$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer File: 92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer (raw, json) Hash identifier: PomSOyQ/+19nHhZf6LkYor7YPI1AxB+r+FdDO5nPZZU= Subject key identifier: 92:BD:4E:7F:B6:97:16:E8:F6:49:47:A5:99:03:AF:F7:7C:CB:E4:41 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 03468DB24E54C36C3CFD17FA319A1934E32FABCA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft caRepository: rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 10 Dec 2024 01:59:01 +0000 Certificate not after: Tue 09 Dec 2025 02:04:01 +0000 Subordinate resources: IP: 160.22.218.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:46:8d:b2:4e:54:c3:6c:3c:fd:17:fa:31:9a:19:34:e3:2f:ab:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 10 01:59:01 2024 GMT Not After : Dec 9 02:04:01 2025 GMT Subject: CN=92BD4E7FB69716E8F64947A59903AFF77CCBE441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:54:e5:f2:92:4b:f4:fd:18:72:39:68:7b:1c: e3:bf:26:32:85:c4:5b:58:4c:58:e4:aa:0d:a2:c1: 1a:36:67:20:7e:2a:a6:fa:87:e4:47:84:36:81:2a: eb:2b:f4:63:8a:21:61:7f:b3:e3:25:e7:bd:13:34: 05:22:47:b2:da:07:83:c2:7b:eb:a8:3f:34:8b:e1: 2f:b7:08:bd:17:4c:f4:b5:42:b5:c3:a9:c0:bd:da: b1:46:04:68:74:e7:e9:7a:c6:22:1c:08:8e:75:43: 4d:73:54:ab:c1:a5:7d:ee:09:ba:e7:4c:a0:d3:61: 67:4f:ea:7e:4e:6e:0a:0c:99:4b:1c:b9:11:a3:2f: c7:8c:b8:ea:19:39:2a:e3:10:af:32:2e:98:54:eb: 64:d6:03:17:e3:b2:8e:fb:6c:60:6a:af:8f:e6:2a: f6:a9:15:51:39:0a:c3:b5:07:10:6f:44:cd:d6:5b: ed:b4:f7:22:04:0c:1f:c4:b8:a8:97:9c:6e:92:b8: a2:59:9b:4d:c5:38:89:08:94:71:a2:50:28:74:79: a4:34:8e:c8:d0:fa:45:6e:be:fe:8a:7e:5a:d6:3e: 5f:5c:88:b9:06:df:32:54:bb:aa:57:0b:45:e8:06: e9:5f:9d:15:2e:71:4e:cf:5c:55:f3:21:d4:d6:13: 13:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 92:BD:4E:7F:B6:97:16:E8:F6:49:47:A5:99:03:AF:F7:7C:CB:E4:41 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.218.0/23 Signature Algorithm: sha256WithRSAEncryption 56:24:f2:5e:38:fa:74:70:71:5b:aa:b3:16:d2:ea:9e:84:59: 08:3d:01:b3:65:12:86:78:2a:84:f7:9e:34:7e:29:94:ac:2e: f3:23:78:16:ff:1e:20:a4:79:3c:c1:1f:1f:ad:37:92:f2:0c: 48:d0:7e:15:75:9c:f8:96:6c:f8:89:59:03:4c:b5:c3:8c:be: 84:c4:6a:38:8d:0e:08:dd:65:22:45:b3:42:0e:e6:3c:cf:0b: d4:81:c9:e3:5f:b6:f2:b3:48:65:01:ed:e3:6a:52:a7:14:fa: 58:d8:67:63:86:db:d8:70:28:cb:ad:91:2a:2f:ab:98:3d:8d: 60:86:d3:ee:d6:2c:64:c4:1e:23:4b:77:0c:15:45:e1:fc:a3: 46:53:68:2b:63:1e:f3:e2:ed:5f:fb:d3:9f:c8:7d:3c:15:f1: 98:93:09:c8:f4:07:96:94:ff:f0:c1:68:08:61:32:94:88:db: 0c:c0:e2:58:6c:89:80:fe:f9:9e:82:2e:7d:43:89:d4:c0:e1: 0d:a0:86:00:60:ef:35:d0:29:a0:3a:2e:4b:2f:ee:f4:9e:e9: f8:3c:96:c6:36:a1:9f:57:b5:48:59:47:9e:3a:3d:a0:16:fa: a6:87:73:6d:bd:6c:ba:91:38:f4:a3:ca:99:a8:b8:bf:dc:4d: 37:d5:dc:13 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUA0aNsk5Uw2w8/Rf6MZoZNOMvq8owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTIxMDAxNTkwMVoX DTI1MTIwOTAyMDQwMVowMzExMC8GA1UEAxMoOTJCRDRFN0ZCNjk3MTZFOEY2NDk0 N0E1OTkwM0FGRjc3Q0NCRTQ0MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlU5fKSS/T9GHI5aHsc478mMoXEW1hMWOSqDaLBGjZnIH4qpvqH5EeENoEq 6yv0Y4ohYX+z4yXnvRM0BSJHstoHg8J766g/NIvhL7cIvRdM9LVCtcOpwL3asUYE aHTn6XrGIhwIjnVDTXNUq8Glfe4JuudMoNNhZ0/qfk5uCgyZSxy5EaMvx4y46hk5 KuMQrzIumFTrZNYDF+OyjvtsYGqvj+Yq9qkVUTkKw7UHEG9EzdZb7bT3IgQMH8S4 qJecbpK4olmbTcU4iQiUcaJQKHR5pDSOyND6RW6+/op+WtY+X1yIuQbfMlS7qlcL RegG6V+dFS5xTs9cVfMh1NYTE50CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJK9Tn+2lxbo9klHpZkDr/d8y+RBMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hY2RiMmJmOC1iZWIzLTRjYzktODNhZC0yYzlkNTc1Zjk0YWYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjZGIyYmY4 LWJlYjMtNGNjOS04M2FkLTJjOWQ1NzVmOTRhZi8wLzkyQkQ0RTdGQjY5NzE2RThG NjQ5NDdBNTk5MDNBRkY3N0NDQkU0NDEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFtowDQYJKoZIhvcNAQELBQADggEBAFYk8l44+nRwcVuqsxbS6p6EWQg9AbNl EoZ4KoT3njR+KZSsLvMjeBb/HiCkeTzBHx+tN5LyDEjQfhV1nPiWbPiJWQNMtcOM voTEajiNDgjdZSJFs0IO5jzPC9SByeNftvKzSGUB7eNqUqcU+ljYZ2OG29hwKMut kSovq5g9jWCG0+7WLGTEHiNLdwwVReH8o0ZTaCtjHvPi7V/705/IfTwV8ZiTCcj0 B5aU//DBaAhhMpSI2wzA4lhsiYD++Z6CLn1DidTA4Q2ghgBg7zXQKaA6Lksv7vSe 6fg8lsY2oZ9XtUhZR546PaAW+qaHc229bLqROPSjypmouL/cTTfV3BM= -----END CERTIFICATE-----Generated at Mon Apr 7 09:41:50 2025 by rpki-client