$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer File: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer (raw, json) Hash identifier: xo/FFarp7g+St3B5YIp+UxORDDynZCHPtn4IITVxr98= Subject key identifier: 9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 549B391BA302B37ADFA326125DBFBD81DBD6DA43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft caRepository: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 05 Jul 2024 16:58:57 +0000 Certificate not after: Fri 04 Jul 2025 17:03:57 +0000 Subordinate resources: IP: 160.22.66.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:9b:39:1b:a3:02:b3:7a:df:a3:26:12:5d:bf:bd:81:db:d6:da:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 5 16:58:57 2024 GMT Not After : Jul 4 17:03:57 2025 GMT Subject: CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0a:66:33:85:c0:59:09:13:b7:96:a0:34:2e: 53:2c:d6:1a:47:7e:62:f5:fd:5c:84:44:53:fc:b2: e5:2c:35:e7:a5:e3:44:8f:4a:82:bd:49:3b:c6:51: 4d:18:7c:d9:d3:58:4f:67:53:f5:41:10:c7:a3:df: 23:ed:9a:0f:29:d9:a9:b0:1c:95:5a:b0:18:fb:41: 0d:e5:92:9c:b1:ad:3b:bf:b3:d0:36:ef:1c:40:f9: d9:8d:5e:d7:1c:19:db:c8:5c:a3:fa:52:87:4e:90: 77:31:8a:ae:f3:82:d8:a2:b1:04:3a:55:3f:07:3c: ba:06:bf:27:c2:60:33:c0:9f:65:de:9d:17:ab:fe: 1b:3b:c8:15:c2:42:1c:46:8c:6f:ac:ab:2e:45:21: ff:1f:67:9a:3f:6f:96:2f:cf:f0:bf:bc:12:48:17: aa:f8:a0:9c:35:fe:52:50:59:5c:1c:01:98:92:1d: 17:b2:d9:a9:95:1c:47:2c:eb:10:e2:29:66:83:9c: 5c:cb:ff:88:1a:9c:85:0d:f9:44:db:6e:df:5f:2b: 30:08:45:f0:3a:e2:e0:b5:13:5a:aa:11:90:d0:c2: 68:d1:19:ae:72:69:da:53:58:00:8f:97:29:98:ea: 75:7a:b0:70:34:4d:69:97:6c:e6:23:72:74:60:c0: 81:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.66.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:2a:60:d5:4e:09:78:09:ce:d7:ee:b9:51:6c:b3:20:99:d8: 7a:65:86:25:db:31:ce:11:b3:a3:81:1c:a3:f0:76:46:ef:92: 80:18:45:d6:58:1a:12:9a:32:72:f0:92:81:8f:5c:0c:cb:3a: f4:34:0b:c1:43:65:44:c2:85:46:87:a7:49:b5:c5:40:76:3c: 96:87:9b:ac:21:4c:a6:67:82:a0:f9:25:f5:8b:d3:b5:fe:d6: 8b:a1:1b:e4:03:55:da:db:80:2f:dd:54:3c:69:66:93:2c:db: 7f:0e:e2:87:23:30:a6:e4:da:44:41:46:ba:8f:9c:21:74:9b: c9:bf:0c:55:7f:7c:f8:70:68:04:b5:df:ac:c1:ff:fd:5b:88: 9a:8c:ad:f2:8c:fa:88:dd:80:d6:cd:ad:91:59:88:5c:33:4b: 5b:9b:41:d5:3c:16:29:38:3c:2d:4a:5d:79:7b:20:e9:fc:fd: d7:65:67:5f:c0:c0:44:2f:45:c3:e8:e5:d3:f1:f0:6b:ed:8d: 1e:80:2c:80:67:80:16:b6:4f:c2:0a:56:aa:4d:00:de:15:c6: bc:34:85:8c:84:3c:84:b0:82:a3:89:11:aa:ae:3f:27:49:d6: 4f:e0:94:bf:27:f7:24:0d:1a:6e:e7:66:4f:0b:de:4f:1a:70: b3:a0:84:0b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUVJs5G6MCs3rfoyYSXb+9gdvW2kMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDcwNTE2NTg1N1oX DTI1MDcwNDE3MDM1N1owMzExMC8GA1UEAxMoOUVFOUU4NzE1REU3QTk5NTI3M0Qy N0JEMTZGQkYzM0RDMDlDRjY1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANEKZjOFwFkJE7eWoDQuUyzWGkd+YvX9XIREU/yy5Sw156XjRI9Kgr1JO8ZR TRh82dNYT2dT9UEQx6PfI+2aDynZqbAclVqwGPtBDeWSnLGtO7+z0DbvHED52Y1e 1xwZ28hco/pSh06QdzGKrvOC2KKxBDpVPwc8uga/J8JgM8CfZd6dF6v+GzvIFcJC HEaMb6yrLkUh/x9nmj9vli/P8L+8EkgXqvignDX+UlBZXBwBmJIdF7LZqZUcRyzr EOIpZoOcXMv/iBqchQ35RNtu318rMAhF8Dri4LUTWqoRkNDCaNEZrnJp2lNYAI+X KZjqdXqwcDRNaZds5iNydGDAgSMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ7p6HFd56mVJz0nvRb78z3AnPZSMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ZGI5MjdkZi1iYzljLTRiZTYtYTFmYS0yZTEyNWM0NjlmNzEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlkYjkyN2Rm LWJjOWMtNGJlNi1hMWZhLTJlMTI1YzQ2OWY3MS8wLzlFRTlFODcxNURFN0E5OTUy NzNEMjdCRDE2RkJGMzNEQzA5Q0Y2NTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFkIwDQYJKoZIhvcNAQELBQADggEBAAwqYNVOCXgJztfuuVFssyCZ2HplhiXb Mc4Rs6OBHKPwdkbvkoAYRdZYGhKaMnLwkoGPXAzLOvQ0C8FDZUTChUaHp0m1xUB2 PJaHm6whTKZngqD5JfWL07X+1ouhG+QDVdrbgC/dVDxpZpMs238O4ocjMKbk2kRB RrqPnCF0m8m/DFV/fPhwaAS136zB//1biJqMrfKM+ojdgNbNrZFZiFwzS1ubQdU8 Fik4PC1KXXl7IOn8/ddlZ1/AwEQvRcPo5dPx8GvtjR6ALIBngBa2T8IKVqpNAN4V xrw0hYyEPISwgqOJEaquPydJ1k/glL8n9yQNGm7nZk8L3k8acLOghAs= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org