$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer File: C69451771D2C519C2269EA17115B3E600E9CF809.cer (raw, json) Hash identifier: ldz8ZKFfTUpajCVSM/I7uo+55D0tvPJcPSbQ9dzcczw= Subject key identifier: C6:94:51:77:1D:2C:51:9C:22:69:EA:17:11:5B:3E:60:0E:9C:F8:09 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0A823B7F19DEB5EF14FC303B89A1D6525DEE59AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft caRepository: rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 21 Sep 2024 01:29:52 +0000 Certificate not after: Sat 20 Sep 2025 01:34:52 +0000 Subordinate resources: IP: 160.25.46.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:82:3b:7f:19:de:b5:ef:14:fc:30:3b:89:a1:d6:52:5d:ee:59:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Sep 21 01:29:52 2024 GMT Not After : Sep 20 01:34:52 2025 GMT Subject: CN=C69451771D2C519C2269EA17115B3E600E9CF809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:28:d6:cb:f9:0a:2e:69:db:6b:b1:9b:86:31: 92:2f:d0:7d:c4:85:70:0f:13:0d:ba:75:65:3e:48: c1:1d:c8:0c:34:3d:2f:3b:3a:f0:65:29:b0:ed:4e: d3:90:15:cb:9f:08:19:79:0d:51:1f:72:0b:57:bc: f4:86:1f:f3:87:3c:98:61:d5:1e:fd:bf:34:d5:56: fb:7c:70:4c:ed:0b:99:f1:71:5e:be:56:a9:19:b0: 1e:b2:6f:2c:e5:64:29:95:59:cf:bb:24:e9:0c:2a: ea:13:c4:46:f5:82:9b:45:ce:d3:3c:5f:67:0b:d8: ff:35:79:e4:30:b6:d5:11:86:a2:60:c2:69:e5:ba: 8a:88:08:82:ac:ed:f5:6e:a6:45:a0:fa:3f:a4:46: f3:b5:ca:44:49:72:18:97:a9:94:35:7d:57:b7:1c: 86:d5:2e:b0:31:84:4e:bb:74:11:db:b6:fc:32:32: 69:b3:1b:22:42:be:a5:62:0c:9a:91:b4:e4:fd:05: 13:4a:66:67:7a:10:11:5d:d4:b7:28:fd:00:0c:99: e7:9a:4a:f5:1d:cd:d0:77:01:0a:0b:66:aa:51:d4: 91:77:99:b0:41:1e:ad:5b:29:40:19:41:b2:51:71: db:f4:f9:b2:8e:f1:00:1d:0d:a8:19:cb:b3:07:1c: ca:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C6:94:51:77:1D:2C:51:9C:22:69:EA:17:11:5B:3E:60:0E:9C:F8:09 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.46.0/23 Signature Algorithm: sha256WithRSAEncryption 15:40:f2:58:b7:04:70:59:e0:ec:7f:60:c7:fc:8e:13:1d:f7: 62:47:61:1e:76:c2:f5:61:8a:06:4d:ba:bb:2b:02:2a:2b:18: 38:99:ba:fd:ad:b2:c6:09:b3:e6:22:fe:a0:26:bf:bc:6d:de: 4e:5c:61:f3:83:07:bf:4a:3f:73:90:d0:aa:04:a1:5e:b8:88: c0:d5:86:4f:b2:53:18:60:2d:99:1f:3e:e1:87:f1:bd:23:f5: d9:47:27:c4:ea:7e:e4:de:d8:41:50:4e:c2:d3:2c:e9:2f:43: 2f:bf:82:61:d2:5a:a8:6a:8d:2c:dd:66:ff:2c:4e:4f:2b:ef: 67:da:38:20:5b:80:fe:d2:72:02:cc:19:f1:6a:67:1a:5a:23: a0:e6:fb:15:3b:4c:87:ea:0a:52:66:2c:bc:79:c3:1c:b8:7a: 66:14:21:93:89:52:69:2a:2e:f4:12:f6:05:2e:72:e6:7e:ff: 8d:be:80:ee:f6:3d:ec:15:59:2d:92:05:ec:ad:11:20:1d:d5: 78:a7:d2:ae:4e:78:d4:39:42:1a:58:1d:50:fc:e6:c6:09:15: 20:45:d2:bb:ca:60:df:bf:37:50:75:34:1c:0f:97:70:50:a7: af:8d:d3:0c:8f:57:78:13:b0:72:8a:c6:9c:72:3f:5f:c2:60: b0:c0:06:35 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUCoI7fxnete8U/DA7iaHWUl3uWa4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDkyMTAxMjk1MloX DTI1MDkyMDAxMzQ1MlowMzExMC8GA1UEAxMoQzY5NDUxNzcxRDJDNTE5QzIyNjlF QTE3MTE1QjNFNjAwRTlDRjgwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8o1sv5Ci5p22uxm4Yxki/QfcSFcA8TDbp1ZT5IwR3IDDQ9Lzs68GUpsO1O 05AVy58IGXkNUR9yC1e89IYf84c8mGHVHv2/NNVW+3xwTO0LmfFxXr5WqRmwHrJv LOVkKZVZz7sk6Qwq6hPERvWCm0XO0zxfZwvY/zV55DC21RGGomDCaeW6iogIgqzt 9W6mRaD6P6RG87XKRElyGJeplDV9V7cchtUusDGETrt0Edu2/DIyabMbIkK+pWIM mpG05P0FE0pmZ3oQEV3Utyj9AAyZ55pK9R3N0HcBCgtmqlHUkXeZsEEerVspQBlB slFx2/T5so7xAB0NqBnLswccyqsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMaUUXcdLFGcImnqFxFbPmAOnPgJMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lYTE0M2ExOS0yMTdhLTQ5ZWYtOGNiMS01OTMwMTJkMmI3NTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhMTQzYTE5 LTIxN2EtNDllZi04Y2IxLTU5MzAxMmQyYjc1OS8wL0M2OTQ1MTc3MUQyQzUxOUMy MjY5RUExNzExNUIzRTYwMEU5Q0Y4MDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgGS4wDQYJKoZIhvcNAQELBQADggEBABVA8li3BHBZ4Ox/YMf8jhMd92JHYR52 wvVhigZNursrAiorGDiZuv2tssYJs+Yi/qAmv7xt3k5cYfODB79KP3OQ0KoEoV64 iMDVhk+yUxhgLZkfPuGH8b0j9dlHJ8TqfuTe2EFQTsLTLOkvQy+/gmHSWqhqjSzd Zv8sTk8r72faOCBbgP7ScgLMGfFqZxpaI6Dm+xU7TIfqClJmLLx5wxy4emYUIZOJ UmkqLvQS9gUucuZ+/42+gO72PewVWS2SBeytESAd1Xin0q5OeNQ5QhpYHVD85sYJ FSBF0rvKYN+/N1B1NBwPl3BQp6+N0wyPV3gTsHKKxpxyP1/CYLDABjU= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org