$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer File: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer (raw, json) Hash identifier: TYZym/AoaWj083auV/lg5l+Qe+dBd5N3LKEt38OXoiE= Subject key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 4371E93D4A5556014F6502FC393F45AFDEFA4B9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft caRepository: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 14 May 2024 04:38:35 +0000 Certificate not after: Tue 13 May 2025 04:43:35 +0000 Subordinate resources: IP: 160.19.84.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:71:e9:3d:4a:55:56:01:4f:65:02:fc:39:3f:45:af:de:fa:4b:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 14 04:38:35 2024 GMT Not After : May 13 04:43:35 2025 GMT Subject: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:6a:ba:46:59:8c:d5:7b:75:81:41:0d:14: ad:36:9f:7d:81:f2:9c:af:bb:18:ec:1a:74:5e:9d: a2:15:d3:06:b3:13:80:7d:e1:47:76:7b:ee:6b:76: 66:fb:57:d6:e0:d4:6a:d9:b2:9d:a6:f8:34:e8:b8: 8d:fa:75:ee:fa:c6:dd:c4:47:83:45:5a:0b:c3:3a: 75:31:3d:7d:9b:40:b8:4d:3d:a0:1a:90:a5:36:40: 81:42:bc:63:cd:cd:6b:d7:3b:36:56:d0:36:06:e9: cf:47:1e:ce:35:b8:7f:7b:63:95:bf:23:99:4d:54: 7e:e3:ef:11:48:2e:43:8c:b0:f1:05:19:9f:11:b7: 22:3b:0e:fb:a1:40:61:76:e5:b7:e5:b3:bd:3e:59: 15:13:a7:e2:a2:62:39:88:8c:16:c4:a1:ef:c9:6c: d2:8b:ec:95:bc:8f:5a:99:cb:97:63:15:de:54:b5: 20:c4:28:28:bd:55:12:ab:fc:09:1c:bc:9d:01:82: 49:60:e5:ab:4b:e0:4c:d9:66:e0:88:a9:14:e6:ff: 00:c6:71:b2:64:b2:84:7d:6f:b5:b3:af:a9:f2:45: 78:59:ea:be:a6:0d:0d:a9:97:44:ac:e2:a7:2e:a0: 50:c6:da:ec:08:11:68:c9:0a:81:99:a9:b0:e8:4b: 3f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.84.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:e9:5c:73:80:49:bf:76:b2:48:7a:e1:26:51:a8:02:c3:38: 5c:ac:45:7c:47:3f:01:e1:d4:a6:7b:e5:e7:34:a2:3f:47:08: 92:5d:8e:b7:d3:77:c3:69:94:f2:f4:88:d7:bc:3c:be:76:1a: 40:73:44:25:c3:0c:c2:6f:9d:16:9e:40:a3:3b:2e:8c:98:a8: 1d:5d:d4:41:ac:31:e1:b1:68:b5:b0:86:83:72:40:1d:22:5d: 2d:44:5b:89:ae:a7:f5:f4:d2:55:57:e2:90:9e:94:72:fe:50: aa:69:be:10:46:e6:f8:a3:09:da:74:85:61:e9:f4:32:49:50: 1d:fd:0c:dd:4a:87:0a:be:8a:22:e4:5c:47:da:df:cb:85:48: aa:b4:cc:08:f9:d5:02:4c:8d:1f:95:60:f3:8b:75:ff:a7:37: bc:2f:91:35:9b:87:0b:28:21:34:9d:ff:bf:ce:f1:b6:e8:04: a7:e8:a3:10:e3:cd:9e:db:81:c4:89:ad:4b:a9:b4:69:d4:22: 05:e8:c5:c9:33:1c:24:b0:bc:94:2a:be:63:2c:e6:ad:a2:dd: 02:19:98:7e:c1:6c:23:c6:cf:2b:cf:62:e1:0e:a1:e3:80:bd: c1:96:03:42:f7:3f:1c:93:13:76:ac:1f:10:f4:41:c5:af:6b: 88:89:10:89 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQ3HpPUpVVgFPZQL8OT9Fr976S5swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDUxNDA0MzgzNVoX DTI1MDUxMzA0NDMzNVowMzExMC8GA1UEAxMoQzE4NEQwQkJBMENEMTk0NEMxOTlC RjIwRDBFQkE1MUE5RkI0N0FERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbuarpGWYzVe3WBQQ0UrTaffYHynK+7GOwadF6dohXTBrMTgH3hR3Z77mt2 ZvtX1uDUatmynab4NOi4jfp17vrG3cRHg0VaC8M6dTE9fZtAuE09oBqQpTZAgUK8 Y83Na9c7NlbQNgbpz0cezjW4f3tjlb8jmU1UfuPvEUguQ4yw8QUZnxG3IjsO+6FA YXblt+WzvT5ZFROn4qJiOYiMFsSh78ls0ovslbyPWpnLl2MV3lS1IMQoKL1VEqv8 CRy8nQGCSWDlq0vgTNlm4IipFOb/AMZxsmSyhH1vtbOvqfJFeFnqvqYNDamXRKzi py6gUMba7AgRaMkKgZmpsOhLP2UCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMGE0LugzRlEwZm/INDrpRqftHrdMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ZTM3NGQ0OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRlMzc0ZDQ4 LTVhNzAtNGM3Zi1iZGZkLWQ4MDUyZWJhZjBhYi8wL0MxODREMEJCQTBDRDE5NDRD MTk5QkYyMEQwRUJBNTFBOUZCNDdBREQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgE1QwDQYJKoZIhvcNAQELBQADggEBAA3pXHOASb92skh64SZRqALDOFysRXxH PwHh1KZ75ec0oj9HCJJdjrfTd8NplPL0iNe8PL52GkBzRCXDDMJvnRaeQKM7LoyY qB1d1EGsMeGxaLWwhoNyQB0iXS1EW4mup/X00lVX4pCelHL+UKppvhBG5vijCdp0 hWHp9DJJUB39DN1Khwq+iiLkXEfa38uFSKq0zAj51QJMjR+VYPOLdf+nN7wvkTWb hwsoITSd/7/O8bboBKfooxDjzZ7bgcSJrUuptGnUIgXoxckzHCSwvJQqvmMs5q2i 3QIZmH7BbCPGzyvPYuEOoeOAvcGWA0L3PxyTE3asHxD0QcWva4iJEIk= -----END CERTIFICATE-----Generated at Fri Jun 21 21:25:33 2024 by rpki-client on console-ams.rpki-client.org