$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer File: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer (raw, json) Hash identifier: YCuaz1NQa+o0zWlRIntof0J84gitNvz2ysxhyylFDgo= Subject key identifier: A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 572DC1A48BAB31D8FE919FAD837FC019795F1967 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft caRepository: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 11 Dec 2024 03:48:55 +0000 Certificate not after: Wed 10 Dec 2025 03:53:55 +0000 Subordinate resources: IP: 160.191.64.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:2d:c1:a4:8b:ab:31:d8:fe:91:9f:ad:83:7f:c0:19:79:5f:19:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 11 03:48:55 2024 GMT Not After : Dec 10 03:53:55 2025 GMT Subject: CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ea:7b:f3:66:48:9b:2b:f4:dd:53:a3:24:24: 6f:72:b2:b6:94:ce:c3:8a:2c:16:db:dc:13:4c:f1: e0:9a:8f:63:33:89:fb:e5:44:a2:1b:97:4e:40:19: aa:12:09:41:37:f1:5c:9b:54:e2:34:cf:9f:64:a4: 3c:7a:a5:41:d6:8b:32:56:2b:36:51:6b:89:e9:d9: f9:00:44:4a:d7:32:49:63:df:43:30:eb:fd:0b:17: 35:4e:9d:fc:c7:46:80:d6:11:53:8a:00:fe:5c:f8: c2:12:96:2d:06:10:53:d1:22:0d:df:8e:fb:97:ee: be:6e:b0:8a:d3:7c:18:52:0b:58:b5:d0:19:b2:2a: 7c:71:af:76:96:7f:e7:5a:10:47:c5:3a:a6:bd:6d: 6a:f6:99:49:fb:89:c3:e4:26:7a:9b:8c:98:c9:f7: cf:57:b7:c4:b8:42:51:e4:a9:75:41:09:d7:4d:55: 43:6d:6c:62:06:c7:44:02:0c:96:52:38:d1:17:62: 35:18:09:70:0a:f0:76:7f:af:81:30:8d:01:7a:4e: e1:d3:26:21:f8:e5:86:f5:31:30:6d:17:08:e8:d7: 34:a4:bb:b5:69:3e:db:e0:93:63:c8:7c:d1:e2:45: 24:39:2d:68:5e:64:52:ce:13:92:4c:49:84:86:e0: 61:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.64.0/23 Signature Algorithm: sha256WithRSAEncryption 18:1a:01:2f:09:eb:8c:ed:a8:2f:8a:cb:ec:1c:49:9a:d5:82: cd:2e:5f:25:17:20:17:64:88:e0:99:23:09:bf:ce:61:48:05: 88:35:c8:0d:a1:45:b5:c9:93:68:78:e3:e3:02:2a:a4:19:ee: c3:c8:73:d2:f9:00:63:c3:4e:24:61:73:f1:b3:f0:f9:1b:ad: 22:d9:75:08:92:48:31:69:0d:b1:c2:a4:a3:47:9e:91:45:cb: a9:2b:82:ff:55:38:5b:22:01:f6:b1:19:fd:9e:18:f7:2a:86: 48:39:76:a2:26:9d:51:45:7b:c2:ac:da:b5:33:15:a5:1d:0a: 5b:c1:38:3c:72:24:80:1c:8e:22:5c:a1:91:66:a8:74:ba:40: 8e:39:f6:a7:ab:a0:55:6d:6d:c4:34:5d:23:91:c9:05:1f:21: 4c:83:bd:5e:c5:f6:75:cf:35:7d:f9:1a:98:ae:97:e0:ac:39: 76:83:f9:bb:af:6d:7f:3d:ca:13:b4:b8:99:31:43:d2:9d:04: 65:7d:c6:b8:6d:7f:f3:41:1b:f4:45:2b:e5:ae:d5:c4:1c:1f: f9:0f:85:da:c4:55:4f:e4:ae:ec:ee:46:1a:f0:f7:1e:c1:bd: c3:c5:e2:34:4c:e7:7a:d3:c9:9c:af:c3:4f:81:ea:b0:1e:06: 12:08:2f:7a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUVy3BpIurMdj+kZ+tg3/AGXlfGWcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTIxMTAzNDg1NVoX DTI1MTIxMDAzNTM1NVowMzExMC8GA1UEAxMoQTlENjYzQzZFQkNEMjUwQUE4OTI3 RUEwOTQ2MjdDOTQxNURFRTdGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTqe/NmSJsr9N1ToyQkb3KytpTOw4osFtvcE0zx4JqPYzOJ++VEohuXTkAZ qhIJQTfxXJtU4jTPn2SkPHqlQdaLMlYrNlFrienZ+QBEStcySWPfQzDr/QsXNU6d /MdGgNYRU4oA/lz4whKWLQYQU9EiDd+O+5fuvm6witN8GFILWLXQGbIqfHGvdpZ/ 51oQR8U6pr1tavaZSfuJw+QmepuMmMn3z1e3xLhCUeSpdUEJ101VQ21sYgbHRAIM llI40RdiNRgJcArwdn+vgTCNAXpO4dMmIfjlhvUxMG0XCOjXNKS7tWk+2+CTY8h8 0eJFJDktaF5kUs4TkkxJhIbgYXsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKnWY8brzSUKqJJ+oJRifJQV3uf8MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yODJhOWJkOS0xNjZmLTQ1M2UtYjNjMC1lNmIzZWY5MmE1NDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4MmE5YmQ5 LTE2NmYtNDUzZS1iM2MwLWU2YjNlZjkyYTU0MC8wL0E5RDY2M0M2RUJDRDI1MEFB ODkyN0VBMDk0NjI3Qzk0MTVERUU3RkMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgv0AwDQYJKoZIhvcNAQELBQADggEBABgaAS8J64ztqC+Ky+wcSZrVgs0uXyUX IBdkiOCZIwm/zmFIBYg1yA2hRbXJk2h44+MCKqQZ7sPIc9L5AGPDTiRhc/Gz8Pkb rSLZdQiSSDFpDbHCpKNHnpFFy6krgv9VOFsiAfaxGf2eGPcqhkg5dqImnVFFe8Ks 2rUzFaUdClvBODxyJIAcjiJcoZFmqHS6QI459qeroFVtbcQ0XSORyQUfIUyDvV7F 9nXPNX35Gpiul+CsOXaD+buvbX89yhO0uJkxQ9KdBGV9xrhtf/NBG/RFK+Wu1cQc H/kPhdrEVU/kruzuRhrw9x7BvcPF4jRM53rTyZyvw0+B6rAeBhIIL3o= -----END CERTIFICATE-----Generated at Mon Apr 7 16:01:38 2025 by rpki-client