd0+dApa50Ydh3cRnOEs14R3wr+EbZ/Qv3FcjS9Xi4 /gb+5DX9s2lqBIniKFuK9QlRyy9+FuAvWlHdefNllV9l93G4OHh7MAFtE6Ioor/k kBu1uRY99/8T6GGbUqsOArwno7UVFKyEZ30Peju24rM68AcVq5eVXX8WBERUbEYX 7qFyYhYt59qPPirtqEUocY5qhBlXuv9pMI1ZukWgsrZHr6OejH5kdGA= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org