$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer File: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer (raw, json) Hash identifier: vJ3+DRDMllfSwkLN9aT7qzJpB4/GdGMlAd2m6wXR5dY= Subject key identifier: A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 5E11E1B7CFC026B8A4A17E2522318D9D0DACF823 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft caRepository: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 16 Aug 2024 10:23:10 +0000 Certificate not after: Fri 15 Aug 2025 10:28:10 +0000 Subordinate resources: IP: 160.20.36.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:11:e1:b7:cf:c0:26:b8:a4:a1:7e:25:22:31:8d:9d:0d:ac:f8:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 16 10:23:10 2024 GMT Not After : Aug 15 10:28:10 2025 GMT Subject: CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e6:ad:37:e7:51:ae:64:9e:69:b8:4c:d8:a6: 25:dd:8e:52:e0:7b:67:b4:cb:19:76:71:02:0c:a0: 9a:5f:da:03:fe:4e:bc:dc:11:b3:f6:d0:64:59:3b: 8c:82:63:7c:d0:fa:50:21:bc:81:e1:e4:df:2d:6f: f4:99:30:7a:15:55:de:26:84:d6:d0:be:00:39:d8: 7f:b1:c5:62:95:57:ca:e1:39:4a:20:ec:c5:df:5f: 8d:1f:54:50:69:94:28:0f:9b:a6:25:fa:a3:89:86: 45:26:85:d4:50:93:55:ff:d5:ce:1f:da:fe:37:08: d2:15:9b:10:b2:d7:09:a0:ba:22:86:75:c3:1b:84: 3a:3f:3a:23:9a:39:7f:55:29:d9:5a:ea:ff:7c:91: 0b:24:12:c4:0c:13:3f:da:78:28:03:c8:27:cb:57: 47:e9:a4:30:3a:1b:49:cc:13:78:f1:7b:11:9f:8b: 35:a7:1b:6d:a5:97:b2:11:df:c3:bf:a7:ee:64:a6: 7e:e8:49:00:2f:28:1a:c4:ce:bc:0f:9d:b9:f8:c9: 89:f1:ee:86:21:b6:49:7b:ab:f6:9e:43:7a:40:3a: 56:40:17:32:6b:0e:cb:2f:47:31:9a:9d:19:9c:dc: ba:fe:35:82:2f:57:e7:5b:af:66:a5:43:0e:92:ce: 59:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.36.0/23 Signature Algorithm: sha256WithRSAEncryption 63:1f:f6:d1:14:d3:09:47:2c:61:1b:f5:2b:58:91:b8:20:9e: cb:ec:46:a2:4f:93:3e:49:95:38:c0:59:4c:b1:e4:9d:fc:aa: 2e:9a:a7:ba:dd:79:38:7a:42:2b:71:93:03:c3:5f:04:2d:fc: 63:f2:2d:2c:72:5e:bc:1d:cb:1c:b1:c6:5c:97:b1:25:ae:35: 33:73:f1:b7:09:4f:42:38:86:91:82:c2:5f:25:e2:41:74:47: ee:f7:33:24:27:7d:67:eb:72:0f:6a:67:e1:eb:c7:1b:88:c1: 91:a2:00:5d:39:81:be:1c:99:db:d5:83:d2:38:cc:62:ec:39: b0:fa:70:53:79:df:f2:4f:a1:ec:8b:20:2f:07:27:c5:8d:82: ca:b4:8e:f5:1a:e9:4f:cf:23:5b:4a:5a:69:5b:18:b2:b1:23: 67:9c:2d:b3:48:02:35:c8:6c:f8:cc:03:9e:0b:bd:5d:1d:0d: 22:e4:76:02:84:be:78:62:0c:39:3e:73:3d:65:57:c4:4f:ac: a1:4b:fa:8f:9f:fa:c0:e1:99:4a:3b:13:fc:1a:eb:58:71:79: 31:ba:68:32:6d:44:d4:a5:b5:84:1c:ce:97:fd:4b:8b:d8:13: c6:2a:98:e3:1f:2b:11:3f:d6:ca:a0:70:4c:bb:04:cf:c0:b5: a3:98:94:18 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXhHht8/AJrikoX4lIjGNnQ2s+CMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDgxNjEwMjMxMFoX DTI1MDgxNTEwMjgxMFowMzExMC8GA1UEAxMoQTcxQkFBNjY2MjM4NDdCN0JEOUVB N0M0MEJDQkNBODU1RTUyRThFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKXmrTfnUa5knmm4TNimJd2OUuB7Z7TLGXZxAgygml/aA/5OvNwRs/bQZFk7 jIJjfND6UCG8geHk3y1v9JkwehVV3iaE1tC+ADnYf7HFYpVXyuE5SiDsxd9fjR9U UGmUKA+bpiX6o4mGRSaF1FCTVf/Vzh/a/jcI0hWbELLXCaC6IoZ1wxuEOj86I5o5 f1Up2Vrq/3yRCyQSxAwTP9p4KAPIJ8tXR+mkMDobScwTePF7EZ+LNacbbaWXshHf w7+n7mSmfuhJAC8oGsTOvA+dufjJifHuhiG2SXur9p5DekA6VkAXMmsOyy9HMZqd GZzcuv41gi9X51uvZqVDDpLOWWkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKcbqmZiOEe3vZ6nxAvLyoVeUujrMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yODFlZjQ0MC01YTVmLTRhNGYtYjUwOS1iMTAzMjQ1YzVjZjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4MWVmNDQw LTVhNWYtNGE0Zi1iNTA5LWIxMDMyNDVjNWNmMS8wL0E3MUJBQTY2NjIzODQ3QjdC RDlFQTdDNDBCQ0JDQTg1NUU1MkU4RUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFCQwDQYJKoZIhvcNAQELBQADggEBAGMf9tEU0wlHLGEb9StYkbggnsvsRqJP kz5JlTjAWUyx5J38qi6ap7rdeTh6QitxkwPDXwQt/GPyLSxyXrwdyxyxxlyXsSWu NTNz8bcJT0I4hpGCwl8l4kF0R+73MyQnfWfrcg9qZ+HrxxuIwZGiAF05gb4cmdvV g9I4zGLsObD6cFN53/JPoeyLIC8HJ8WNgsq0jvUa6U/PI1tKWmlbGLKxI2ecLbNI AjXIbPjMA54LvV0dDSLkdgKEvnhiDDk+cz1lV8RPrKFL+o+f+sDhmUo7E/wa61hx eTG6aDJtRNSltYQczpf9S4vYE8YqmOMfKxE/1sqgcEy7BM/AtaOYlBg= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org