$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer File: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer (raw, json) Hash identifier: 9Zs04JQwe6spkrWg8a5uJ1JFI3O8MQ8DY+Qi0w6+U4c= Subject key identifier: C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6AA6EB50C34F6D46BFE9203616C9A519ECD1AADB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft caRepository: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 20 Sep 2024 11:47:59 +0000 Certificate not after: Fri 19 Sep 2025 11:52:59 +0000 Subordinate resources: IP: 160.19.178.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a6:eb:50:c3:4f:6d:46:bf:e9:20:36:16:c9:a5:19:ec:d1:aa:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Sep 20 11:47:59 2024 GMT Not After : Sep 19 11:52:59 2025 GMT Subject: CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7d:8f:2b:7e:25:73:f5:25:cb:75:e4:b0:56: 17:99:02:cc:31:6c:0b:5d:1f:84:62:7e:9b:df:a1: 16:9c:a8:3b:10:9c:9e:40:15:89:50:89:24:b9:45: 8d:36:30:51:f4:9f:49:9e:4a:a3:44:8a:e2:f8:d3: 49:96:15:59:26:66:dc:10:83:8e:a8:ef:bb:7e:6d: be:ca:44:13:54:f1:bd:ae:43:55:50:ff:8f:6b:72: 8f:d4:58:d2:f7:9f:ea:ea:4b:9c:d4:05:6d:68:b2: 0c:37:3d:ab:b4:58:b4:25:5a:3d:e3:83:0e:14:d6: 0d:5d:67:7b:81:1e:b6:aa:56:56:08:a3:e8:45:16: ff:de:1b:8a:32:b4:3e:14:fe:19:a2:3f:ee:ce:a9: d4:a2:20:aa:10:c9:88:6f:dd:6c:61:22:b1:f0:f8: 82:cf:d5:cf:b3:e6:82:89:f3:4c:cc:8d:d9:7a:1c: f3:87:74:dc:df:c9:fd:a9:e3:bc:fc:18:6a:95:64: ba:11:ae:5a:15:9c:20:8a:c6:32:47:67:d0:f4:ba: d5:aa:0d:12:d4:4b:12:b7:d7:d7:34:31:50:8c:ec: a6:52:77:76:24:ef:e9:c5:35:2a:4b:b3:46:c5:83: bb:8e:59:e8:3a:59:b3:ec:c0:9e:f9:dd:b4:66:71: cc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.178.0/23 Signature Algorithm: sha256WithRSAEncryption 53:14:0d:12:6d:e4:99:c0:d9:ac:ec:38:22:56:78:25:20:78: 12:25:b9:e7:c7:b6:53:2a:f8:53:bb:43:80:aa:db:b6:19:aa: 1d:07:47:22:29:22:f4:59:87:51:27:71:5e:46:46:3f:24:2d: 53:f0:4a:9a:f0:6c:17:36:bf:a6:b0:86:c0:d5:3e:21:c1:3c: 72:47:3e:0f:45:f3:f5:b9:09:55:ef:a7:7c:24:71:fb:82:6c: 95:85:7b:c0:a0:b2:a8:6b:3c:1f:c1:fd:43:5d:5c:fa:c7:d0: f2:5e:40:b7:d1:e6:b8:f6:2a:a1:e7:65:9e:63:82:13:8f:39: c3:9d:b3:8f:87:7b:f0:e2:2f:d1:23:d5:9e:16:69:af:75:49: 15:c5:a9:21:5b:75:3b:cb:68:4e:c6:0a:24:66:b2:78:d2:ff: 5a:b2:6b:2d:a5:21:be:06:1b:43:7c:ea:6b:2d:23:3f:9b:86: 87:9e:6c:e5:3a:f2:e9:b5:68:3d:b4:63:06:a1:12:fd:73:e7: 23:14:dd:1e:0f:af:df:a2:7a:de:79:5c:82:78:e8:87:c7:9f: 69:d9:30:05:a2:78:ca:45:b0:1d:87:fa:84:06:3c:6c:ab:44: 93:7d:12:d4:c1:37:36:09:1f:ac:af:c5:32:b4:d0:65:b0:47: 95:ab:61:cf -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUaqbrUMNPbUa/6SA2FsmlGezRqtswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDkyMDExNDc1OVoX DTI1MDkxOTExNTI1OVowMzExMC8GA1UEAxMoQzJENTkzRDFDOEE3RjcwRDQ1MTI1 RDRCREJFNTc3NDkyN0MxNEU1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANR9jyt+JXP1Jct15LBWF5kCzDFsC10fhGJ+m9+hFpyoOxCcnkAViVCJJLlF jTYwUfSfSZ5Ko0SK4vjTSZYVWSZm3BCDjqjvu35tvspEE1Txva5DVVD/j2tyj9RY 0vef6upLnNQFbWiyDDc9q7RYtCVaPeODDhTWDV1ne4EetqpWVgij6EUW/94bijK0 PhT+GaI/7s6p1KIgqhDJiG/dbGEisfD4gs/Vz7PmgonzTMyN2Xoc84d03N/J/anj vPwYapVkuhGuWhWcIIrGMkdn0PS61aoNEtRLErfX1zQxUIzsplJ3diTv6cU1Kkuz RsWDu45Z6DpZs+zAnvndtGZxzOsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMLVk9HIp/cNRRJdS9vld0knwU5VMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mZGIwMTMwZC1jYWEzLTQ3NmYtYWY4MS1iYTcyMjMzMGJlMmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZkYjAxMzBk LWNhYTMtNDc2Zi1hZjgxLWJhNzIyMzMwYmUyYy8wL0MyRDU5M0QxQzhBN0Y3MEQ0 NTEyNUQ0QkRCRTU3NzQ5MjdDMTRFNTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgE7IwDQYJKoZIhvcNAQELBQADggEBAFMUDRJt5JnA2azsOCJWeCUgeBIluefH tlMq+FO7Q4Cq27YZqh0HRyIpIvRZh1EncV5GRj8kLVPwSprwbBc2v6awhsDVPiHB PHJHPg9F8/W5CVXvp3wkcfuCbJWFe8CgsqhrPB/B/UNdXPrH0PJeQLfR5rj2KqHn ZZ5jghOPOcOds4+He/DiL9Ej1Z4Waa91SRXFqSFbdTvLaE7GCiRmsnjS/1qyay2l Ib4GG0N86mstIz+bhoeebOU68um1aD20YwahEv1z5yMU3R4Pr9+iet55XIJ46IfH n2nZMAWieMpFsB2H+oQGPGyrRJN9EtTBNzYJH6yvxTK00GWwR5WrYc8= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org