$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer File: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer (raw, json) Hash identifier: 6sFfaCCko/ZnbHRWgiW3Mbw0LEUoatL7u+y8Q0ycCiM= Subject key identifier: AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6CD1C109CB02C5E1F6B7F6FED29E02BFDB05C411 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft caRepository: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 19 Jul 2024 03:18:32 +0000 Certificate not after: Fri 18 Jul 2025 03:23:32 +0000 Subordinate resources: IP: 160.25.174.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:d1:c1:09:cb:02:c5:e1:f6:b7:f6:fe:d2:9e:02:bf:db:05:c4:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 19 03:18:32 2024 GMT Not After : Jul 18 03:23:32 2025 GMT Subject: CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9f:ab:6e:ed:0f:a9:77:41:94:1a:0a:82:54: 82:0f:f3:78:11:f3:8d:3d:a5:4d:e6:1f:5e:9c:19: 78:04:06:be:0c:f1:4f:b9:0b:92:dc:ac:2a:1a:a4: 09:7d:fd:c5:70:ff:25:05:ee:91:1f:82:6d:fb:56: 3a:29:05:53:fa:90:9c:af:81:c9:c7:80:49:61:f9: e7:e3:37:17:a2:77:d0:e6:1a:c2:91:95:af:2d:33: 7c:5f:f9:27:78:61:44:fd:66:a3:e9:d7:f9:f5:43: 21:f2:75:25:94:83:47:6d:f7:de:48:84:10:d9:5c: 4a:cc:90:63:76:4c:87:16:81:fc:2d:06:8d:e8:0b: 50:ca:d4:b9:d5:89:46:a7:cd:5c:ee:d9:53:c5:c3: 51:70:44:8a:83:00:32:f7:9f:43:5a:ee:af:27:84: 6f:85:dd:b6:19:9a:6a:a5:c9:0c:59:c6:2a:a6:3a: ef:69:54:09:f9:80:3c:8b:cb:3b:6f:7d:4e:2c:15: 04:69:84:2b:72:cc:0d:ec:2a:d7:8c:7f:a0:28:01: 74:fe:35:47:c7:e9:00:ec:ba:81:ac:96:1e:8c:d9: e3:bd:a4:b3:33:1e:89:3f:72:df:0a:ac:21:19:ac: 35:df:c9:be:dc:8d:70:21:5b:98:36:9a:9c:ce:43: 12:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.174.0/23 Signature Algorithm: sha256WithRSAEncryption 29:c1:58:60:fd:0b:49:83:f7:f8:9b:1e:2e:30:26:ad:31:54: 8b:d3:ad:68:f4:c6:35:60:06:63:b5:b0:79:3b:70:48:43:7d: 50:92:e9:e5:4a:56:08:f9:17:52:3c:1e:02:48:75:19:6f:8a: 59:af:52:2f:26:09:01:e0:47:bb:74:4e:c8:68:96:da:fc:f9: 20:0d:0e:58:f6:76:11:da:4d:19:77:44:fd:4a:7f:4f:c3:4f: 78:8b:b0:4c:c1:5b:5f:c4:5e:e7:dc:28:a0:f0:11:a6:df:0e: ad:fa:a8:16:90:ab:9d:fc:f7:00:60:63:c1:92:ca:56:bc:b8: 07:ab:e5:f5:a2:02:5c:a3:d0:b5:30:38:e6:71:81:40:0e:10: ad:4c:7c:d3:dd:ed:25:fb:8e:b9:68:17:37:96:a2:95:5d:74: 40:2b:be:d6:86:c3:c2:8c:31:4d:86:cb:ba:11:4f:2a:e9:42: 73:85:40:29:4a:8a:bb:56:10:47:aa:39:37:7c:fe:d5:91:d7: 74:85:9f:ba:68:68:bc:6c:bb:c5:5a:51:03:6f:25:04:22:44: da:9c:be:6c:2d:0d:04:5e:f3:be:7a:b4:8e:63:f0:fd:4b:4d: 7d:42:25:52:b8:b1:40:99:40:98:02:dd:96:bc:50:bd:16:17: 72:ff:f1:b1 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbNHBCcsCxeH2t/b+0p4Cv9sFxBEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDcxOTAzMTgzMloX DTI1MDcxODAzMjMzMlowMzExMC8GA1UEAxMoQUE3Mjc2OEZERDBDNjE1QTA1RTRB MzJBMDZGOUNDQjVDQTdFMEQ5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALqfq27tD6l3QZQaCoJUgg/zeBHzjT2lTeYfXpwZeAQGvgzxT7kLktysKhqk CX39xXD/JQXukR+CbftWOikFU/qQnK+ByceASWH55+M3F6J30OYawpGVry0zfF/5 J3hhRP1mo+nX+fVDIfJ1JZSDR2333kiEENlcSsyQY3ZMhxaB/C0GjegLUMrUudWJ RqfNXO7ZU8XDUXBEioMAMvefQ1ruryeEb4XdthmaaqXJDFnGKqY672lUCfmAPIvL O299TiwVBGmEK3LMDewq14x/oCgBdP41R8fpAOy6gayWHozZ472kszMeiT9y3wqs IRmsNd/JvtyNcCFbmDaanM5DElkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKpydo/dDGFaBeSjKgb5zLXKfg2TMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lYzcyZWUzYy1lMTgwLTQyOTYtOWRhZC05NTAwZWZkOTQ4OTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VjNzJlZTNj LWUxODAtNDI5Ni05ZGFkLTk1MDBlZmQ5NDg5MC8wL0FBNzI3NjhGREQwQzYxNUEw NUU0QTMyQTA2RjlDQ0I1Q0E3RTBEOTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgGa4wDQYJKoZIhvcNAQELBQADggEBACnBWGD9C0mD9/ibHi4wJq0xVIvTrWj0 xjVgBmO1sHk7cEhDfVCS6eVKVgj5F1I8HgJIdRlvilmvUi8mCQHgR7t0Tsholtr8 +SANDlj2dhHaTRl3RP1Kf0/DT3iLsEzBW1/EXufcKKDwEabfDq36qBaQq5389wBg Y8GSyla8uAer5fWiAlyj0LUwOOZxgUAOEK1MfNPd7SX7jrloFzeWopVddEArvtaG w8KMMU2Gy7oRTyrpQnOFQClKirtWEEeqOTd8/tWR13SFn7poaLxsu8VaUQNvJQQi RNqcvmwtDQRe8756tI5j8P1LTX1CJVK4sUCZQJgC3Za8UL0WF3L/8bE= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org