$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer File: C4632299E016D269164FA40AEF99CC8602E2B7C1.cer (raw, json) Hash identifier: dapycRXOm9tOaM3lGlo3IVWliQqoCdB3hGXhqgAFvfk= Subject key identifier: C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 3A1EC02120B9315AD5EB298F342121E29BF0F4A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft caRepository: rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 13 Jul 2024 23:38:24 +0000 Certificate not after: Sat 12 Jul 2025 23:43:24 +0000 Subordinate resources: IP: 160.22.64.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:1e:c0:21:20:b9:31:5a:d5:eb:29:8f:34:21:21:e2:9b:f0:f4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 13 23:38:24 2024 GMT Not After : Jul 12 23:43:24 2025 GMT Subject: CN=C4632299E016D269164FA40AEF99CC8602E2B7C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:36:7e:13:a2:14:a0:8a:83:9f:0e:28:99:c8: e2:cb:22:49:7c:22:25:32:fe:67:39:01:93:e1:3e: 0d:ef:3a:bd:17:54:0a:a9:94:4c:e5:60:6d:c3:fd: de:ad:45:75:64:0f:97:73:90:25:a2:c9:db:7f:48: 7a:a9:d6:b1:ce:74:f6:06:e7:2b:4b:77:45:24:64: d5:62:00:4b:7c:1b:31:64:d2:0c:b0:3b:47:ad:8c: 67:33:ed:b9:5b:d3:be:51:0f:17:4b:be:b8:2b:ab: 2b:6d:d0:3b:6e:f1:93:9b:d3:17:9e:2b:fa:b2:46: 1e:bc:d9:a0:87:78:b6:45:67:e7:63:20:0d:69:17: 22:6e:89:48:63:8d:0c:03:de:7c:57:b7:8d:2c:7e: 0c:8f:76:bd:fc:b9:26:32:bc:70:41:e6:a1:56:c9: e6:e7:ad:07:43:3d:3f:16:a6:fa:95:d4:ec:3f:f2: 6e:9f:6b:ef:87:79:41:1c:38:c3:48:38:84:35:f3: e6:a1:83:3a:61:7a:ad:21:7e:7b:98:c7:6a:96:56: 34:d8:87:be:c6:e1:96:58:22:84:71:12:bc:5a:5b: 0c:ae:82:a4:a5:e6:45:f9:7d:a1:96:82:92:b8:d5: 6e:26:fa:e5:c5:6f:bc:42:43:07:6c:de:63:25:08: c6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.64.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:a5:b6:dd:04:38:d9:ef:a0:97:24:38:f2:53:4b:2e:b8:d3: 7c:97:cc:49:52:d0:19:25:29:ad:a6:6f:b9:f9:2c:5f:4d:c0: 14:90:f7:b3:9d:54:21:c2:e6:3b:77:31:02:be:90:59:4e:e5: cb:1c:65:cd:ce:7e:c2:f8:b2:5a:c8:8f:ba:19:20:7e:45:c3: 33:9c:56:27:c3:3e:16:fa:58:92:f7:17:00:20:68:08:44:77: ea:74:6f:65:b8:9c:2c:de:c9:7a:0f:a0:be:1e:c9:88:e4:97: e8:e9:24:10:91:81:46:e3:5b:2d:57:9c:0f:66:1d:cf:17:72: 43:72:db:e8:5f:88:54:69:bf:3d:f6:aa:20:7f:d7:0f:db:b8: 0c:d4:ef:67:8b:5f:0f:ee:fb:4b:66:e2:6c:af:ee:8f:91:af: 51:55:25:03:9e:64:6c:e9:52:69:58:8c:86:1c:e5:8e:66:59: 22:48:75:0d:5a:1b:e8:10:30:fb:96:06:a1:a0:37:3f:47:93: c4:d0:df:03:db:c7:5c:13:76:6e:bd:97:7d:fa:b7:cf:11:56: 8d:06:e0:f2:58:c9:2c:e5:fc:5a:36:6b:d1:11:67:33:82:44: 17:c9:10:4a:c2:d9:fe:8e:ff:5f:7e:61:33:92:f2:41:5b:13: 96:46:66:79 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUOh7AISC5MVrV6ymPNCEh4pvw9KkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDcxMzIzMzgyNFoX DTI1MDcxMjIzNDMyNFowMzExMC8GA1UEAxMoQzQ2MzIyOTlFMDE2RDI2OTE2NEZB NDBBRUY5OUNDODYwMkUyQjdDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOo2fhOiFKCKg58OKJnI4ssiSXwiJTL+ZzkBk+E+De86vRdUCqmUTOVgbcP9 3q1FdWQPl3OQJaLJ239IeqnWsc509gbnK0t3RSRk1WIAS3wbMWTSDLA7R62MZzPt uVvTvlEPF0u+uCurK23QO27xk5vTF54r+rJGHrzZoId4tkVn52MgDWkXIm6JSGON DAPefFe3jSx+DI92vfy5JjK8cEHmoVbJ5uetB0M9Pxam+pXU7D/ybp9r74d5QRw4 w0g4hDXz5qGDOmF6rSF+e5jHapZWNNiHvsbhllgihHESvFpbDK6CpKXmRfl9oZaC krjVbib65cVvvEJDB2zeYyUIxqcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMRjIpngFtJpFk+kCu+ZzIYC4rfBMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ZTRhYmEwYS0xYzJjLTRmOGEtYTRiNC1lYTcyZDliMmE2MGEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVlNGFiYTBh LTFjMmMtNGY4YS1hNGI0LWVhNzJkOWIyYTYwYS8wL0M0NjMyMjk5RTAxNkQyNjkx NjRGQTQwQUVGOTlDQzg2MDJFMkI3QzEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFkAwDQYJKoZIhvcNAQELBQADggEBAH2ltt0EONnvoJckOPJTSy6403yXzElS 0BklKa2mb7n5LF9NwBSQ97OdVCHC5jt3MQK+kFlO5cscZc3OfsL4slrIj7oZIH5F wzOcVifDPhb6WJL3FwAgaAhEd+p0b2W4nCzeyXoPoL4eyYjkl+jpJBCRgUbjWy1X nA9mHc8XckNy2+hfiFRpvz32qiB/1w/buAzU72eLXw/u+0tm4myv7o+Rr1FVJQOe ZGzpUmlYjIYc5Y5mWSJIdQ1aG+gQMPuWBqGgNz9Hk8TQ3wPbx1wTdm69l336t88R Vo0G4PJYySzl/Fo2a9ERZzOCRBfJEErC2f6O/19+YTOS8kFbE5ZGZnk= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org