$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer File: AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer (raw, json) Hash identifier: m5qHQ8M7+4tvTtvwJtkyWBFt4kZs0KJL5zl2N/HtYKQ= Subject key identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0B5CB81A6777197AEC6EE1BA1EB287A862679705 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft caRepository: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 25 Sep 2024 04:21:26 +0000 Certificate not after: Wed 24 Sep 2025 04:26:26 +0000 Subordinate resources: IP: 160.187.55.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:5c:b8:1a:67:77:19:7a:ec:6e:e1:ba:1e:b2:87:a8:62:67:97:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Sep 25 04:21:26 2024 GMT Not After : Sep 24 04:26:26 2025 GMT Subject: CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c6:33:0f:c9:a9:f3:5b:75:ab:eb:a6:28:c0: f5:2c:42:5b:05:a3:80:fd:00:90:a0:d0:95:26:02: 0c:32:8e:12:27:49:37:62:4f:b5:64:2b:25:50:26: ee:9f:39:aa:4b:c7:fd:03:75:d2:dd:90:10:5a:c0: 9a:57:38:22:ab:08:0f:5c:f1:1e:e7:2f:e9:74:fe: ba:30:b4:c5:40:18:20:77:5a:a5:83:5c:e4:e1:d6: 8c:d7:3c:3e:25:08:0c:21:80:38:41:21:7b:0b:34: 4f:ed:71:64:7d:89:42:09:5a:5a:31:3e:c2:33:5d: 0e:98:17:70:27:79:7e:f9:1f:27:e7:50:54:1c:9d: c9:e9:8d:5c:49:3a:80:64:cd:fe:f8:6e:fa:8a:1e: 16:88:60:25:1e:bf:09:c4:e7:12:5f:c1:da:a0:09: d1:62:3a:82:b8:2d:1d:12:17:69:fa:c0:bb:19:17: 92:fa:33:2a:62:ec:9c:81:5d:55:52:e7:61:d1:e5: b0:bf:9e:55:8e:c1:99:f7:c0:cc:02:51:53:76:ab: 58:07:23:43:33:20:83:db:e6:50:63:9b:d6:db:e8: 66:c0:38:a2:c5:8c:c5:5c:b2:6c:89:6c:37:f5:fc: ad:5d:08:e7:8d:bc:e6:de:81:04:cc:e4:e8:f2:66: 3c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.55.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:44:d5:e7:b9:92:d7:63:3c:f1:24:fe:39:fb:43:0a:1d:38: 2d:a1:30:7e:06:ad:ce:75:ea:1b:30:2a:45:6f:80:3c:3b:ad: 65:17:cf:fd:5d:f0:04:3c:ae:ee:45:7f:5d:90:55:ef:55:8d: 86:e4:4c:ad:b3:d5:3e:a0:b2:ef:08:2f:ae:cd:b8:20:81:19: 9a:85:a4:12:f6:9c:41:a9:c3:8a:4d:ab:e6:9e:fc:18:62:62: b2:c8:15:41:0e:e4:64:53:9a:2a:b9:df:9e:8d:d5:db:f1:af: f1:c7:c3:3a:5e:b5:07:39:56:a6:55:5e:3d:8e:53:f1:97:92: 2e:60:11:0f:a2:4f:50:d3:30:cf:8a:b6:e9:c2:17:d9:b3:de: de:37:42:fc:5f:4e:da:75:18:2f:99:6d:28:b7:2b:57:f7:a7: 95:40:fb:62:9f:dd:15:8d:c4:e0:9e:6d:ce:d4:d4:9b:da:0e: c5:db:72:e9:cd:c2:10:8d:1d:e5:2b:1a:3a:95:02:57:25:73: e5:11:f0:ff:d7:3b:8f:98:02:7b:06:c6:52:57:d5:51:97:b9: 2d:23:38:f5:18:25:15:cb:f6:a4:53:52:71:25:76:e2:57:e6: e6:a7:de:29:b8:b8:89:37:ec:46:7e:ea:43:26:42:ef:80:5c: 34:60:78:8b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUC1y4Gmd3GXrsbuG6HrKHqGJnlwUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDkyNTA0MjEyNloX DTI1MDkyNDA0MjYyNlowMzExMC8GA1UEAxMoQUVEOENCMzNFNzg5REQzNDIxODJC OERENkQxNkQ5NUE0NUI5ODFFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAODGMw/JqfNbdavrpijA9SxCWwWjgP0AkKDQlSYCDDKOEidJN2JPtWQrJVAm 7p85qkvH/QN10t2QEFrAmlc4IqsID1zxHucv6XT+ujC0xUAYIHdapYNc5OHWjNc8 PiUIDCGAOEEhews0T+1xZH2JQglaWjE+wjNdDpgXcCd5fvkfJ+dQVBydyemNXEk6 gGTN/vhu+ooeFohgJR6/CcTnEl/B2qAJ0WI6grgtHRIXafrAuxkXkvozKmLsnIFd VVLnYdHlsL+eVY7BmffAzAJRU3arWAcjQzMgg9vmUGOb1tvoZsA4osWMxVyybIls N/X8rV0I54285t6BBMzk6PJmPMkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK7YyzPnid00IYK43W0W2VpFuYHvMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5YjA3YTll LTYyZGYtNDgwOC05ZDJhLWE2ZTY4ODRiY2JiYi8wL0FFRDhDQjMzRTc4OUREMzQy MTgyQjhERDZEMTZEOTVBNDVCOTgxRUYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACguzcwDQYJKoZIhvcNAQELBQADggEBAHxE1ee5ktdjPPEk/jn7QwodOC2hMH4G rc516hswKkVvgDw7rWUXz/1d8AQ8ru5Ff12QVe9VjYbkTK2z1T6gsu8IL67NuCCB GZqFpBL2nEGpw4pNq+ae/BhiYrLIFUEO5GRTmiq5356N1dvxr/HHwzpetQc5VqZV Xj2OU/GXki5gEQ+iT1DTMM+KtunCF9mz3t43QvxfTtp1GC+ZbSi3K1f3p5VA+2Kf 3RWNxOCebc7U1JvaDsXbcunNwhCNHeUrGjqVAlclc+UR8P/XO4+YAnsGxlJX1VGX uS0jOPUYJRXL9qRTUnElduJX5uan3im4uIk37EZ+6kMmQu+AXDRgeIs= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org