$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer File: C08E65A250AEDC93967004D660D25DB8293AB419.cer (raw, json) Hash identifier: fEP56xN4PY3vcSvs3RoQd6Mzs2UzPIr8kJBE9x+BVNE= Subject key identifier: C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 40CE1849CA4AE9AD481481D857EB8E6E96B3D873 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft caRepository: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 31 Oct 2024 03:13:44 +0000 Certificate not after: Thu 30 Oct 2025 03:18:44 +0000 Subordinate resources: IP: 160.187.218.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ce:18:49:ca:4a:e9:ad:48:14:81:d8:57:eb:8e:6e:96:b3:d8:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 31 03:13:44 2024 GMT Not After : Oct 30 03:18:44 2025 GMT Subject: CN=C08E65A250AEDC93967004D660D25DB8293AB419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f2:8e:49:c5:32:c6:73:ef:59:f4:da:fc:d0: 93:9a:95:cc:d1:56:c6:98:16:71:d5:d2:c5:f4:6b: 37:2e:79:80:01:ba:94:d1:0b:4d:fb:fd:fa:c7:e1: 85:df:a9:99:f4:ef:07:1b:e0:5a:82:ce:6a:e4:80: 65:8c:a0:13:a6:f1:e9:f7:75:a1:ff:8a:46:8d:b4: e3:39:a7:52:7c:5c:af:c5:cc:02:36:a5:6d:1a:c4: 40:68:cc:07:2d:88:5b:66:2f:ac:f4:fa:dc:5e:4a: fb:61:cd:08:ba:46:21:65:75:b3:48:31:89:39:a8: c6:41:ea:43:cc:3c:e1:87:3f:ab:a1:03:e4:db:ed: 0a:1d:14:5f:f3:4e:ba:e4:d6:de:ba:47:49:0f:13: 00:fa:d7:4b:26:c2:25:64:f1:ad:6c:43:08:d5:1e: e5:ba:31:59:f5:28:3f:b8:b1:78:1c:ab:52:a5:41: 35:8e:8f:77:41:04:c2:00:9f:58:b4:a4:cb:95:a8: 49:ab:17:22:e0:60:40:44:36:19:f9:c6:18:2c:9f: e1:fa:5c:51:95:7a:4f:ce:de:c0:a2:8b:f6:49:b0: 30:07:8d:26:3f:ed:9e:38:cf:d3:99:ea:55:2b:6c: df:5b:d7:43:5d:5b:0c:2a:4d:0e:ce:8c:86:ff:40: 1e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.218.0/23 Signature Algorithm: sha256WithRSAEncryption 20:55:c2:8b:df:4e:44:67:e6:a3:bb:12:59:2c:1c:b7:97:23: 75:fc:2a:00:01:b8:94:e2:90:7a:2b:31:60:4a:ea:46:7b:f6: 3f:00:67:03:1c:8a:3c:7b:72:51:76:b8:fc:c7:f2:04:c7:99: 8a:19:71:33:68:a3:60:a5:85:1e:20:6b:95:44:fc:0d:27:5e: b0:c0:e1:f6:c4:02:35:78:b7:3d:ff:17:4e:84:f5:aa:1b:08: a8:92:b9:c6:ed:ae:61:4d:ba:97:b1:3e:81:04:99:c2:fc:a5: 57:c4:b3:a0:a5:da:f4:90:94:dc:d0:03:aa:9e:26:6f:16:ce: 4b:6f:64:e1:76:ad:88:49:83:34:24:09:fd:3e:8e:3f:a0:89: 0b:3f:49:21:cd:e4:df:0c:bc:1a:6c:72:c3:12:a6:9e:d9:80: 11:01:e3:a5:ac:ca:c9:c9:a6:23:29:ec:0c:9a:20:7d:e5:56: 26:01:3f:df:00:2a:36:4c:45:7f:28:78:07:85:21:5a:39:97: dc:82:3e:ed:77:5c:29:e8:d6:16:2f:fc:31:92:3b:e0:68:ae: 23:dd:e7:2d:61:22:1f:92:74:c1:e5:f1:46:72:10:cf:5a:08: a9:1a:14:1c:8c:56:9a:86:d6:b7:88:76:e9:d0:12:14:f3:78: 10:c5:26:f5 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQM4YScpK6a1IFIHYV+uObpaz2HMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTAzMTAzMTM0NFoX DTI1MTAzMDAzMTg0NFowMzExMC8GA1UEAxMoQzA4RTY1QTI1MEFFREM5Mzk2NzAw NEQ2NjBEMjVEQjgyOTNBQjQxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAObyjknFMsZz71n02vzQk5qVzNFWxpgWcdXSxfRrNy55gAG6lNELTfv9+sfh hd+pmfTvBxvgWoLOauSAZYygE6bx6fd1of+KRo204zmnUnxcr8XMAjalbRrEQGjM By2IW2YvrPT63F5K+2HNCLpGIWV1s0gxiTmoxkHqQ8w84Yc/q6ED5NvtCh0UX/NO uuTW3rpHSQ8TAPrXSybCJWTxrWxDCNUe5boxWfUoP7ixeByrUqVBNY6Pd0EEwgCf WLSky5WoSasXIuBgQEQ2GfnGGCyf4fpcUZV6T87ewKKL9kmwMAeNJj/tnjjP05nq VSts31vXQ11bDCpNDs6Mhv9AHuMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMCOZaJQrtyTlnAE1mDSXbgpOrQZMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ODFkNTRjYi01N2E5LTRhMTYtYTcwZS1jNWY2MDI0ZTEzOWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ4MWQ1NGNi LTU3YTktNGExNi1hNzBlLWM1ZjYwMjRlMTM5ZC8wL0MwOEU2NUEyNTBBRURDOTM5 NjcwMDRENjYwRDI1REI4MjkzQUI0MTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgu9owDQYJKoZIhvcNAQELBQADggEBACBVwovfTkRn5qO7ElksHLeXI3X8KgAB uJTikHorMWBK6kZ79j8AZwMcijx7clF2uPzH8gTHmYoZcTNoo2ClhR4ga5VE/A0n XrDA4fbEAjV4tz3/F06E9aobCKiSucbtrmFNupexPoEEmcL8pVfEs6Cl2vSQlNzQ A6qeJm8WzktvZOF2rYhJgzQkCf0+jj+giQs/SSHN5N8MvBpscsMSpp7ZgBEB46Ws ysnJpiMp7AyaIH3lViYBP98AKjZMRX8oeAeFIVo5l9yCPu13XCno1hYv/DGSO+Bo riPd5y1hIh+SdMHl8UZyEM9aCKkaFByMVpqG1reIdunQEhTzeBDFJvU= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org