$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer File: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer (raw, json) Hash identifier: n3B19xhungwe2lNvGA8UHn0JdrFcyaOVwG5K7ZhqxBE= Subject key identifier: 78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 5D7693516F732DCDC9050538154DE940A003FA77 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft caRepository: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 15 Oct 2024 05:19:03 +0000 Certificate not after: Tue 14 Oct 2025 05:24:03 +0000 Subordinate resources: IP: 160.22.242.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:76:93:51:6f:73:2d:cd:c9:05:05:38:15:4d:e9:40:a0:03:fa:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 15 05:19:03 2024 GMT Not After : Oct 14 05:24:03 2025 GMT Subject: CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e2:3c:c8:4d:5b:92:ed:61:8f:09:59:af:3c: b2:f2:92:88:6c:46:a6:f3:7d:31:4c:23:06:e8:ee: 58:cf:34:7f:9d:72:1b:91:01:12:91:08:d1:2e:49: 3a:b1:0f:d6:be:0f:11:28:25:1f:e3:60:f3:54:e5: 8c:82:f2:4d:fd:c4:71:21:af:70:86:7d:f8:bf:a7: bc:14:dd:95:4f:ef:ee:7f:ca:8d:e6:b9:c8:a9:cd: 80:c8:a6:32:94:b4:98:a8:34:e8:f8:ef:3e:ba:85: b5:e6:3b:d0:11:d1:d3:0f:d7:cd:3b:62:a0:7f:7c: b1:29:ff:98:cb:6e:a8:d6:9e:32:a5:06:c8:45:9b: 7a:98:aa:0d:35:18:77:17:60:90:49:f4:ea:d2:86: f9:8d:eb:64:3f:1f:44:21:62:69:af:47:e4:90:c2: d0:59:c3:4e:53:aa:f0:dc:ae:39:33:45:7e:fb:70: af:c3:ef:9e:83:da:1e:8d:35:e9:80:74:fe:f5:e5: 7f:21:99:38:27:dd:01:29:0f:00:fb:80:6e:a3:fb: 6a:dd:8a:fc:d8:29:9a:30:55:d9:49:bf:92:89:72: d9:a3:ee:23:07:17:72:dd:29:23:6e:43:89:f7:26: 69:84:0d:40:1a:94:4d:45:01:2d:61:ee:7b:37:31: ca:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.242.0/23 Signature Algorithm: sha256WithRSAEncryption 85:aa:6c:85:d7:96:9a:87:e3:0d:c7:2b:2b:6d:d4:0f:54:a5: 64:9d:a6:62:83:30:cb:92:4c:f4:5d:71:ec:f3:b7:fc:75:b9: 0a:f9:5f:84:91:5f:b9:d7:fe:3b:c7:34:0f:20:71:c2:2f:d5: 40:f4:cf:2d:ce:15:26:0d:6e:88:de:9b:6a:9d:52:ca:c0:20: c0:7d:68:f8:a0:76:de:57:28:5d:cd:ee:c1:e9:24:2e:2c:dd: 0c:4d:e7:95:ee:15:7e:c2:3c:cf:2f:a1:09:a4:b6:cd:16:3d: fa:25:bf:21:40:5b:d1:02:e0:fe:ea:e9:c3:f6:78:f8:e2:25: 87:a8:54:b4:54:e4:e2:30:8d:6e:b4:c7:58:c5:32:8a:37:12: 40:7a:26:d2:80:aa:96:29:a6:8b:0a:25:ff:10:8a:54:ed:a4: f4:cf:d4:a4:dc:0c:0e:0f:ff:73:b6:10:3a:0f:3a:d5:ed:3e: ca:e9:e0:10:ab:65:d9:7c:6c:ac:61:7e:61:0a:f6:13:a7:d5: d4:0d:c2:92:a6:4e:80:80:16:54:34:16:36:e5:53:03:67:c6: 37:6d:d8:bc:5a:a1:9e:3c:40:6e:be:ea:6d:72:9f:56:ac:69: 06:fe:89:c1:3c:bc:44:d1:15:13:6a:10:48:a3:20:dd:9f:79: 28:48:3f:fb -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXXaTUW9zLc3JBQU4FU3pQKAD+ncwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTAxNTA1MTkwM1oX DTI1MTAxNDA1MjQwM1owMzExMC8GA1UEAxMoNzg0REQ5MzczQjdCMEIxOEQ0NTEz OUVFRkVGNDlGMUJCNDFFMDQwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMLiPMhNW5LtYY8JWa88svKSiGxGpvN9MUwjBujuWM80f51yG5EBEpEI0S5J OrEP1r4PESglH+Ng81TljILyTf3EcSGvcIZ9+L+nvBTdlU/v7n/Kjea5yKnNgMim MpS0mKg06PjvPrqFteY70BHR0w/XzTtioH98sSn/mMtuqNaeMqUGyEWbepiqDTUY dxdgkEn06tKG+Y3rZD8fRCFiaa9H5JDC0FnDTlOq8NyuOTNFfvtwr8PvnoPaHo01 6YB0/vXlfyGZOCfdASkPAPuAbqP7at2K/NgpmjBV2Um/koly2aPuIwcXct0pI25D ifcmaYQNQBqUTUUBLWHuezcxyrMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHhN2Tc7ewsY1FE57v70nxu0HgQIMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83ZTlhZjRkYi1jZjZmLTQ5YjMtYTA1Yi02MWE3YjljODE3YzEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlOWFmNGRi LWNmNmYtNDliMy1hMDViLTYxYTdiOWM4MTdjMS8wLzc4NEREOTM3M0I3QjBCMThE NDUxMzlFRUZFRjQ5RjFCQjQxRTA0MDgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFvIwDQYJKoZIhvcNAQELBQADggEBAIWqbIXXlpqH4w3HKytt1A9UpWSdpmKD MMuSTPRdcezzt/x1uQr5X4SRX7nX/jvHNA8gccIv1UD0zy3OFSYNbojem2qdUsrA IMB9aPigdt5XKF3N7sHpJC4s3QxN55XuFX7CPM8voQmkts0WPfolvyFAW9EC4P7q 6cP2ePjiJYeoVLRU5OIwjW60x1jFMoo3EkB6JtKAqpYpposKJf8QilTtpPTP1KTc DA4P/3O2EDoPOtXtPsrp4BCrZdl8bKxhfmEK9hOn1dQNwpKmToCAFlQ0FjblUwNn xjdt2LxaoZ48QG6+6m1yn1asaQb+icE8vETRFRNqEEijIN2feShIP/s= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org