$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer File: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer (raw, json) Hash identifier: a986jEw3A03xGbDMunn165NUc8glObY0mTMYRnrGFx0= Subject key identifier: B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 13DAA80734A79A9319D11FE2E90266CAEBDF5721 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft caRepository: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 19 Jul 2024 04:19:17 +0000 Certificate not after: Fri 18 Jul 2025 04:24:17 +0000 Subordinate resources: IP: 160.25.58.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:da:a8:07:34:a7:9a:93:19:d1:1f:e2:e9:02:66:ca:eb:df:57:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 19 04:19:17 2024 GMT Not After : Jul 18 04:24:17 2025 GMT Subject: CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7c:12:aa:33:3f:9f:49:60:df:fd:03:80:50: fa:0c:d9:51:28:b1:a7:28:bc:34:cb:4d:0a:9e:29: d6:91:64:68:52:a0:d9:87:68:bf:34:0f:0f:b3:51: 4e:c5:bd:15:56:ca:33:e0:d0:41:c2:95:1e:76:e6: 2d:51:aa:fe:b5:98:ca:10:2e:3f:fb:e1:b8:eb:53: a6:95:b8:65:07:a3:3f:7b:fc:8f:df:36:83:cc:13: 5b:5c:42:ca:a5:d8:59:ba:74:a6:3e:62:0b:26:01: 74:29:8d:71:87:88:14:91:64:05:24:e3:de:fc:6e: ee:00:a6:26:33:b4:f8:96:84:fa:71:a2:d0:cd:49: 79:60:8e:a5:1e:81:41:20:79:47:7e:d8:dd:99:58: 9c:6a:cf:3e:d7:32:43:a8:5d:33:ff:be:41:fa:83: 4d:e8:e4:f8:a0:4c:fe:75:c5:25:82:bf:03:1e:22: 4f:7d:0e:41:4e:1a:b2:5d:9e:36:d6:ac:b8:65:39: b7:1c:7d:d8:8d:db:92:24:16:ca:72:e4:11:56:3f: c4:fe:26:92:1f:0e:a1:81:f8:a5:89:bc:a8:64:a2: 60:ff:88:8d:01:95:6c:23:c6:6a:20:2f:26:63:f7: 59:70:28:8d:a3:6b:20:55:79:96:c9:91:73:34:1f: 42:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.58.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:d2:f4:b2:8a:fa:9d:d9:84:3e:ee:a2:73:da:b8:41:0c:16: 62:6f:ce:ba:09:c6:01:55:30:8e:3b:0e:9d:1c:e0:4b:f0:ee: ca:98:3f:ab:8b:3e:97:e5:e9:06:12:6b:f3:17:f7:fc:8c:01: c0:91:93:48:98:b9:99:d3:84:9b:30:8e:9b:21:78:e2:44:12: e9:2c:a1:c8:7b:6a:d1:58:b5:40:75:04:31:93:de:4c:dc:42: c9:18:3c:0f:f3:78:89:06:b2:be:3a:3a:a7:7b:d5:2a:72:1b: 5f:a4:55:ce:93:a4:47:51:05:d0:5d:92:6c:f4:7a:e7:20:12: 39:b3:0b:72:e3:1b:96:ca:40:57:79:44:f9:c9:61:aa:7a:b7: e3:ad:93:0a:c5:06:f4:ff:80:c0:bb:81:18:b3:4d:3d:8b:55: 9c:bd:9c:24:b7:05:20:ae:44:a2:22:06:c1:d9:22:c8:32:8f: 3f:f7:08:07:51:c0:88:16:4b:a0:7b:b3:9e:5d:07:80:68:82: e0:a5:b4:34:8a:7b:23:15:4f:78:3b:50:90:99:e0:fa:7d:33: 37:74:2c:2d:4c:ff:3d:f4:ce:e1:b9:7b:51:66:e0:85:7e:00: e6:83:db:c1:aa:88:b1:9b:f5:bb:ad:02:c5:9f:82:93:8c:5d: 37:e7:55:0d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUE9qoBzSnmpMZ0R/i6QJmyuvfVyEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDcxOTA0MTkxN1oX DTI1MDcxODA0MjQxN1owMzExMC8GA1UEAxMoQjBENzI2NDE5RkJGMzVFN0M2RUI0 MzdFMjM4RjNEMkEzRjA2M0I0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMx8EqozP59JYN/9A4BQ+gzZUSixpyi8NMtNCp4p1pFkaFKg2YdovzQPD7NR TsW9FVbKM+DQQcKVHnbmLVGq/rWYyhAuP/vhuOtTppW4ZQejP3v8j982g8wTW1xC yqXYWbp0pj5iCyYBdCmNcYeIFJFkBSTj3vxu7gCmJjO0+JaE+nGi0M1JeWCOpR6B QSB5R37Y3ZlYnGrPPtcyQ6hdM/++QfqDTejk+KBM/nXFJYK/Ax4iT30OQU4asl2e NtasuGU5txx92I3bkiQWynLkEVY/xP4mkh8OoYH4pYm8qGSiYP+IjQGVbCPGaiAv JmP3WXAojaNrIFV5lsmRczQfQrUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLDXJkGfvzXnxutDfiOPPSo/BjtMMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80MmRhYjQ2YS0wODVlLTQ0MzItOTgzMy03MWI4ZGIxNDRkOTQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQyZGFiNDZh LTA4NWUtNDQzMi05ODMzLTcxYjhkYjE0NGQ5NC8wL0IwRDcyNjQxOUZCRjM1RTdD NkVCNDM3RTIzOEYzRDJBM0YwNjNCNEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgGTowDQYJKoZIhvcNAQELBQADggEBAIrS9LKK+p3ZhD7uonPauEEMFmJvzroJ xgFVMI47Dp0c4Evw7sqYP6uLPpfl6QYSa/MX9/yMAcCRk0iYuZnThJswjpsheOJE Euksoch7atFYtUB1BDGT3kzcQskYPA/zeIkGsr46Oqd71SpyG1+kVc6TpEdRBdBd kmz0eucgEjmzC3LjG5bKQFd5RPnJYap6t+OtkwrFBvT/gMC7gRizTT2LVZy9nCS3 BSCuRKIiBsHZIsgyjz/3CAdRwIgWS6B7s55dB4BoguCltDSKeyMVT3g7UJCZ4Pp9 Mzd0LC1M/z30zuG5e1Fm4IV+AOaD28GqiLGb9butAsWfgpOMXTfnVQ0= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org