$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer File: C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer (raw, json) Hash identifier: 3Hql4xxsGUsusMs8Y1s7XPP13eD/1FafnTmOAnbkLHo= Subject key identifier: C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 797067346E042897283C553E48A13A58DEDA0AEF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft caRepository: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 03 Oct 2024 04:51:09 +0000 Certificate not after: Thu 02 Oct 2025 04:56:09 +0000 Subordinate resources: IP: 157.20.238.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:70:67:34:6e:04:28:97:28:3c:55:3e:48:a1:3a:58:de:da:0a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 3 04:51:09 2024 GMT Not After : Oct 2 04:56:09 2025 GMT Subject: CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:90:72:86:a2:b4:13:b4:c6:37:20:8e:e5:62: 73:fd:73:59:e1:1b:d5:28:75:b3:fd:53:de:c3:8e: 38:4f:d7:87:8c:00:c8:5b:15:7e:0f:ee:87:b9:fc: 12:8e:7e:2a:aa:eb:b0:3a:3a:1f:4c:ba:f3:bd:01: 64:e2:24:f6:0e:fb:3d:12:53:ec:2c:25:eb:f2:16: bb:a7:9e:e0:ec:5d:2c:d5:90:ac:27:1b:76:42:6a: f5:e4:ab:4b:7c:15:0c:65:43:c1:61:b1:96:51:7a: 0b:c2:57:4e:3d:69:a1:2d:7a:66:a5:27:6f:12:f4: 83:89:c5:86:2b:12:f4:94:bf:a1:d2:8a:fc:c9:1f: 0c:e5:40:cc:43:b0:d8:02:53:3c:d1:04:96:e2:b3: 4f:6a:04:d1:2b:29:7d:77:59:a7:88:cb:9d:b5:9f: ef:ed:ee:bc:30:1e:3d:74:87:58:e8:3f:39:26:1b: 79:eb:e3:34:0b:18:af:d2:86:9c:58:0a:b1:ca:e3: 48:d8:d2:81:17:54:dd:69:0c:69:7f:e5:03:62:55: f4:5f:79:ce:68:e0:6c:a9:e8:62:ed:2c:34:b1:83: fa:67:c0:81:6c:4b:80:cd:42:35:16:43:13:e6:84: 33:9c:cf:bf:f2:b4:0c:1d:8b:64:7a:4a:ce:33:9f: fd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.238.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:98:f6:cb:e1:7a:ad:49:00:41:0b:9b:c4:6b:5b:9a:34:d1: 69:a0:20:4a:d7:71:cf:c8:81:ef:2b:e9:9d:61:5d:3d:60:0e: 0e:6a:48:77:fc:e4:ba:cd:eb:77:00:30:4b:dd:b9:bd:e3:f7: 18:a9:d7:14:20:6e:6d:9a:7b:17:69:d4:44:a2:08:23:4b:4b: 65:f4:54:8d:83:26:67:43:f4:3e:97:a7:d1:96:c2:64:f0:ce: a1:75:13:97:e5:a1:b4:c8:a5:af:a1:a5:a5:a5:0f:84:06:f6: fc:49:7b:31:37:18:f8:83:ca:2c:e5:0a:c6:64:7d:74:ab:d6: e2:36:d7:4e:4c:12:de:39:31:0f:e1:51:a9:3b:88:01:c5:81: e1:51:fe:28:e9:35:3c:ba:96:f1:89:40:01:23:f2:77:52:74: d4:4e:bf:cf:4e:ce:2c:6d:dc:69:5f:81:29:e5:3a:4b:ac:95: a1:ee:04:60:2b:da:e0:a6:eb:74:98:fe:84:01:2f:fa:06:99: b7:95:74:95:62:9b:ae:b0:91:0b:71:24:ad:51:38:3a:4f:e4: 27:e6:d6:dc:99:8c:c2:e9:0d:a0:98:7b:0e:88:01:e6:54:60: 9d:4c:4c:31:39:56:a1:e1:10:5b:45:13:f8:07:f1:e2:64:4e: 41:c5:2e:96 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUeXBnNG4EKJcoPFU+SKE6WN7aCu8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTAwMzA0NTEwOVoX DTI1MTAwMjA0NTYwOVowMzExMC8GA1UEAxMoQzc4Mzk0MjdGNDRDOEVEODlFNkMy NzIwRjE5Q0NGMjc5MjcwRkQyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANaQcoaitBO0xjcgjuVic/1zWeEb1Sh1s/1T3sOOOE/Xh4wAyFsVfg/uh7n8 Eo5+KqrrsDo6H0y6870BZOIk9g77PRJT7Cwl6/IWu6ee4OxdLNWQrCcbdkJq9eSr S3wVDGVDwWGxllF6C8JXTj1poS16ZqUnbxL0g4nFhisS9JS/odKK/MkfDOVAzEOw 2AJTPNEEluKzT2oE0SspfXdZp4jLnbWf7+3uvDAePXSHWOg/OSYbeevjNAsYr9KG nFgKscrjSNjSgRdU3WkMaX/lA2JV9F95zmjgbKnoYu0sNLGD+mfAgWxLgM1CNRZD E+aEM5zPv/K0DB2LZHpKzjOf/TUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMeDlCf0TI7YnmwnIPGczyeScP0qMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xOGQxYzQ0OS05NzhjLTQ4NDUtYjgyMy1iNTkyNWE5MDU0MjcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4ZDFjNDQ5 LTk3OGMtNDg0NS1iODIzLWI1OTI1YTkwNTQyNy8wL0M3ODM5NDI3RjQ0QzhFRDg5 RTZDMjcyMEYxOUNDRjI3OTI3MEZEMkEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFO4wDQYJKoZIhvcNAQELBQADggEBAHyY9svheq1JAEELm8RrW5o00WmgIErX cc/Ige8r6Z1hXT1gDg5qSHf85LrN63cAMEvdub3j9xip1xQgbm2aexdp1ESiCCNL S2X0VI2DJmdD9D6Xp9GWwmTwzqF1E5flobTIpa+hpaWlD4QG9vxJezE3GPiDyizl CsZkfXSr1uI2105MEt45MQ/hUak7iAHFgeFR/ijpNTy6lvGJQAEj8ndSdNROv89O zixt3GlfgSnlOkuslaHuBGAr2uCm63SY/oQBL/oGmbeVdJVim66wkQtxJK1RODpP 5Cfm1tyZjMLpDaCYew6IAeZUYJ1MTDE5VqHhEFtFE/gH8eJkTkHFLpY= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org