$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer File: 73626536B3B2A503E6D53473A97CF39A13301753.cer (raw, json) Hash identifier: RJeNwpu3Cd1UqD9rqoLp8IxwzSkbS4SG9N6kWvtUQHk= Subject key identifier: 73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 7096DD567329605E379CFE4D9E2C245574DD6780 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft caRepository: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 09 Oct 2024 06:48:41 +0000 Certificate not after: Wed 08 Oct 2025 06:53:41 +0000 Subordinate resources: IP: 160.187.138.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:96:dd:56:73:29:60:5e:37:9c:fe:4d:9e:2c:24:55:74:dd:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 9 06:48:41 2024 GMT Not After : Oct 8 06:53:41 2025 GMT Subject: CN=73626536B3B2A503E6D53473A97CF39A13301753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1c:02:a1:0a:33:3c:0e:61:b8:2b:41:c3:b0: 82:5f:87:53:a2:ef:7a:4c:b0:e2:c2:cb:4c:3c:56: 84:14:1d:92:55:48:b1:e2:46:7e:6a:8e:c2:e9:ce: a0:3d:d9:f9:f8:08:1b:54:16:3b:d9:b1:84:1a:ea: f3:7f:5d:2b:cf:e9:c7:dc:5b:1c:f6:c3:62:74:92: 7d:84:e0:36:35:b0:d1:f0:33:cf:10:59:f0:07:5c: 16:28:4c:a3:bb:c4:9a:ac:e7:2c:99:94:61:63:12: 66:66:7a:80:c7:43:fd:c8:02:bf:ee:bd:4b:f3:6f: 5f:dd:d1:09:fb:2b:e4:76:8f:6a:d5:84:d6:e0:f4: bc:f4:b4:c0:16:81:a7:c3:52:57:45:f2:2f:4e:46: 85:07:a1:f7:b6:00:08:cc:04:39:c9:a8:be:c4:da: 45:7e:60:2f:8a:65:55:bf:e3:92:f0:d5:43:8f:5d: 9e:5b:86:8d:2f:9d:c1:d8:1f:e3:fb:8e:ed:00:81: bb:cf:d6:cd:75:11:2f:6a:cb:8c:ab:f8:12:39:bd: af:bc:57:86:2a:be:90:f5:ee:05:af:90:e7:2d:45: 0a:69:4e:43:32:a3:a9:ac:f2:6f:9b:cc:9b:bd:34: 63:27:6d:90:8e:20:2c:90:32:3d:27:05:a5:d4:a6: 97:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.138.0/23 Signature Algorithm: sha256WithRSAEncryption 18:30:d9:4c:ed:5b:bb:68:d0:0c:73:6d:ee:73:b9:c5:65:50: 2e:b5:fe:72:eb:9a:54:42:0d:ce:e0:84:fc:e0:54:14:2f:7f: 5d:92:12:69:f8:64:2b:33:f7:b9:96:4e:cf:41:d4:7d:6a:38: 7c:eb:5a:e7:ed:d9:79:5b:b7:10:72:4a:97:e9:e1:34:fc:bd: 32:f1:b9:8c:8a:4a:e2:d0:81:bb:ac:89:0b:f6:32:b3:21:3c: cc:bd:0c:63:3c:50:23:e1:f8:4c:57:d5:0e:15:ca:bd:85:6c: 23:34:08:10:3f:15:66:38:f7:6d:3e:5a:3e:75:4c:c1:8b:a6: b8:5b:84:b6:b9:43:b3:89:04:de:dd:a9:6c:34:8d:05:83:6d: b7:ec:d2:29:21:7b:d6:38:9e:47:b7:11:f0:14:8f:ae:a6:0c: 82:f7:29:bd:ed:eb:4b:f3:fa:ff:91:83:cb:2d:56:c8:20:c9: 46:5f:a2:35:1e:2e:a5:fe:9e:49:ea:a5:64:75:ba:d0:8b:15: 55:f9:43:f4:99:b7:fb:ca:ee:6d:6e:74:d9:dd:6d:f4:6b:b9: 86:ea:60:67:18:bf:e7:c1:f0:48:71:e9:a4:84:68:ac:e9:9f: 0e:2c:06:f5:4d:7e:0a:c3:47:c1:66:2e:11:81:52:0f:1b:51: c0:81:c7:c8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUcJbdVnMpYF43nP5NniwkVXTdZ4AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTAwOTA2NDg0MVoX DTI1MTAwODA2NTM0MVowMzExMC8GA1UEAxMoNzM2MjY1MzZCM0IyQTUwM0U2RDUz NDczQTk3Q0YzOUExMzMwMTc1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANIcAqEKMzwOYbgrQcOwgl+HU6Lvekyw4sLLTDxWhBQdklVIseJGfmqOwunO oD3Z+fgIG1QWO9mxhBrq839dK8/px9xbHPbDYnSSfYTgNjWw0fAzzxBZ8AdcFihM o7vEmqznLJmUYWMSZmZ6gMdD/cgCv+69S/NvX93RCfsr5HaPatWE1uD0vPS0wBaB p8NSV0XyL05GhQeh97YACMwEOcmovsTaRX5gL4plVb/jkvDVQ49dnluGjS+dwdgf 4/uO7QCBu8/WzXURL2rLjKv4Ejm9r7xXhiq+kPXuBa+Q5y1FCmlOQzKjqazyb5vM m700YydtkI4gLJAyPScFpdSml3cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHNiZTazsqUD5tU0c6l885oTMBdTMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMjJmNjQ5 LTk5NjgtNDk1ZC1iZGYxLTdkNzYyNTZkYWFkNS8wLzczNjI2NTM2QjNCMkE1MDNF NkQ1MzQ3M0E5N0NGMzlBMTMzMDE3NTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgu4owDQYJKoZIhvcNAQELBQADggEBABgw2UztW7to0Axzbe5zucVlUC61/nLr mlRCDc7ghPzgVBQvf12SEmn4ZCsz97mWTs9B1H1qOHzrWuft2XlbtxBySpfp4TT8 vTLxuYyKSuLQgbusiQv2MrMhPMy9DGM8UCPh+ExX1Q4Vyr2FbCM0CBA/FWY4920+ Wj51TMGLprhbhLa5Q7OJBN7dqWw0jQWDbbfs0ikhe9Y4nke3EfAUj66mDIL3Kb3t 60vz+v+Rg8stVsggyUZfojUeLqX+nknqpWR1utCLFVX5Q/SZt/vK7m1udNndbfRr uYbqYGcYv+fB8Ehx6aSEaKzpnw4sBvVNfgrDR8FmLhGBUg8bUcCBx8g= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org