$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer File: 588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer (raw, json) Hash identifier: B+41PLrkwfjyF57fgbMZbvBHQtzxrH3ubMQVM9DmTio= Subject key identifier: 58:8D:D0:FC:E4:BC:24:3C:C9:C6:D6:8A:E0:4E:84:67:E0:E4:D0:69 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 5BB4E2039928AFCFC2004EC2CD9E1CB185EDBE6F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft caRepository: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 29 Jul 2024 15:54:04 +0000 Certificate not after: Mon 28 Jul 2025 15:59:04 +0000 Subordinate resources: IP: 160.22.12.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b4:e2:03:99:28:af:cf:c2:00:4e:c2:cd:9e:1c:b1:85:ed:be:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 29 15:54:04 2024 GMT Not After : Jul 28 15:59:04 2025 GMT Subject: CN=588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4c:59:ff:f8:7b:d8:46:2c:e6:94:df:c4:a2: 2d:42:eb:98:41:68:02:7f:08:8b:50:c6:d1:74:58: c6:ee:8e:d7:b0:be:15:fc:6b:78:75:1f:f4:18:fa: 18:71:08:4c:cd:38:ff:93:84:d6:5d:fb:93:0d:37: b2:d7:47:4b:74:c8:3a:44:13:19:93:99:e1:3f:aa: 35:e8:3a:50:9f:29:ce:43:28:83:49:2d:f3:39:94: b9:2a:09:58:46:4e:09:28:41:ab:4d:e2:8d:f4:02: 1d:7d:8b:f0:e6:c5:a4:49:d7:24:60:67:89:af:ed: 3e:a7:2c:5b:04:01:20:aa:4c:2f:7b:ef:d1:aa:63: 97:00:61:36:98:5c:e1:7e:80:8f:ae:12:f2:03:fb: cd:85:52:48:14:5b:f1:b0:73:7d:f4:2c:69:a1:b5: 28:ca:6d:c5:05:c0:97:4e:24:99:06:8a:d7:08:8b: 7a:19:54:10:21:62:b4:a0:c5:ee:59:fb:b8:4f:e5: fd:cf:f0:bd:13:5d:92:09:d8:a2:db:cf:b7:00:76: 50:27:e5:6d:c7:09:31:6b:8b:50:32:68:5c:ab:c7: 1f:80:e2:2c:af:68:e6:5d:e9:9f:89:aa:a7:63:fa: de:a9:a4:13:5c:4d:a8:34:7f:0e:d6:71:ee:80:c5: a7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 58:8D:D0:FC:E4:BC:24:3C:C9:C6:D6:8A:E0:4E:84:67:E0:E4:D0:69 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.12.0/23 Signature Algorithm: sha256WithRSAEncryption 91:69:6c:26:61:36:ca:71:73:8d:ba:7b:9f:c2:a0:16:8f:18: c3:6d:f1:e6:f3:68:22:75:d0:ea:f6:13:84:3f:31:c4:98:8e: 00:b9:20:6a:aa:7c:30:44:a2:1d:8c:78:b3:2c:c9:b1:7b:61: 12:dd:f8:ab:e0:fd:2c:68:f3:b6:8d:4f:8f:72:54:00:91:00: 1e:00:4e:fb:3f:0d:47:ff:4e:9b:05:0f:6b:84:fa:40:d0:b5: 8b:8b:d0:c9:a7:24:15:79:98:06:e0:95:14:54:9f:da:d2:53: ec:d1:0f:36:24:31:9f:ad:b6:87:40:8c:62:ff:36:bb:a3:a2: 28:04:9a:c4:20:06:a7:49:a1:57:f4:c0:e2:81:a3:f4:ea:50: b1:a5:0a:12:4b:81:12:70:29:d6:a7:dc:77:27:f7:22:c9:36: 9b:1f:4a:11:98:54:1f:79:ca:bd:92:e3:12:4f:d1:5d:a2:3f: ab:00:ae:f5:17:e3:1f:51:bb:0c:75:cf:9e:37:7e:9f:63:f8: 59:9a:35:17:cd:0b:e8:17:ba:1d:e4:17:28:ca:d1:a5:b9:c9: c2:c2:7b:ae:c8:dd:9e:58:e3:31:49:47:91:5c:2c:2f:b7:a1: b3:17:c2:9e:01:29:a2:cc:f4:71:51:4a:c8:b6:5f:a8:77:ec: 28:cb:1d:35 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUW7TiA5kor8/CAE7CzZ4csYXtvm8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDcyOTE1NTQwNFoX DTI1MDcyODE1NTkwNFowMzExMC8GA1UEAxMoNTg4REQwRkNFNEJDMjQzQ0M5QzZE NjhBRTA0RTg0NjdFMEU0RDA2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANVMWf/4e9hGLOaU38SiLULrmEFoAn8Ii1DG0XRYxu6O17C+FfxreHUf9Bj6 GHEITM04/5OE1l37kw03stdHS3TIOkQTGZOZ4T+qNeg6UJ8pzkMog0kt8zmUuSoJ WEZOCShBq03ijfQCHX2L8ObFpEnXJGBnia/tPqcsWwQBIKpML3vv0apjlwBhNphc 4X6Aj64S8gP7zYVSSBRb8bBzffQsaaG1KMptxQXAl04kmQaK1wiLehlUECFitKDF 7ln7uE/l/c/wvRNdkgnYotvPtwB2UCflbccJMWuLUDJoXKvHH4DiLK9o5l3pn4mq p2P63qmkE1xNqDR/DtZx7oDFp68CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFiN0PzkvCQ8ycbWiuBOhGfg5NBpMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wMTk5ZTU0MS0xODYxLTRkNmEtOGUyOC1iMDI4NDU4NjE0OTYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAxOTllNTQx LTE4NjEtNGQ2YS04ZTI4LWIwMjg0NTg2MTQ5Ni8wLzU4OEREMEZDRTRCQzI0M0ND OUM2RDY4QUUwNEU4NDY3RTBFNEQwNjkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFgwwDQYJKoZIhvcNAQELBQADggEBAJFpbCZhNspxc426e5/CoBaPGMNt8ebz aCJ10Or2E4Q/McSYjgC5IGqqfDBEoh2MeLMsybF7YRLd+Kvg/Sxo87aNT49yVACR AB4ATvs/DUf/TpsFD2uE+kDQtYuL0MmnJBV5mAbglRRUn9rSU+zRDzYkMZ+ttodA jGL/NrujoigEmsQgBqdJoVf0wOKBo/TqULGlChJLgRJwKdan3Hcn9yLJNpsfShGY VB95yr2S4xJP0V2iP6sArvUX4x9Ruwx1z543fp9j+FmaNRfNC+gXuh3kFyjK0aW5 ycLCe67I3Z5Y4zFJR5FcLC+3obMXwp4BKaLM9HFRSsi2X6h37CjLHTU= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org