$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer File: ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer (raw, json) Hash identifier: j55G2Pv56awb9NLg97jHkFK2TKDpdZmzbofGnZ7uAH4= Subject key identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 4454EF1F195EC02AC51EE6D7D2D2A284B656DEEF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft caRepository: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 12 Aug 2024 13:40:38 +0000 Certificate not after: Mon 11 Aug 2025 13:45:38 +0000 Subordinate resources: IP: 160.25.157.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:54:ef:1f:19:5e:c0:2a:c5:1e:e6:d7:d2:d2:a2:84:b6:56:de:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 12 13:40:38 2024 GMT Not After : Aug 11 13:45:38 2025 GMT Subject: CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c5:fb:8a:2e:45:8f:3b:fd:7b:ab:8a:d2:42: 90:a9:2a:e7:88:21:44:94:82:fd:f7:37:0a:ce:31: 20:87:e9:4e:4f:c3:77:ab:9b:1c:61:5c:82:84:03: 41:c4:fe:40:7d:98:87:ef:6c:86:02:37:0f:72:35: 44:4b:4a:7c:d5:7b:30:3c:e3:e0:1d:99:03:d9:7e: cf:29:80:9a:26:9c:9f:07:71:b3:60:ac:50:2e:30: 9c:cc:d7:57:bd:4a:a6:ea:ba:0c:64:51:1d:c1:4a: 58:5d:50:85:68:cd:e2:5c:de:7f:6d:c1:43:99:c4: a9:e5:8e:69:b2:39:34:ca:cc:91:7e:c9:8e:c0:aa: a1:e8:f8:e0:a1:f2:b6:db:9e:57:28:a4:12:c8:e3: ce:01:a4:d9:5a:27:f3:9a:f3:93:dc:7b:0b:68:3d: 49:a3:48:bd:1d:57:b1:b1:10:69:da:de:63:72:69: 13:64:82:1d:36:f7:12:3f:15:ae:d4:cf:81:ba:63: 18:95:3e:14:99:b7:18:0b:27:b1:05:fa:95:00:42: 2d:c4:24:69:c4:c0:db:c2:fc:fa:47:9a:a6:74:5f: 9f:a6:68:ae:5a:6e:ec:b8:a8:50:57:4c:45:cc:2d: 92:f5:14:4d:8c:58:90:d0:76:b5:01:92:50:9d:9c: ac:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.157.0/24 Signature Algorithm: sha256WithRSAEncryption 41:3a:b7:1a:7e:de:bb:dc:80:6d:4d:37:ca:89:b8:e3:00:c4: ed:68:95:6b:32:f6:dd:73:3a:21:14:53:8c:de:e1:99:93:7d: d4:72:d7:a8:83:61:45:e6:4d:f2:ea:83:54:e6:68:5b:5b:3a: 27:2a:5b:d3:72:66:62:47:af:f0:15:0b:ed:c3:12:6b:13:7d: 3f:7f:5c:f8:5d:20:54:c5:a8:bd:fc:c3:f6:49:c1:23:51:88: 5c:14:63:4c:b8:36:bd:be:fd:ed:60:b1:45:ed:74:27:8f:d3: 6d:41:eb:d5:a3:91:af:9d:60:cf:b9:37:b1:7a:f5:ad:54:6c: 1c:6a:f5:f5:c0:1c:e9:c2:3f:77:a1:64:50:45:52:52:f3:9f: 83:76:bd:f6:73:5a:25:e5:72:3a:7f:e9:8f:cc:e0:1c:9d:9a: bd:ba:0e:d4:b6:8c:90:ee:ce:0e:df:14:53:9d:25:a7:9e:87: 83:20:e2:27:bc:13:9d:76:83:d3:c8:3f:1a:5a:31:02:31:4e: c8:f0:c1:0b:7f:bd:8e:21:4b:7d:5c:b4:a7:54:77:67:51:ce: 1f:b3:41:ba:1f:76:20:10:77:ae:f2:83:1c:6d:12:eb:2b:1a: df:7c:48:75:cc:29:08:8c:06:74:d4:65:60:0f:19:63:64:52: d4:12:09:2b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURFTvHxlewCrFHubX0tKihLZW3u8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDgxMjEzNDAzOFoX DTI1MDgxMTEzNDUzOFowMzExMC8GA1UEAxMoQUNGQjFBNUQ5OTM4QTY0QjNCNTRB ODMyRDVCNzlDMDMyNDg2QTc1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN3F+4ouRY87/XuritJCkKkq54ghRJSC/fc3Cs4xIIfpTk/Dd6ubHGFcgoQD QcT+QH2Yh+9shgI3D3I1REtKfNV7MDzj4B2ZA9l+zymAmiacnwdxs2CsUC4wnMzX V71Kpuq6DGRRHcFKWF1QhWjN4lzef23BQ5nEqeWOabI5NMrMkX7JjsCqoej44KHy ttueVyikEsjjzgGk2Von85rzk9x7C2g9SaNIvR1XsbEQadreY3JpE2SCHTb3Ej8V rtTPgbpjGJU+FJm3GAsnsQX6lQBCLcQkacTA28L8+keapnRfn6Zorlpu7LioUFdM RcwtkvUUTYxYkNB2tQGSUJ2crLkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKz7Gl2ZOKZLO1SoMtW3nAMkhqdZMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZTk1NGY0Mi05NDUyLTQyNDctOTlhNS0zMWE1M2U1NmE5ZjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlOTU0ZjQy LTk0NTItNDI0Ny05OWE1LTMxYTUzZTU2YTlmOC8wL0FDRkIxQTVEOTkzOEE2NEIz QjU0QTgzMkQ1Qjc5QzAzMjQ4NkE3NTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgGZ0wDQYJKoZIhvcNAQELBQADggEBAEE6txp+3rvcgG1NN8qJuOMAxO1olWsy 9t1zOiEUU4ze4ZmTfdRy16iDYUXmTfLqg1TmaFtbOicqW9NyZmJHr/AVC+3DEmsT fT9/XPhdIFTFqL38w/ZJwSNRiFwUY0y4Nr2+/e1gsUXtdCeP021B69Wjka+dYM+5 N7F69a1UbBxq9fXAHOnCP3ehZFBFUlLzn4N2vfZzWiXlcjp/6Y/M4Bydmr26DtS2 jJDuzg7fFFOdJaeeh4Mg4ie8E512g9PIPxpaMQIxTsjwwQt/vY4hS31ctKdUd2dR zh+zQbofdiAQd67ygxxtEusrGt98SHXMKQiMBnTUZWAPGWNkUtQSCSs= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org