$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer File: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer (raw, json) Hash identifier: ErQasCOLQOm/uMRFl8xpvN8TgCwk6yS17C/q1s0zz/o= Subject key identifier: C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 53F401400AADE17B5D5968AD5757BA26CCD4FE5D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft caRepository: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 08 Aug 2024 08:50:27 +0000 Certificate not after: Thu 07 Aug 2025 08:55:27 +0000 Subordinate resources: IP: 160.25.248.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f4:01:40:0a:ad:e1:7b:5d:59:68:ad:57:57:ba:26:cc:d4:fe:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 8 08:50:27 2024 GMT Not After : Aug 7 08:55:27 2025 GMT Subject: CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:6a:dc:5f:86:89:9e:d0:3e:4a:ad:b2:75: 34:a0:55:e1:92:88:00:fe:e1:36:5c:1a:b9:8f:99: f8:cb:83:d1:01:ad:d4:cf:f8:99:fa:83:e3:85:33: 65:84:13:96:b4:00:66:bf:77:07:70:d8:c6:16:39: 48:fa:a8:1c:78:e4:c8:3c:1a:12:ce:da:4a:c7:69: 64:bd:b8:d6:55:8f:43:26:2a:c7:21:58:4c:c8:39: 90:03:ce:56:3f:d0:23:eb:e7:e1:21:60:88:d8:7f: 4e:39:2c:29:f3:3f:e6:a5:d5:36:a9:47:ad:ec:f9: 3c:af:e3:27:ce:e2:1c:dc:c3:65:64:36:33:f0:00: 7b:2c:5d:85:31:4d:3f:d3:57:29:f5:67:b9:72:1e: ff:da:c2:b9:cd:0f:87:bb:54:94:29:d6:49:f9:38: 9b:8c:65:c7:f2:b0:59:34:b5:9a:63:6a:0d:18:08: 41:38:83:ca:5e:2f:ca:53:a3:3f:65:0a:73:b2:d8: 38:7a:85:3f:84:6d:1e:bb:ea:6b:6a:c0:88:05:75: 27:f5:d6:05:e7:fa:78:dd:25:9b:b8:9a:5d:a3:da: 2e:dd:5b:e6:ce:b3:a7:4a:c3:39:72:f0:8d:c3:37: 85:bd:1d:81:be:95:ae:99:30:f0:a9:f3:27:9b:24: 4f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.248.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:b7:a5:16:96:61:d6:60:67:3f:cb:82:96:cb:f1:46:6c:a1: f2:8e:86:8c:ad:a3:53:ed:ab:21:35:5e:99:84:19:74:f8:6d: d9:34:0d:1b:94:23:e2:38:86:31:70:70:0b:a6:ac:91:6d:44: 69:3b:be:10:6a:a3:34:7b:4f:ab:b8:13:60:69:57:25:57:bc: 5a:06:4d:8b:d0:89:2b:f2:c6:c0:86:58:f4:ea:2c:6b:6b:e3: b8:1b:cb:3a:65:f1:d9:c8:8d:b8:08:94:18:bc:3d:c2:b2:20: cb:c0:b8:10:8e:37:72:83:82:3c:e3:c9:a4:2a:48:e5:d2:a6: 51:8c:d3:74:c6:69:b8:1b:da:8d:c0:e8:a2:14:2a:b5:54:f4: 15:c8:88:5d:75:c1:2a:a9:a5:df:f3:aa:06:63:16:91:29:e1: 1d:f7:48:7e:58:f3:c9:35:c6:da:68:4a:9b:95:ba:b6:68:aa: 88:f4:42:e6:de:db:7c:9b:11:63:34:c4:63:08:67:58:c5:b8: df:08:f6:74:17:3a:0b:83:68:db:17:38:27:b0:24:7f:72:df: e4:0b:f5:42:10:e9:26:e4:29:ff:bf:44:47:3c:f7:c3:c9:4b: a8:1c:0c:bf:ea:31:e1:34:b6:51:be:62:71:44:9f:20:70:6f: 7e:12:d1:53 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUU/QBQAqt4XtdWWitV1e6JszU/l0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDgwODA4NTAyN1oX DTI1MDgwNzA4NTUyN1owMzExMC8GA1UEAxMoQzIzRjgzMkYyN0RCODhCOEJDNTg3 NjY5MzJGREExOUIzRTNBNENCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALSEatxfhome0D5KrbJ1NKBV4ZKIAP7hNlwauY+Z+MuD0QGt1M/4mfqD44Uz ZYQTlrQAZr93B3DYxhY5SPqoHHjkyDwaEs7aSsdpZL241lWPQyYqxyFYTMg5kAPO Vj/QI+vn4SFgiNh/TjksKfM/5qXVNqlHrez5PK/jJ87iHNzDZWQ2M/AAeyxdhTFN P9NXKfVnuXIe/9rCuc0Ph7tUlCnWSfk4m4xlx/KwWTS1mmNqDRgIQTiDyl4vylOj P2UKc7LYOHqFP4RtHrvqa2rAiAV1J/XWBef6eN0lm7iaXaPaLt1b5s6zp0rDOXLw jcM3hb0dgb6Vrpkw8KnzJ5skTyMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMI/gy8n24i4vFh2aTL9oZs+Oky/MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wMjc5ZWU5Yy1hZDJiLTRiZWQtODY0MS0yM2JmMmQzYjE2ZGIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAyNzllZTlj LWFkMmItNGJlZC04NjQxLTIzYmYyZDNiMTZkYi8wL0MyM0Y4MzJGMjdEQjg4QjhC QzU4NzY2OTMyRkRBMTlCM0UzQTRDQkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgGfgwDQYJKoZIhvcNAQELBQADggEBAC63pRaWYdZgZz/LgpbL8UZsofKOhoyt o1PtqyE1XpmEGXT4bdk0DRuUI+I4hjFwcAumrJFtRGk7vhBqozR7T6u4E2BpVyVX vFoGTYvQiSvyxsCGWPTqLGtr47gbyzpl8dnIjbgIlBi8PcKyIMvAuBCON3KDgjzj yaQqSOXSplGM03TGabgb2o3A6KIUKrVU9BXIiF11wSqppd/zqgZjFpEp4R33SH5Y 88k1xtpoSpuVurZoqoj0Qube23ybEWM0xGMIZ1jFuN8I9nQXOguDaNsXOCewJH9y 3+QL9UIQ6SbkKf+/REc898PJS6gcDL/qMeE0tlG+YnFEnyBwb34S0VM= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org