$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer File: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer (raw, json) Hash identifier: I9rD0rgWGFyRKlat2YCww9sFrm22E/ArglWMOEHrpBE= Subject key identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 690C2E8DC2318E743E0D1B7C5952668A7636A468 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft caRepository: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 19 Nov 2024 12:09:45 +0000 Certificate not after: Tue 18 Nov 2025 12:14:45 +0000 Subordinate resources: IP: 157.66.238.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:0c:2e:8d:c2:31:8e:74:3e:0d:1b:7c:59:52:66:8a:76:36:a4:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 19 12:09:45 2024 GMT Not After : Nov 18 12:14:45 2025 GMT Subject: CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fa:50:ec:08:ba:3c:0b:0c:8a:a6:27:5f:fa: 02:ff:93:9f:d2:d5:5a:aa:63:4c:41:e7:d0:87:c9: 0b:4e:4d:c5:21:d8:29:08:e5:49:ec:49:8e:7b:fe: c8:e4:8d:93:18:77:44:13:40:78:13:c6:7a:f2:84: 4d:e4:09:48:e3:28:31:c5:66:18:61:70:f6:a8:cb: 16:d7:3a:d1:7b:40:71:c7:c1:3f:b5:37:51:ce:7b: be:b3:9a:e4:22:2d:d1:d1:f8:3b:a2:9a:42:07:5c: 14:bc:f1:b7:d2:25:2e:40:b6:b8:88:28:bc:e3:03: b2:71:c3:84:5e:1b:0a:bb:22:26:17:27:17:0e:6a: 26:55:8b:ec:04:0b:d3:b9:53:f4:19:89:06:e6:a5: 16:e0:80:eb:e3:d6:09:f7:a5:6b:aa:7f:c8:a3:5d: 59:c4:60:63:e4:3b:d6:14:33:72:fc:75:a4:a2:0e: e2:80:3d:e9:e2:02:c8:c3:50:56:ab:f3:99:23:cb: 8b:03:a0:c6:fa:a4:08:0d:86:6a:ab:36:51:d1:9f: 46:81:d7:01:55:79:d0:e7:62:af:86:ac:c0:24:26: 03:86:6d:8e:9b:96:45:8a:9b:c2:f7:86:c1:36:17: 19:e4:08:77:56:a4:c5:70:29:1c:1c:b0:86:fc:4c: 4e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.238.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:21:53:65:fe:fc:b6:42:a4:41:0d:3d:85:17:2b:2c:29:92: 84:f2:86:ca:f6:0e:18:f7:06:4c:7e:ab:af:64:7b:83:72:95: 78:7f:7a:21:ab:dd:71:43:ca:4c:89:95:14:66:f6:43:4d:43: c4:f2:2c:c2:28:09:cf:43:94:51:ef:c8:95:42:7f:68:e0:cb: 53:bc:72:d2:23:ac:8d:53:ba:9c:66:a8:c0:4e:24:be:ce:40: 12:e8:1c:b0:d8:cb:06:8e:3b:d9:7e:7c:8f:ee:cc:42:1c:b5: d8:8a:d2:70:30:79:7c:b7:45:33:1a:39:30:08:03:27:ab:60: 25:af:7c:88:c2:6a:4d:06:26:32:f1:e8:d9:08:04:c1:5e:ca: fe:71:08:43:6c:e9:b3:0b:21:a1:da:4a:36:69:22:04:7f:55: 24:14:99:05:4a:74:b1:59:9c:39:33:bf:3a:58:6d:77:fd:23: 2f:cc:a9:a2:f3:34:0e:8d:7b:19:1c:4d:13:aa:d3:60:8b:9e: cc:c3:ba:1d:84:7c:e8:72:22:b9:48:44:41:08:5d:31:94:b6: 98:60:e7:82:a4:e5:37:f4:82:5f:55:84:1d:93:48:b6:05:51: af:cb:9e:c4:41:7e:ac:33:a1:cb:c5:df:17:8a:c7:92:fb:03: 96:a6:b0:8f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUaQwujcIxjnQ+DRt8WVJminY2pGgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTExOTEyMDk0NVoX DTI1MTExODEyMTQ0NVowMzExMC8GA1UEAxMoOUIyREI2QTgwRThBNTg2MDk0M0Q1 RTI0OUJDRjZGMkM0N0Q0ODU0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOH6UOwIujwLDIqmJ1/6Av+Tn9LVWqpjTEHn0IfJC05NxSHYKQjlSexJjnv+ yOSNkxh3RBNAeBPGevKETeQJSOMoMcVmGGFw9qjLFtc60XtAccfBP7U3Uc57vrOa 5CIt0dH4O6KaQgdcFLzxt9IlLkC2uIgovOMDsnHDhF4bCrsiJhcnFw5qJlWL7AQL 07lT9BmJBualFuCA6+PWCfela6p/yKNdWcRgY+Q71hQzcvx1pKIO4oA96eICyMNQ VqvzmSPLiwOgxvqkCA2Gaqs2UdGfRoHXAVV50Odir4aswCQmA4ZtjpuWRYqbwveG wTYXGeQId1akxXApHBywhvxMTgsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJsttqgOilhglD1eJJvPbyxH1IVJMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kN2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q3ZGQyNTE5 LTMwNzgtNDdkMy05ZTg2LTQ4ZmQzYmRlNzZjOC8wLzlCMkRCNkE4MEU4QTU4NjA5 NDNENUUyNDlCQ0Y2RjJDNDdENDg1NDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdQu4wDQYJKoZIhvcNAQELBQADggEBAD4hU2X+/LZCpEENPYUXKywpkoTyhsr2 Dhj3Bkx+q69ke4NylXh/eiGr3XFDykyJlRRm9kNNQ8TyLMIoCc9DlFHvyJVCf2jg y1O8ctIjrI1TupxmqMBOJL7OQBLoHLDYywaOO9l+fI/uzEIctdiK0nAweXy3RTMa OTAIAyerYCWvfIjCak0GJjLx6NkIBMFeyv5xCENs6bMLIaHaSjZpIgR/VSQUmQVK dLFZnDkzvzpYbXf9Iy/MqaLzNA6NexkcTROq02CLnszDuh2EfOhyIrlIREEIXTGU tphg54Kk5Tf0gl9VhB2TSLYFUa/LnsRBfqwzocvF3xeKx5L7A5amsI8= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org