$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer File: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer (raw, json) Hash identifier: agkvC6GKznd8CLknnl8M1R/t9BBdO/HonW827yVFtw8= Subject key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 3626DF6CF65F25A93326BB9747FBDD654572D0D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft caRepository: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 04 Jun 2024 07:58:16 +0000 Certificate not after: Tue 03 Jun 2025 08:03:16 +0000 Subordinate resources: IP: 160.20.124.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:26:df:6c:f6:5f:25:a9:33:26:bb:97:47:fb:dd:65:45:72:d0:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 4 07:58:16 2024 GMT Not After : Jun 3 08:03:16 2025 GMT Subject: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e3:c3:d7:a4:eb:0d:86:30:6e:53:90:74:46: e5:38:5c:58:14:b5:c2:27:8b:c8:56:50:bf:ff:73: 6e:d3:00:14:12:de:61:57:64:19:4d:67:2d:56:88: 81:fb:5e:fb:df:96:fb:d3:1a:65:f6:5b:01:36:81: d7:5e:97:c0:25:ce:93:d0:36:20:dc:e0:a6:7a:a6: f8:9f:03:67:1a:8e:5a:dc:df:9e:28:97:ca:38:2f: 5a:12:f9:a8:e7:0a:8f:68:9b:5a:00:cc:54:a5:45: f8:bf:bb:55:55:d9:93:7e:17:9e:69:b3:e8:13:d2: 8f:6b:79:a4:12:c3:2f:18:47:f9:fe:8c:53:97:78: f1:83:81:af:93:6d:22:6c:c1:d9:3b:21:d7:e3:92: 8e:5f:c4:18:82:31:ba:a2:f6:1f:88:93:b6:8f:c6: 18:33:76:6d:a7:59:2d:04:dd:36:d9:e2:e9:78:4a: 9b:99:9b:fd:46:0e:95:03:43:ac:c0:e1:40:0d:c1: 1b:7b:80:e6:16:dd:5b:1b:b2:39:82:95:71:eb:db: ef:58:ae:0c:06:55:19:7d:a4:f3:0f:e4:8e:f5:a7: 01:d2:cf:b3:45:d7:24:4f:b9:b4:55:ad:4d:73:b0: 7e:79:19:70:cf:4d:1c:5f:40:e2:d8:9b:f7:27:72: a1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.124.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:10:20:e3:33:31:b3:bc:d1:db:b4:dd:2d:7d:c2:03:de:1b: a7:7f:32:c1:49:76:f7:5a:55:c6:fb:59:dc:1b:b0:56:a5:d9: 2f:48:ea:65:c0:e8:b9:87:01:9a:9e:bd:6a:58:fc:8c:3c:54: 2c:44:0e:52:62:51:07:7a:33:ca:4b:9d:1b:c7:e1:7a:a8:aa: e8:32:98:7b:32:e7:8d:44:52:ed:2f:a0:3d:b1:4d:81:47:2e: 14:68:aa:35:21:20:53:10:5c:10:f4:70:77:3b:0a:79:23:2d: 37:0d:a7:68:22:bc:df:63:f5:6f:78:98:be:ed:93:ac:c6:53: 28:ea:79:16:9d:e5:fb:5b:fc:2a:a4:f8:b9:ae:88:4a:74:c8: 12:d9:c4:d1:ca:1b:96:c0:54:21:17:f1:98:d8:43:8a:7a:61: 3c:19:f8:f2:7e:67:d0:73:16:4c:82:c3:21:0a:78:f0:f6:c9: ad:09:01:d8:9b:11:89:21:47:18:78:69:94:a7:6c:bb:3d:02: 07:ac:e1:08:24:c8:82:e2:65:a9:77:31:9d:79:31:65:ca:d7: 6d:16:a6:93:ee:89:38:07:33:49:61:87:e0:51:93:0b:0d:0d: 8f:6f:6b:e0:d5:74:79:cc:2f:5a:f3:14:29:72:30:33:4c:cd: bc:06:9e:94 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUNibfbPZfJakzJruXR/vdZUVy0NQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDYwNDA3NTgxNloX DTI1MDYwMzA4MDMxNlowMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NE MERFMEI2Mjg3RjRCMDgyRDgxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/jw9ek6w2GMG5TkHRG5ThcWBS1wieLyFZQv/9zbtMAFBLeYVdkGU1nLVaI gfte+9+W+9MaZfZbATaB116XwCXOk9A2INzgpnqm+J8DZxqOWtzfniiXyjgvWhL5 qOcKj2ibWgDMVKVF+L+7VVXZk34Xnmmz6BPSj2t5pBLDLxhH+f6MU5d48YOBr5Nt ImzB2Tsh1+OSjl/EGIIxuqL2H4iTto/GGDN2badZLQTdNtni6XhKm5mb/UYOlQND rMDhQA3BG3uA5hbdWxuyOYKVcevb71iuDAZVGX2k8w/kjvWnAdLPs0XXJE+5tFWt TXOwfnkZcM9NHF9A4tib9ydyoTkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKPXR2XB8Xj3LDzQ3gtih/SwgtgZMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkzNTc5MjFk LWVlMTgtNDM1Yy04YjZlLWViYTIyNDFiODNhYi8wL0EzRDc0NzY1QzFGMTc4Rjcy QzNDRDBERTBCNjI4N0Y0QjA4MkQ4MTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFHwwDQYJKoZIhvcNAQELBQADggEBAF8QIOMzMbO80du03S19wgPeG6d/MsFJ dvdaVcb7WdwbsFal2S9I6mXA6LmHAZqevWpY/Iw8VCxEDlJiUQd6M8pLnRvH4Xqo qugymHsy541EUu0voD2xTYFHLhRoqjUhIFMQXBD0cHc7CnkjLTcNp2givN9j9W94 mL7tk6zGUyjqeRad5ftb/Cqk+LmuiEp0yBLZxNHKG5bAVCEX8ZjYQ4p6YTwZ+PJ+ Z9BzFkyCwyEKePD2ya0JAdibEYkhRxh4aZSnbLs9Ages4QgkyILiZal3MZ15MWXK 120WppPuiTgHM0lhh+BRkwsNDY9va+DVdHnML1rzFClyMDNMzbwGnpQ= -----END CERTIFICATE-----Generated at Fri Jun 21 22:04:32 2024 by rpki-client on console-fra.rpki-client.org