$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer File: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer (raw, json) Hash identifier: 0W49Wn6tvA95tfNuFP1vjGb/9M+edn+eHHx8ua+6hQQ= Subject key identifier: 7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 2BF2A9E59C61101666CD2D60EA387D7FC2A0338A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft caRepository: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 12 Nov 2024 09:52:25 +0000 Certificate not after: Tue 11 Nov 2025 09:57:25 +0000 Subordinate resources: IP: 160.187.136.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f2:a9:e5:9c:61:10:16:66:cd:2d:60:ea:38:7d:7f:c2:a0:33:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 12 09:52:25 2024 GMT Not After : Nov 11 09:57:25 2025 GMT Subject: CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c0:ab:84:2c:27:b9:1e:d7:b2:e9:6b:63:2c: 08:95:7a:94:2a:05:5c:4f:dc:45:d1:d9:2f:c9:91: 11:03:d0:6c:41:5c:32:10:87:f0:98:ad:d4:3c:7a: a5:4a:1d:f5:35:e9:6b:bd:3e:4e:39:c1:6d:9d:9c: 38:d7:db:70:c1:b4:b8:a9:f2:63:1f:5f:09:9a:46: ea:26:cf:f5:b8:77:ea:c2:5c:8b:7d:0d:57:33:e0: b0:ce:ff:fa:09:6f:ed:44:98:0b:47:67:35:3c:ba: ee:5a:e5:19:13:8f:d7:72:88:26:a8:55:98:e2:01: 5c:30:92:55:45:33:65:54:4c:0f:9e:31:85:bb:5d: 70:40:b6:2b:24:a7:75:fe:c4:83:6e:e8:a0:a0:cd: 34:4c:58:8a:b1:25:b8:ac:99:97:78:78:d0:61:32: 65:d7:d8:bd:b4:91:88:e4:e5:91:62:7b:78:30:9f: 03:9c:c4:c1:3a:93:28:0a:a6:8b:06:64:67:b2:e1: 9e:0c:37:06:84:67:a3:34:3d:95:a6:c0:0f:5a:11: 62:2f:22:7d:cc:99:5d:dd:66:21:c5:9b:50:7b:38: 6f:94:18:57:88:bc:d8:33:3b:fe:16:31:af:58:e3: ba:cd:54:5b:47:6e:36:5c:26:e5:1c:41:d6:24:00: e0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.136.0/23 Signature Algorithm: sha256WithRSAEncryption 25:55:6b:d7:22:55:e4:a8:6e:9a:79:14:be:07:86:c3:96:69: 5e:28:ed:29:bf:0f:d1:e7:00:e7:97:0d:03:f5:a8:66:ff:94: 5f:04:bb:13:bf:f6:c0:a0:f7:4c:a3:b2:4e:4e:f3:30:e6:3d: 52:52:6b:d5:98:20:b2:98:1a:84:17:c8:c1:26:9d:e1:44:23: 9d:09:a4:a6:d3:e7:ce:bc:8d:a9:60:8d:e8:cc:39:74:d1:b4: bf:b3:82:b6:0e:28:24:57:43:01:81:a5:d1:4f:af:13:99:80: a3:49:03:5e:77:78:dd:90:47:46:b2:68:58:d0:fc:23:df:72: d4:6e:32:dc:c0:36:94:00:04:5c:93:75:80:83:72:ad:c7:4f: c0:1f:81:1e:ec:ed:ff:ee:c2:2d:d3:90:d8:67:f8:a9:06:a0: e4:c5:5e:c5:45:30:80:d4:f2:e1:12:fe:a3:39:1d:c7:4b:04: fb:cd:0f:2f:59:79:ae:21:56:85:29:05:41:5c:13:d3:3f:18: 86:b3:ea:eb:86:6b:a4:03:8e:dd:f1:66:23:5d:35:7f:46:dc: 7d:0b:ae:fb:8c:1b:d7:62:00:28:47:2c:9f:31:62:26:c6:a3: c5:f7:c8:53:28:46:30:dc:b2:59:5f:e6:2f:26:a9:fb:c2:f2: fd:ed:48:90 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUK/Kp5ZxhEBZmzS1g6jh9f8KgM4owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTExMjA5NTIyNVoX DTI1MTExMTA5NTcyNVowMzExMC8GA1UEAxMoN0M0REZENzg5MTREQzFGNjYxMzBG MjU2QUU2OUQ5RkE4NDM5NDhEQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjAq4QsJ7ke17Lpa2MsCJV6lCoFXE/cRdHZL8mREQPQbEFcMhCH8Jit1Dx6 pUod9TXpa70+TjnBbZ2cONfbcMG0uKnyYx9fCZpG6ibP9bh36sJci30NVzPgsM7/ +glv7USYC0dnNTy67lrlGROP13KIJqhVmOIBXDCSVUUzZVRMD54xhbtdcEC2KySn df7Eg27ooKDNNExYirEluKyZl3h40GEyZdfYvbSRiOTlkWJ7eDCfA5zEwTqTKAqm iwZkZ7Lhngw3BoRnozQ9labAD1oRYi8ifcyZXd1mIcWbUHs4b5QYV4i82DM7/hYx r1jjus1UW0duNlwm5RxB1iQA4OsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHxN/XiRTcH2YTDyVq5p2fqEOUjcMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zYTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhOTIzMzk3 LThjZjgtNGNlZi04ODU2LTBkMjY4ZDczZWRiMS8wLzdDNERGRDc4OTE0REMxRjY2 MTMwRjI1NkFFNjlEOUZBODQzOTQ4REMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgu4gwDQYJKoZIhvcNAQELBQADggEBACVVa9ciVeSobpp5FL4HhsOWaV4o7Sm/ D9HnAOeXDQP1qGb/lF8EuxO/9sCg90yjsk5O8zDmPVJSa9WYILKYGoQXyMEmneFE I50JpKbT5868jalgjejMOXTRtL+zgrYOKCRXQwGBpdFPrxOZgKNJA153eN2QR0ay aFjQ/CPfctRuMtzANpQABFyTdYCDcq3HT8AfgR7s7f/uwi3TkNhn+KkGoOTFXsVF MIDU8uES/qM5HcdLBPvNDy9Zea4hVoUpBUFcE9M/GIaz6uuGa6QDjt3xZiNdNX9G 3H0LrvuMG9diAChHLJ8xYibGo8X3yFMoRjDcsllf5i8mqfvC8v3tSJA= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org