$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer File: 4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer (raw, json) Hash identifier: RV2ztmCAO2pozh51Fk88yBpYxXKb7Iye2vdJsCfZulI= Subject key identifier: 4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 624190DC6A9868798AFF749C478B755624AD3007 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft caRepository: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 22 Oct 2024 05:47:19 +0000 Certificate not after: Tue 21 Oct 2025 05:52:19 +0000 Subordinate resources: IP: 160.25.196.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:41:90:dc:6a:98:68:79:8a:ff:74:9c:47:8b:75:56:24:ad:30:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 22 05:47:19 2024 GMT Not After : Oct 21 05:52:19 2025 GMT Subject: CN=4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:26:b7:b1:f4:2d:ce:8c:24:b3:25:5a:c9:f8: 5f:fb:11:55:e8:f6:b0:e9:76:e6:ad:6a:db:7e:fd: 5b:e2:73:c6:08:a8:8b:2f:13:24:52:11:19:18:1b: e8:e3:b2:04:14:bc:2f:24:2f:f6:5c:5d:e7:1e:01: a5:c8:c6:fe:f5:b6:f1:25:8e:96:31:e8:c5:1a:c7: be:03:27:3d:f3:01:21:4c:3d:6c:1a:fa:75:00:08: cf:ba:ac:61:0d:e8:54:4b:7c:73:42:fa:ce:9b:8b: 1f:5f:02:27:6b:cb:f5:b0:4c:59:53:aa:07:7c:1b: c8:b8:11:4d:b1:d4:df:7f:6a:f3:f0:36:b4:ec:e7: 6f:7e:b9:d4:1b:d0:f8:d1:b2:9f:3b:15:db:24:a4: 06:44:4c:af:b9:f0:8b:0a:52:e8:19:52:9e:d3:8f: 3d:47:06:31:19:a7:94:62:42:a5:41:40:28:1c:73: 95:a1:9f:c2:17:de:ca:3f:a1:7a:7d:f0:f6:3b:38: 67:25:d5:1f:f5:52:f3:23:d1:fe:2b:42:1a:ac:fc: 14:c7:6f:c4:22:c4:cd:76:7b:74:75:6b:2e:c3:1d: d2:04:a6:f7:76:3e:9c:65:de:63:07:20:a9:04:6f: de:8c:6c:4d:9f:f3:a1:8f:14:a1:c9:95:2e:d9:b5: 2a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.196.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:45:36:2e:c2:00:06:c9:61:17:f0:57:aa:f3:12:c5:4f:f0: d6:71:e6:b2:eb:49:c8:ea:d4:dc:0a:89:81:1a:77:59:55:07: a9:aa:a8:9b:58:df:e0:bc:c1:a4:25:80:61:a8:7a:b1:d7:a2: f5:42:18:12:1b:a9:31:6b:3c:30:04:24:d0:e3:31:fd:b7:d0: 1f:8b:e3:be:d1:cf:a3:4b:15:7b:20:d0:75:e0:3b:8c:00:42: e7:01:1e:6d:58:25:10:f9:19:3b:e0:78:4a:f9:30:80:7d:af: 75:4f:5d:2c:ee:33:98:4f:2c:5b:2b:1f:bf:67:f9:8b:3a:2a: ca:33:9d:1e:f8:d2:4e:35:1c:4f:0a:e4:3a:5e:46:c0:b2:88: 20:60:1a:00:73:b9:75:3b:fa:c7:b4:14:6d:76:8c:06:42:af: d0:0e:ce:65:9e:86:d4:89:f8:88:6b:c6:66:e5:a9:78:bb:6d: 1f:e2:b0:74:ba:54:c4:de:8d:c6:d6:b7:10:53:d7:7e:24:56: 14:97:25:f2:f1:f6:5b:7c:ee:12:4f:3a:6f:83:8b:77:d7:e6: 77:b2:61:0b:43:52:65:42:88:4d:d5:16:fd:41:ef:6b:0f:8d: 0b:98:87:20:3c:5c:7a:ee:75:b6:2d:7e:27:45:61:2b:31:0b: 1f:e5:39:8c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUYkGQ3GqYaHmK/3ScR4t1ViStMAcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTAyMjA1NDcxOVoX DTI1MTAyMTA1NTIxOVowMzExMC8GA1UEAxMoNEFDRTBBRERCQjVCRjNCNDlCMUNE QTVBMjMxMENGMDZCMzM0QTY1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUmt7H0Lc6MJLMlWsn4X/sRVej2sOl25q1q2379W+Jzxgioiy8TJFIRGRgb 6OOyBBS8LyQv9lxd5x4BpcjG/vW28SWOljHoxRrHvgMnPfMBIUw9bBr6dQAIz7qs YQ3oVEt8c0L6zpuLH18CJ2vL9bBMWVOqB3wbyLgRTbHU339q8/A2tOznb3651BvQ +NGynzsV2ySkBkRMr7nwiwpS6BlSntOPPUcGMRmnlGJCpUFAKBxzlaGfwhfeyj+h en3w9js4ZyXVH/VS8yPR/itCGqz8FMdvxCLEzXZ7dHVrLsMd0gSm93Y+nGXeYwcg qQRv3oxsTZ/zoY8UocmVLtm1Ks8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFErOCt27W/O0mxzaWiMQzwazNKZZMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iYjY5ZDY2Ny0xN2E0LTRmZGQtOWM1Ny0xMTIyMDMzZWY5OTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JiNjlkNjY3 LTE3YTQtNGZkZC05YzU3LTExMjIwMzNlZjk5OS8wLzRBQ0UwQUREQkI1QkYzQjQ5 QjFDREE1QTIzMTBDRjA2QjMzNEE2NTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgGcQwDQYJKoZIhvcNAQELBQADggEBAI9FNi7CAAbJYRfwV6rzEsVP8NZx5rLr Scjq1NwKiYEad1lVB6mqqJtY3+C8waQlgGGoerHXovVCGBIbqTFrPDAEJNDjMf23 0B+L477Rz6NLFXsg0HXgO4wAQucBHm1YJRD5GTvgeEr5MIB9r3VPXSzuM5hPLFsr H79n+Ys6KsoznR740k41HE8K5DpeRsCyiCBgGgBzuXU7+se0FG12jAZCr9AOzmWe htSJ+IhrxmblqXi7bR/isHS6VMTejcbWtxBT134kVhSXJfLx9lt87hJPOm+Di3fX 5neyYQtDUmVCiE3VFv1B72sPjQuYhyA8XHrudbYtfidFYSsxCx/lOYw= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org