$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer File: 69FEA3D523BC4635AE385A6D91412834159FF34B.cer (raw, json) Hash identifier: Y++Hci4tziFDkHUbabNEJsjT3dkrN0C276H2FAB1nS0= Subject key identifier: 69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6D280B1506D2EF3DDC0FFB469142FBD7217C7EAC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft caRepository: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 24 Jul 2024 00:28:30 +0000 Certificate not after: Wed 23 Jul 2025 00:33:30 +0000 Subordinate resources: IP: 160.22.217.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:28:0b:15:06:d2:ef:3d:dc:0f:fb:46:91:42:fb:d7:21:7c:7e:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 24 00:28:30 2024 GMT Not After : Jul 23 00:33:30 2025 GMT Subject: CN=69FEA3D523BC4635AE385A6D91412834159FF34B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:65:75:0b:42:ce:8d:5e:89:da:1b:e7:96:69: 1b:9d:17:42:de:5e:20:5d:de:21:32:5c:0a:d0:b6: 18:eb:54:7f:31:62:f2:bc:1a:fe:72:3b:88:36:12: e0:cf:4f:9d:f7:eb:31:5f:97:7e:ea:ea:7c:1f:02: 41:d9:74:f7:03:80:b4:33:59:cf:0b:62:2b:82:a1: 33:28:a2:41:bd:0f:ef:42:73:9b:aa:de:52:30:b6: 7c:1c:4b:78:24:cf:3f:cb:87:b7:c1:c1:84:ce:b5: 29:47:4f:24:61:c6:a9:fe:0c:70:94:d2:06:e0:7a: 07:8a:43:8c:26:9b:21:9d:a4:78:4f:62:5f:fb:7e: 4c:a7:04:42:96:ca:06:27:6b:76:e6:05:13:f8:08: 17:1e:fd:4f:17:7f:71:6d:d4:95:3a:b3:4c:6c:9d: 98:2c:13:b9:89:3d:76:81:4a:ca:84:1f:a8:ee:25: 1a:80:5d:5b:b7:e3:b0:c8:c0:9f:e2:7c:2f:96:f5: 53:dd:1f:e0:73:0f:64:4c:56:0e:c7:02:6b:4f:6f: 2f:4d:03:e5:81:0e:34:2c:53:e2:2c:78:1f:74:b8: 89:dd:a3:af:65:24:bc:38:8a:86:d5:68:5d:9b:99: 04:47:8d:49:88:36:10:77:63:ed:5c:0f:10:87:f5: c2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.217.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:5c:f6:93:29:ce:1a:96:2d:22:47:c3:1a:8e:47:3f:f7:ae: bb:ac:59:a7:f4:66:2c:05:02:75:61:77:e1:a2:79:6d:24:06: 67:d8:ec:ed:66:10:e6:e8:9a:6c:b0:67:01:37:fb:37:13:07: 21:b9:20:07:e5:65:22:e6:60:5f:4c:97:b5:76:d8:56:30:d2: 6d:43:78:44:39:ea:9e:fb:01:c4:96:58:34:eb:8c:c5:ad:1d: 8a:3a:14:a0:ea:00:59:fb:aa:fc:bd:37:a2:7b:bd:c4:70:4b: fe:df:cc:72:80:c6:31:a0:f8:b8:5b:df:64:43:63:93:4b:25: c6:0f:35:e0:28:97:2f:68:13:11:f4:ea:d9:db:b8:be:73:b7: f5:e9:d2:98:2c:93:d3:01:68:87:df:b2:d6:67:23:a1:4d:77: 83:2c:ba:6c:1b:02:78:00:a5:18:de:5d:4b:0b:cc:d9:6f:cb: a6:bc:0d:37:90:4f:b2:ba:8b:9e:08:d5:36:77:84:d8:da:fc: d4:b6:1b:d2:ae:bb:23:22:1a:50:50:12:d6:23:43:2f:0e:a6: cf:af:d8:40:00:b4:e0:1e:18:8c:33:a0:cf:97:c9:70:31:02: 07:37:89:1c:67:17:61:67:ba:28:61:cc:4a:41:34:dc:a6:70: 7a:02:f0:46 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbSgLFQbS7z3cD/tGkUL71yF8fqwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDcyNDAwMjgzMFoX DTI1MDcyMzAwMzMzMFowMzExMC8GA1UEAxMoNjlGRUEzRDUyM0JDNDYzNUFFMzg1 QTZEOTE0MTI4MzQxNTlGRjM0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ1ldQtCzo1eidob55ZpG50XQt5eIF3eITJcCtC2GOtUfzFi8rwa/nI7iDYS 4M9PnffrMV+XfurqfB8CQdl09wOAtDNZzwtiK4KhMyiiQb0P70Jzm6reUjC2fBxL eCTPP8uHt8HBhM61KUdPJGHGqf4McJTSBuB6B4pDjCabIZ2keE9iX/t+TKcEQpbK BidrduYFE/gIFx79Txd/cW3UlTqzTGydmCwTuYk9doFKyoQfqO4lGoBdW7fjsMjA n+J8L5b1U90f4HMPZExWDscCa09vL00D5YEONCxT4ix4H3S4id2jr2UkvDiKhtVo XZuZBEeNSYg2EHdj7VwPEIf1whsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGn+o9UjvEY1rjhabZFBKDQVn/NLMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NlN2Q3Mzhl LTJjYzctNGJkMi1iYjI4LTkxNDJlMWJhYTBiYS8wLzY5RkVBM0Q1MjNCQzQ2MzVB RTM4NUE2RDkxNDEyODM0MTU5RkYzNEIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgFtkwDQYJKoZIhvcNAQELBQADggEBAFxc9pMpzhqWLSJHwxqORz/3rrusWaf0 ZiwFAnVhd+GieW0kBmfY7O1mEObommywZwE3+zcTByG5IAflZSLmYF9Ml7V22FYw 0m1DeEQ56p77AcSWWDTrjMWtHYo6FKDqAFn7qvy9N6J7vcRwS/7fzHKAxjGg+Lhb 32RDY5NLJcYPNeAoly9oExH06tnbuL5zt/Xp0pgsk9MBaIffstZnI6FNd4Msumwb AngApRjeXUsLzNlvy6a8DTeQT7K6i54I1TZ3hNja/NS2G9KuuyMiGlBQEtYjQy8O ps+v2EAAtOAeGIwzoM+XyXAxAgc3iRxnF2FnuihhzEpBNNymcHoC8EY= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org