$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer File: 6A755F0ECD114936B4C154BE153030E6BFE42025.cer (raw, json) Hash identifier: 8eXg5Xh3Uv457Cv90OWLPWIx/ROHLichd5M+gDkMqt8= Subject key identifier: 6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 4EB493D07F7D569249FD212CF44F771FE2674468 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft caRepository: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 30 Oct 2024 12:28:42 +0000 Certificate not after: Wed 29 Oct 2025 12:33:42 +0000 Subordinate resources: IP: 160.25.244.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:b4:93:d0:7f:7d:56:92:49:fd:21:2c:f4:4f:77:1f:e2:67:44:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 30 12:28:42 2024 GMT Not After : Oct 29 12:33:42 2025 GMT Subject: CN=6A755F0ECD114936B4C154BE153030E6BFE42025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bb:41:5e:e9:e2:f2:cb:a2:1d:ad:4b:26:1e: 47:e4:5c:66:5b:b9:ba:a6:d4:17:02:6f:4c:a9:06: 10:da:07:17:58:7b:e1:ba:81:7f:21:f8:ee:b6:ba: d8:a7:3b:9c:d5:2e:d5:a1:95:75:39:a2:fa:08:87: 06:9a:b6:47:c1:00:49:6e:ff:fd:7e:d1:f4:06:3a: 0f:f9:21:02:1f:b4:0d:c0:35:2f:7c:9e:a9:22:da: b6:72:e8:95:ec:40:c5:5e:3f:90:70:ee:1f:4b:cc: cd:58:2f:d2:8c:8f:b8:ff:2c:61:90:db:bc:f0:f5: e7:cc:5c:fe:c3:5f:46:d2:d9:d4:c5:22:59:db:28: e5:d6:31:ce:86:73:dc:69:1e:1f:28:84:65:2c:a7: 13:47:9a:f9:90:97:e8:8d:e4:93:20:35:21:73:06: 08:35:d3:cd:13:83:a9:09:ce:2b:6c:e9:3a:e9:3a: ea:6e:07:49:da:99:e3:bc:28:b8:5b:b0:9d:07:25: a2:9e:6f:06:88:f9:ff:39:d4:ec:13:ad:15:3a:00: e0:80:4f:9d:0c:7a:d2:cc:dc:36:1b:47:b3:97:6a: 7c:39:dc:75:a7:c8:6a:15:30:11:d1:49:59:bb:93: 3d:0c:8a:e3:5c:0a:3c:71:be:e7:8a:09:07:b6:4e: 7a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.244.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:c7:eb:80:29:96:05:e8:29:62:40:a5:7e:50:c5:67:b2:e0: 9e:51:3d:00:b4:4e:ee:7a:f1:2b:7f:1b:ce:e9:5b:9a:04:4e: 18:53:18:2e:2f:8e:02:ad:31:10:95:9c:af:be:a6:e6:6b:a2: 31:68:68:56:c5:5c:ea:28:ba:15:78:1e:73:7a:97:7f:a7:38: 18:0d:c7:6f:8d:61:27:16:a2:84:9d:5b:47:95:06:1b:85:5f: 94:90:c1:cc:53:2b:a6:ef:b1:7a:45:c3:2a:1f:fa:84:25:1f: 14:09:51:33:2d:53:a8:25:f3:82:d9:65:37:a2:aa:10:38:f7: 1b:c3:81:5f:29:69:38:f7:56:c7:fe:c0:0a:4e:2a:23:43:0e: 0c:cc:76:c0:a9:9d:c0:0a:d9:fa:fa:74:a6:f9:b4:43:80:bf: d4:c0:00:81:1c:60:40:81:e8:61:76:97:c0:18:80:67:73:86: 9d:88:9a:99:5d:6e:54:7e:f8:5b:db:01:56:2b:e4:4f:cf:a9: e6:bf:f7:60:ba:e3:de:af:29:d1:45:c4:f5:cf:94:60:ae:7f: e9:07:66:15:20:ef:6a:2b:a7:25:fc:99:62:bb:02:ab:34:7b: 89:a4:68:8d:43:09:5b:cf:da:72:b1:8b:da:71:1e:e6:8d:37: c7:bd:cf:31 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUTrST0H99VpJJ/SEs9E93H+JnRGgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTAzMDEyMjg0MloX DTI1MTAyOTEyMzM0MlowMzExMC8GA1UEAxMoNkE3NTVGMEVDRDExNDkzNkI0QzE1 NEJFMTUzMDMwRTZCRkU0MjAyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMi7QV7p4vLLoh2tSyYeR+RcZlu5uqbUFwJvTKkGENoHF1h74bqBfyH47ra6 2Kc7nNUu1aGVdTmi+giHBpq2R8EASW7//X7R9AY6D/khAh+0DcA1L3yeqSLatnLo lexAxV4/kHDuH0vMzVgv0oyPuP8sYZDbvPD158xc/sNfRtLZ1MUiWdso5dYxzoZz 3GkeHyiEZSynE0ea+ZCX6I3kkyA1IXMGCDXTzRODqQnOK2zpOuk66m4HSdqZ47wo uFuwnQclop5vBoj5/znU7BOtFToA4IBPnQx60szcNhtHs5dqfDncdafIahUwEdFJ WbuTPQyK41wKPHG+54oJB7ZOejECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGp1Xw7NEUk2tMFUvhUwMOa/5CAlMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jOGNjMWM3ZS1kYTc0LTRiMTEtYjY3YS1kNWYyN2Q5ODE3NTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4Y2MxYzdl LWRhNzQtNGIxMS1iNjdhLWQ1ZjI3ZDk4MTc1Ny8wLzZBNzU1RjBFQ0QxMTQ5MzZC NEMxNTRCRTE1MzAzMEU2QkZFNDIwMjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgGfQwDQYJKoZIhvcNAQELBQADggEBAFvH64AplgXoKWJApX5QxWey4J5RPQC0 Tu568St/G87pW5oEThhTGC4vjgKtMRCVnK++puZrojFoaFbFXOoouhV4HnN6l3+n OBgNx2+NYScWooSdW0eVBhuFX5SQwcxTK6bvsXpFwyof+oQlHxQJUTMtU6gl84LZ ZTeiqhA49xvDgV8paTj3Vsf+wApOKiNDDgzMdsCpncAK2fr6dKb5tEOAv9TAAIEc YECB6GF2l8AYgGdzhp2ImpldblR++FvbAVYr5E/Pqea/92C6496vKdFFxPXPlGCu f+kHZhUg72orpyX8mWK7Aqs0e4mkaI1DCVvP2nKxi9pxHuaNN8e9zzE= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org