$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer File: 47571F0366875B7351B244D25CB7E8258FB33E93.cer (raw, json) Hash identifier: U70GOVAIUsrITds1DyBne9a9FyPE9kFJjbYLlxgV9d4= Subject key identifier: 47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 4C9299AC78C35F1BEC1FE3E2267B53F5855F568B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft caRepository: rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 14 Nov 2024 10:19:59 +0000 Certificate not after: Thu 13 Nov 2025 10:24:59 +0000 Subordinate resources: IP: 160.187.164.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:92:99:ac:78:c3:5f:1b:ec:1f:e3:e2:26:7b:53:f5:85:5f:56:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 14 10:19:59 2024 GMT Not After : Nov 13 10:24:59 2025 GMT Subject: CN=47571F0366875B7351B244D25CB7E8258FB33E93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:48:3f:15:fd:df:85:76:0a:0e:36:6b:aa: d7:ce:fe:a3:bf:4a:cf:2b:8d:65:a6:c6:31:11:dd: 42:64:99:d0:fc:90:62:5a:e9:2e:32:99:a0:7d:02: 07:d8:1e:5d:b0:d8:6b:a7:3d:18:f8:7f:fb:2b:61: d3:bd:a2:dd:e9:42:af:8c:ff:81:16:22:5b:9a:d3: f3:8b:21:c5:c7:63:f9:04:5e:08:e9:9d:a8:63:ea: ab:af:b6:7c:c7:b2:9f:c7:9a:d5:11:2a:a4:08:bf: f1:e5:33:cd:8d:ed:44:25:9d:1a:7c:ba:ba:92:2e: d9:4e:e9:d3:d5:af:b1:73:8b:1c:d3:37:e2:7d:3f: e5:f5:3b:54:a1:3d:31:cd:e9:db:10:86:d4:3a:8a: e3:91:b0:cb:f7:73:16:61:32:37:71:ad:56:5d:29: 1d:26:77:55:1d:e7:0b:51:1a:32:4b:74:a0:0b:33: 64:d0:ed:57:e1:4d:75:f5:fa:ff:5e:f3:1d:6f:36: 7e:16:11:f3:9b:4f:fb:06:ea:6b:e4:ab:53:d1:01: 72:1f:a7:78:2d:1a:27:d3:ad:4f:32:04:a8:03:3f: e1:f7:c9:79:d3:e6:21:ed:6e:50:5f:bf:3f:2c:ae: e6:50:77:3a:7d:89:90:f8:4a:44:bd:40:a1:28:ad: fc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.164.0/24 Signature Algorithm: sha256WithRSAEncryption 94:31:29:08:c0:bc:23:b9:7a:fa:c9:ed:6d:2f:89:42:6c:b8: 48:4d:62:8b:56:42:28:85:26:86:c0:4e:3d:21:d6:a7:c6:12: be:46:96:4d:07:52:65:dc:99:4f:fd:f4:8e:b0:f1:cd:5f:e4: f1:75:0b:5d:73:b1:74:42:c7:a4:2d:de:0c:50:01:37:12:ba: 16:06:16:44:89:19:f7:34:54:db:6b:9c:7a:b1:62:7a:47:7c: 8a:3b:b7:20:b6:04:c0:1b:6f:21:da:ee:88:4a:eb:c5:69:3e: e0:07:45:7a:96:3e:bb:e8:30:0e:77:51:d8:93:d3:15:1f:63: 72:4a:7e:29:20:2e:05:70:bb:63:2e:89:8a:cf:7f:bc:ca:19: bd:e4:1d:7f:6f:1e:19:87:2d:88:a2:96:ac:bf:73:7e:08:5f: 78:ad:d5:2a:1b:40:f0:e6:f5:56:c3:a1:e6:4f:55:26:d0:43: e4:26:a2:a7:21:ec:7c:a1:d8:63:75:0d:9b:d8:a4:a8:97:b4: 9c:c3:09:19:a1:6a:56:08:91:c1:e7:66:9d:56:11:2e:38:96: c1:fd:df:2d:3a:97:86:ee:cd:38:cf:a1:91:f6:85:4d:74:7e: d8:e6:c4:3e:5d:94:17:ba:8b:e6:ca:0d:2d:69:30:f7:4d:1a: af:af:81:fb -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUTJKZrHjDXxvsH+PiJntT9YVfVoswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTExNDEwMTk1OVoX DTI1MTExMzEwMjQ1OVowMzExMC8GA1UEAxMoNDc1NzFGMDM2Njg3NUI3MzUxQjI0 NEQyNUNCN0U4MjU4RkIzM0U5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0dSD8V/d+FdgoONmuq187+o79KzyuNZabGMRHdQmSZ0PyQYlrpLjKZoH0C B9geXbDYa6c9GPh/+yth072i3elCr4z/gRYiW5rT84shxcdj+QReCOmdqGPqq6+2 fMeyn8ea1REqpAi/8eUzzY3tRCWdGny6upIu2U7p09WvsXOLHNM34n0/5fU7VKE9 Mc3p2xCG1DqK45Gwy/dzFmEyN3GtVl0pHSZ3VR3nC1EaMkt0oAszZNDtV+FNdfX6 /17zHW82fhYR85tP+wbqa+SrU9EBch+neC0aJ9OtTzIEqAM/4ffJedPmIe1uUF+/ Pyyu5lB3On2JkPhKRL1AoSit/GUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEdXHwNmh1tzUbJE0ly36CWPsz6TMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jZjI5NzVkNS1mOTkwLTQ4NGUtOTQ2MC1mMTM2YjQ1NTFmOGQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NmMjk3NWQ1 LWY5OTAtNDg0ZS05NDYwLWYxMzZiNDU1MWY4ZC8wLzQ3NTcxRjAzNjY4NzVCNzM1 MUIyNDREMjVDQjdFODI1OEZCMzNFOTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgu6QwDQYJKoZIhvcNAQELBQADggEBAJQxKQjAvCO5evrJ7W0viUJsuEhNYotW QiiFJobATj0h1qfGEr5Glk0HUmXcmU/99I6w8c1f5PF1C11zsXRCx6Qt3gxQATcS uhYGFkSJGfc0VNtrnHqxYnpHfIo7tyC2BMAbbyHa7ohK68VpPuAHRXqWPrvoMA53 UdiT0xUfY3JKfikgLgVwu2MuiYrPf7zKGb3kHX9vHhmHLYiilqy/c34IX3it1Sob QPDm9VbDoeZPVSbQQ+Qmoqch7Hyh2GN1DZvYpKiXtJzDCRmhalYIkcHnZp1WES44 lsH93y06l4buzTjPoZH2hU10ftjmxD5dlBe6i+bKDS1pMPdNGq+vgfs= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org