$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer File: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer (raw, json) Hash identifier: mGdkJEHs3TDLJeHDbk6uurqwHLlqeoVMYpCML0Il+b8= Subject key identifier: A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 444FCF31D1614BDD3D053F3520F407F2C8FB2542 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft caRepository: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 29 Aug 2024 17:21:23 +0000 Certificate not after: Thu 28 Aug 2025 17:26:23 +0000 Subordinate resources: IP: 160.22.198.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:4f:cf:31:d1:61:4b:dd:3d:05:3f:35:20:f4:07:f2:c8:fb:25:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 29 17:21:23 2024 GMT Not After : Aug 28 17:26:23 2025 GMT Subject: CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ee:13:3c:6b:3b:64:9e:33:d5:fb:4d:27:ec: 3b:10:25:01:7e:05:50:b0:89:84:c1:70:85:5a:8a: 5f:93:5d:54:3d:c4:b0:45:80:02:e5:dd:25:d6:5d: e3:0c:f6:1c:c8:1f:e0:77:92:24:f0:6f:19:95:b0: 38:1d:eb:f6:d8:30:44:ff:b6:b5:11:59:34:8d:3a: b1:5d:bd:40:da:9d:ea:9f:f8:47:da:f9:3f:d5:d0: 1c:ec:59:a2:50:b9:22:4d:44:9b:ed:85:37:f7:2d: 47:e1:38:b6:fb:bb:90:41:15:d3:e6:03:0d:4e:ea: 68:19:1d:bb:d3:ba:8f:e5:85:32:33:e4:5e:b5:d7: 43:e6:2d:0e:ae:74:2d:c3:12:2b:76:1c:ec:38:05: 87:2f:48:04:06:46:2e:e3:80:a4:e1:e2:eb:96:37: c6:48:14:4e:75:45:d9:7f:ad:2d:aa:2a:0a:c9:23: e6:2e:cb:58:54:64:09:33:80:63:7c:79:74:04:3f: 89:f4:ac:cd:3e:30:4e:bf:ae:9d:68:54:d2:24:74: bd:30:5f:20:82:87:c4:a8:be:0d:a3:1f:d1:ba:e3: 2b:32:49:aa:95:73:1e:71:5d:e6:31:0c:da:96:cb: c3:b8:61:a4:45:2b:f4:a1:2d:62:11:4c:3a:32:3d: 4a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.198.0/23 Signature Algorithm: sha256WithRSAEncryption 29:c5:8a:c2:76:8f:ab:e0:2f:eb:0d:95:34:d9:93:52:6d:f0: e4:a9:ad:42:86:8b:10:f0:00:a2:28:f7:de:0c:52:99:d3:46: b6:e2:55:9d:68:09:f0:d3:f7:f3:13:f8:96:49:0e:86:a0:19: e6:c6:ee:04:ea:b5:d5:41:09:04:3f:60:39:41:fe:c5:2b:89: 67:02:89:67:1a:94:a8:92:da:1b:a1:16:4f:d1:c4:c6:de:16: a4:02:5c:42:30:e9:b5:25:da:cc:30:aa:10:59:7a:2d:85:77: ac:8f:01:1d:ba:58:24:c0:cd:3a:36:6b:bb:b6:7a:34:ab:88: 30:83:c3:09:04:b7:78:b1:0d:ac:81:85:d5:3d:d7:52:9f:7b: 7c:0a:23:54:1f:1b:d6:40:ff:7e:96:a0:74:f2:29:16:ac:24: f3:df:9d:c2:63:40:ca:b5:cf:1d:1c:07:02:d2:6c:98:06:d9: 12:b5:0d:c3:a4:9b:de:87:7a:ff:f3:b7:e0:f8:54:a4:26:08: 47:a8:48:c4:cc:43:7d:05:ea:0f:1a:df:ef:e7:fe:92:c5:b5: 5c:15:87:8d:26:64:c7:a2:42:62:47:fd:b0:07:a1:2a:97:af: 4d:eb:25:2b:57:56:94:a4:72:9c:c0:0a:2c:11:48:05:30:a0: b2:58:f8:7f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURE/PMdFhS909BT81IPQH8sj7JUIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDgyOTE3MjEyM1oX DTI1MDgyODE3MjYyM1owMzExMC8GA1UEAxMoQTdFNkM2MkM0N0MwMkVFQTMyNDIy RTEzNTkwOEVCRjIzMEM1QjVGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzuEzxrO2SeM9X7TSfsOxAlAX4FULCJhMFwhVqKX5NdVD3EsEWAAuXdJdZd 4wz2HMgf4HeSJPBvGZWwOB3r9tgwRP+2tRFZNI06sV29QNqd6p/4R9r5P9XQHOxZ olC5Ik1Em+2FN/ctR+E4tvu7kEEV0+YDDU7qaBkdu9O6j+WFMjPkXrXXQ+YtDq50 LcMSK3Yc7DgFhy9IBAZGLuOApOHi65Y3xkgUTnVF2X+tLaoqCskj5i7LWFRkCTOA Y3x5dAQ/ifSszT4wTr+unWhU0iR0vTBfIIKHxKi+DaMf0brjKzJJqpVzHnFd5jEM 2pbLw7hhpEUr9KEtYhFMOjI9Sg8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKfmxixHwC7qMkIuE1kI6/IwxbX6MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ZjMwZTRhZS0zZTQ3LTQ1NDAtODIzYy01M2NhZjIyNjdiMzYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlmMzBlNGFl LTNlNDctNDU0MC04MjNjLTUzY2FmMjI2N2IzNi8wL0E3RTZDNjJDNDdDMDJFRUEz MjQyMkUxMzU5MDhFQkYyMzBDNUI1RkEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFsYwDQYJKoZIhvcNAQELBQADggEBACnFisJ2j6vgL+sNlTTZk1Jt8OSprUKG ixDwAKIo994MUpnTRrbiVZ1oCfDT9/MT+JZJDoagGebG7gTqtdVBCQQ/YDlB/sUr iWcCiWcalKiS2huhFk/RxMbeFqQCXEIw6bUl2swwqhBZei2Fd6yPAR26WCTAzTo2 a7u2ejSriDCDwwkEt3ixDayBhdU911Kfe3wKI1QfG9ZA/36WoHTyKRasJPPfncJj QMq1zx0cBwLSbJgG2RK1DcOkm96Hev/zt+D4VKQmCEeoSMTMQ30F6g8a3+/n/pLF tVwVh40mZMeiQmJH/bAHoSqXr03rJStXVpSkcpzACiwRSAUwoLJY+H8= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org