$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer File: DC0680824B7F80117B62C239676444B0691128B8.cer (raw, json) Hash identifier: +FigwLdzbO16IYTbYS8WQdmbbp5d2m64wfBNheuAVx4= Subject key identifier: DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 2227F497604D2FC927F1CCA119001CBDD017F008 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft caRepository: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 20 Nov 2024 03:24:56 +0000 Certificate not after: Wed 19 Nov 2025 03:29:56 +0000 Subordinate resources: IP: 160.191.106.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:27:f4:97:60:4d:2f:c9:27:f1:cc:a1:19:00:1c:bd:d0:17:f0:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 20 03:24:56 2024 GMT Not After : Nov 19 03:29:56 2025 GMT Subject: CN=DC0680824B7F80117B62C239676444B0691128B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:65:ed:24:7f:f8:21:4b:34:57:b4:f4:eb:1e: 16:9b:c9:74:74:7e:18:7e:c0:86:28:ca:43:26:5d: 2d:ec:63:d1:2f:3f:e8:69:41:d7:55:cd:a8:4c:93: 56:9a:e9:52:be:a6:98:44:ca:96:12:2a:db:76:bb: 5c:80:44:39:33:48:2e:05:52:07:d7:85:1a:35:fd: c4:70:c4:a0:4f:41:6e:9c:e1:6f:d3:06:83:7b:ee: a1:ba:f5:6c:34:cc:6a:99:cb:71:0b:03:c4:70:7c: d4:50:81:b7:51:7f:09:b7:1a:6f:94:ad:0b:87:dd: 46:95:39:c3:c8:e5:41:7f:2e:9b:b3:23:92:73:1d: c3:a8:55:0c:9f:9a:26:f3:52:cd:d0:a6:7a:9b:31: c1:79:b1:39:e0:2e:d8:a2:64:17:71:a1:11:5c:86: 6b:9c:05:88:0e:5c:89:32:02:e8:e5:ef:ce:f6:e2: a5:d3:b0:e6:b2:c7:bb:27:c9:09:0f:b4:b9:20:2e: e3:c6:18:83:e3:8a:64:a4:7f:70:75:3c:d4:b5:07: 63:b8:36:be:43:3a:75:c1:8e:62:f1:54:d9:e2:d5: 3d:6d:54:f1:43:d3:de:f6:9f:a7:7a:47:6f:42:c1: 51:16:bc:75:0a:c7:df:a1:63:a2:fc:89:b7:ec:34: 4d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.106.0/23 Signature Algorithm: sha256WithRSAEncryption 46:0e:1a:62:f3:e3:96:d9:c2:8e:fd:41:40:83:a4:ca:d2:ae: f9:0b:9f:b7:da:ac:5e:48:10:f2:04:87:42:ec:d8:22:8c:f1: 94:42:d9:ed:12:4b:5a:bc:9d:73:ed:d6:92:d0:59:0f:6b:6b: 13:27:48:eb:de:b8:66:6f:3b:0e:ca:bd:c5:c2:53:3d:e5:ca: c5:ce:78:5c:71:b0:32:8a:ec:7c:83:13:18:64:3a:a5:63:2c: ff:12:a2:8d:1e:ca:ac:65:0f:26:d6:1f:9d:25:ed:e3:02:34: 4e:63:f2:49:fc:34:6f:fb:50:aa:34:29:e8:4a:38:b1:f5:66: 3b:bd:f5:21:a8:61:10:ab:43:39:44:1d:61:f6:65:44:1e:24: 8b:fb:a9:58:74:0c:ff:d3:ac:77:a2:52:66:f3:20:68:d4:86: 8c:0c:04:26:7d:4d:da:49:3d:94:bd:88:82:5b:0b:f9:b3:7d: b0:af:26:2f:66:fb:5e:e6:92:d8:43:6e:d3:3b:c1:36:84:92: c9:1d:e7:47:d7:15:3b:8c:3b:f2:c2:c2:ae:0c:54:25:ee:d6: 5f:ee:3e:01:ee:04:ce:63:e5:6d:19:74:ab:63:bc:5f:b0:82: 70:3a:4e:ed:b8:77:c0:05:a7:a2:a4:9f:03:3c:ba:bf:c3:10: 0a:88:43:16 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUIif0l2BNL8kn8cyhGQAcvdAX8AgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTEyMDAzMjQ1NloX DTI1MTExOTAzMjk1NlowMzExMC8GA1UEAxMoREMwNjgwODI0QjdGODAxMTdCNjJD MjM5Njc2NDQ0QjA2OTExMjhCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN1l7SR/+CFLNFe09OseFpvJdHR+GH7AhijKQyZdLexj0S8/6GlB11XNqEyT VprpUr6mmETKlhIq23a7XIBEOTNILgVSB9eFGjX9xHDEoE9Bbpzhb9MGg3vuobr1 bDTMapnLcQsDxHB81FCBt1F/Cbcab5StC4fdRpU5w8jlQX8um7MjknMdw6hVDJ+a JvNSzdCmepsxwXmxOeAu2KJkF3GhEVyGa5wFiA5ciTIC6OXvzvbipdOw5rLHuyfJ CQ+0uSAu48YYg+OKZKR/cHU81LUHY7g2vkM6dcGOYvFU2eLVPW1U8UPT3vafp3pH b0LBURa8dQrH36FjovyJt+w0TWUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNwGgIJLf4ARe2LCOWdkRLBpESi4MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlODU1ZThh LTNmZjgtNDdmZi1hYWVjLTQ4ZDhiMzgwYTkwNC8wL0RDMDY4MDgyNEI3RjgwMTE3 QjYyQzIzOTY3NjQ0NEIwNjkxMTI4QjgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgv2owDQYJKoZIhvcNAQELBQADggEBAEYOGmLz45bZwo79QUCDpMrSrvkLn7fa rF5IEPIEh0Ls2CKM8ZRC2e0SS1q8nXPt1pLQWQ9raxMnSOveuGZvOw7KvcXCUz3l ysXOeFxxsDKK7HyDExhkOqVjLP8Soo0eyqxlDybWH50l7eMCNE5j8kn8NG/7UKo0 KehKOLH1Zju99SGoYRCrQzlEHWH2ZUQeJIv7qVh0DP/TrHeiUmbzIGjUhowMBCZ9 TdpJPZS9iIJbC/mzfbCvJi9m+17mkthDbtM7wTaEkskd50fXFTuMO/LCwq4MVCXu 1l/uPgHuBM5j5W0ZdKtjvF+wgnA6Tu24d8AFp6KknwM8ur/DEAqIQxY= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org