$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/8137472FE4C7D48501352601D84D624E0EC41C19.cer File: 8137472FE4C7D48501352601D84D624E0EC41C19.cer (raw, json) Hash identifier: UWBnSucsIG0yr7J+gCxmrmPPgIjs1A8xs9Fyk3nROfM= Subject key identifier: 81:37:47:2F:E4:C7:D4:85:01:35:26:01:D8:4D:62:4E:0E:C4:1C:19 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 2F6A91F9B54797EF0C59D6EB4D4954072BDBAA63 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft caRepository: rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 11 Sep 2024 06:32:12 +0000 Certificate not after: Wed 10 Sep 2025 06:37:12 +0000 Subordinate resources: IP: 160.20.76.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:6a:91:f9:b5:47:97:ef:0c:59:d6:eb:4d:49:54:07:2b:db:aa:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Sep 11 06:32:12 2024 GMT Not After : Sep 10 06:37:12 2025 GMT Subject: CN=8137472FE4C7D48501352601D84D624E0EC41C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8e:31:57:13:04:53:27:56:c5:54:08:e0:42: 5a:5c:f7:e8:61:d9:9c:9b:2a:b0:53:67:c2:e3:0e: 55:5a:24:73:70:0a:48:f0:fe:0e:d8:78:ea:61:11: 01:21:ee:e5:f3:79:58:bf:00:1e:6b:4d:3a:73:3d: bf:76:cc:9c:97:62:b9:fe:59:91:93:b9:bc:a6:b9: 17:3f:d5:74:d2:e4:c9:0b:be:b3:bf:a6:73:ab:f0: c9:40:17:82:99:44:5c:bf:e0:b5:97:a9:55:f1:f7: e6:76:5e:cf:f8:71:bf:88:56:f0:e8:94:90:39:e1: 84:63:e3:d2:f8:97:a2:7f:04:d2:2e:d8:bf:3d:6f: 06:f5:54:66:0e:5a:f9:63:39:01:2d:1a:42:c0:49: 78:a4:f2:99:e8:e7:fe:2d:91:00:2a:33:7d:38:6c: d0:35:de:46:c1:ac:ef:8b:42:7b:a6:98:46:b8:b7: 01:d1:51:ce:7b:1f:56:11:61:78:d0:8b:4b:4f:fc: 45:4f:81:6f:73:10:79:24:97:fc:39:09:0b:3e:57: 43:ca:07:ef:6a:76:f5:89:e7:55:81:e6:98:4d:db: 47:3a:d5:08:91:03:4c:36:72:a1:a6:77:83:61:1d: a4:4c:8b:66:b9:6b:99:ad:a6:1b:15:68:20:bf:eb: bd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 81:37:47:2F:E4:C7:D4:85:01:35:26:01:D8:4D:62:4E:0E:C4:1C:19 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.76.0/23 Signature Algorithm: sha256WithRSAEncryption 90:42:7f:0c:c1:7e:b6:d8:37:f6:cc:cd:99:76:65:4a:f7:ec: 2f:25:9a:03:9b:73:3d:bf:d8:ea:54:97:33:64:0e:f9:16:fe: 7a:b7:c8:ed:ad:fc:1f:9f:d2:7f:40:b3:8c:a1:d9:0b:60:0d: 1f:4c:37:c0:1d:d9:d5:9a:74:2f:a7:50:f3:0a:91:57:2a:d5: ad:55:d8:61:96:49:d6:0c:6d:73:fc:33:ca:2b:5e:c7:c6:75: ee:5d:73:fa:8a:af:a0:4f:76:db:19:87:ad:3b:b2:d9:68:9c: 74:08:48:39:79:d8:10:8b:cd:55:34:57:18:94:15:44:d7:9e: d2:ac:0e:d6:cb:c3:d9:df:aa:94:73:4c:b2:ee:fc:f4:6b:7e: 9f:97:8e:ff:0d:4c:88:2c:46:8b:c4:8e:c8:c6:88:32:33:15: 56:af:ba:d9:5d:95:54:40:9c:8d:b1:00:2b:f3:77:81:03:12: f5:b0:66:54:ef:5c:5e:9c:cd:2d:7f:23:d9:e9:17:9b:7c:1e: f1:be:ab:2a:60:35:69:24:d2:56:a2:86:97:e4:d5:be:1e:64: 33:ab:6e:55:fb:0e:c0:27:0b:36:a1:72:05:c8:1f:3d:78:a7: cf:a1:a0:81:a6:76:c5:aa:a5:e2:87:6f:8a:cb:26:c5:e2:45: 92:0a:b4:46 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUL2qR+bVHl+8MWdbrTUlUByvbqmMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDkxMTA2MzIxMloX DTI1MDkxMDA2MzcxMlowMzExMC8GA1UEAxMoODEzNzQ3MkZFNEM3RDQ4NTAxMzUy NjAxRDg0RDYyNEUwRUM0MUMxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOOMVcTBFMnVsVUCOBCWlz36GHZnJsqsFNnwuMOVVokc3AKSPD+Dth46mER ASHu5fN5WL8AHmtNOnM9v3bMnJdiuf5ZkZO5vKa5Fz/VdNLkyQu+s7+mc6vwyUAX gplEXL/gtZepVfH35nZez/hxv4hW8OiUkDnhhGPj0viXon8E0i7Yvz1vBvVUZg5a +WM5AS0aQsBJeKTymejn/i2RACozfThs0DXeRsGs74tCe6aYRri3AdFRznsfVhFh eNCLS0/8RU+Bb3MQeSSX/DkJCz5XQ8oH72p29YnnVYHmmE3bRzrVCJEDTDZyoaZ3 g2EdpEyLZrlrma2mGxVoIL/rvWsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIE3Ry/kx9SFATUmAdhNYk4OxBwZMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84MWMwOWM5ZS1mZThhLTQ5ODktYjViYi1hZTQxOTMzOGY4NzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgxYzA5Yzll LWZlOGEtNDk4OS1iNWJiLWFlNDE5MzM4Zjg3My8wLzgxMzc0NzJGRTRDN0Q0ODUw MTM1MjYwMUQ4NEQ2MjRFMEVDNDFDMTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFEwwDQYJKoZIhvcNAQELBQADggEBAJBCfwzBfrbYN/bMzZl2ZUr37C8lmgOb cz2/2OpUlzNkDvkW/nq3yO2t/B+f0n9As4yh2QtgDR9MN8Ad2dWadC+nUPMKkVcq 1a1V2GGWSdYMbXP8M8orXsfGde5dc/qKr6BPdtsZh607stlonHQISDl52BCLzVU0 VxiUFUTXntKsDtbLw9nfqpRzTLLu/PRrfp+Xjv8NTIgsRovEjsjGiDIzFVavutld lVRAnI2xACvzd4EDEvWwZlTvXF6czS1/I9npF5t8HvG+qypgNWkk0laihpfk1b4e ZDOrblX7DsAnCzahcgXIHz14p8+hoIGmdsWqpeKHb4rLJsXiRZIKtEY= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org