$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer File: E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer (raw, json) Hash identifier: boJTThXFjAQwlSTAGUYFUpVVRePtSSORDih05DV3124= Subject key identifier: E9:C6:90:C5:1E:9B:F1:B5:97:83:32:FD:5B:A9:4A:85:01:92:F5:4C Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 58970D540129659E63ABF9159FA91693B47D2F9D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft caRepository: rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 25 Jul 2024 09:28:50 +0000 Certificate not after: Thu 24 Jul 2025 09:33:50 +0000 Subordinate resources: IP: 160.25.242.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:97:0d:54:01:29:65:9e:63:ab:f9:15:9f:a9:16:93:b4:7d:2f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 25 09:28:50 2024 GMT Not After : Jul 24 09:33:50 2025 GMT Subject: CN=E9C690C51E9BF1B5978332FD5BA94A850192F54C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c3:b7:3a:d6:58:d0:95:56:f4:f4:40:11:35: e0:34:48:a3:9e:aa:75:81:09:67:da:f5:7c:06:4e: 7b:52:7d:04:12:d1:4f:e6:e3:ab:d9:d0:a7:0a:b4: ef:bc:14:12:16:17:b7:e6:6e:ad:d7:fa:88:10:20: 69:70:c4:48:a1:b6:57:cb:e5:6d:6e:ef:10:f7:77: 0e:d4:0d:84:48:0d:2d:3c:03:12:31:b5:65:18:52: 77:b4:05:2c:0f:e7:8f:a2:62:c0:a8:58:f3:96:1e: 0d:27:ba:3b:62:91:b0:92:26:c0:10:39:0c:fb:bc: 49:33:b8:d5:02:75:1c:e5:8e:08:03:c4:37:8e:12: 6f:37:cf:26:14:6d:2c:8f:74:36:62:3f:49:b3:e6: 7a:8a:0b:e7:a2:93:a3:71:36:e4:70:77:98:91:09: 6f:e3:4c:18:ef:77:f3:0d:72:92:49:c1:15:1c:7f: d2:b6:30:dc:3d:6d:e5:ff:1b:27:72:f6:f6:aa:f0: 07:e5:76:0d:a4:5c:f9:eb:a6:69:d9:52:c9:61:dd: 17:da:31:0f:8a:dd:ab:59:5d:07:0c:60:c3:88:a3: 26:3f:91:35:b3:c0:bd:2b:16:64:96:2a:27:c4:b9: cb:7e:d7:0f:84:24:8b:89:3d:8c:ca:03:a1:8f:a4: 96:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:C6:90:C5:1E:9B:F1:B5:97:83:32:FD:5B:A9:4A:85:01:92:F5:4C X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.242.0/23 Signature Algorithm: sha256WithRSAEncryption 82:09:86:20:47:79:82:3e:4a:64:4d:07:43:df:be:fe:6c:ce: 65:d5:0c:4e:7c:08:15:3d:cd:e4:84:06:1f:16:ea:41:6f:84: 57:b9:27:65:e2:c9:1b:3d:9f:4c:c6:d1:f1:54:9e:bd:e0:62: cf:10:fd:67:64:31:fa:c3:b8:68:2d:09:d7:78:0d:fd:d5:64: 51:03:16:e0:20:ed:c0:41:52:a0:d8:c8:03:e8:78:5d:57:f8: 04:5c:bd:38:52:b0:d6:b0:a8:8e:93:ec:71:64:9c:51:47:f3: fe:6e:e4:77:37:c8:d6:ea:3d:52:44:54:34:34:a9:b3:c9:a6: d7:c8:d9:a0:b0:ee:29:f6:3e:dd:bd:3d:bd:3c:44:34:3f:14: 4e:4f:23:bb:ca:2b:cd:25:b5:10:1f:78:de:45:19:bc:6e:86: 25:48:68:6d:29:25:73:48:19:5e:37:89:96:de:ab:b3:9a:46: 94:95:66:25:cd:63:2e:d5:0b:49:47:ad:94:04:8a:c7:e0:68: 46:cd:d7:b5:6b:36:3c:56:64:3e:61:8f:c7:36:d0:05:8c:8d: d8:88:32:be:0a:5e:f5:9c:0e:18:d5:fc:19:45:53:88:9b:83: e8:8c:1a:fd:6b:98:a3:26:c0:c8:20:bd:d4:2e:72:0e:81:8e: 20:c5:79:35 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUWJcNVAEpZZ5jq/kVn6kWk7R9L50wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDcyNTA5Mjg1MFoX DTI1MDcyNDA5MzM1MFowMzExMC8GA1UEAxMoRTlDNjkwQzUxRTlCRjFCNTk3ODMz MkZENUJBOTRBODUwMTkyRjU0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMHDtzrWWNCVVvT0QBE14DRIo56qdYEJZ9r1fAZOe1J9BBLRT+bjq9nQpwq0 77wUEhYXt+Zurdf6iBAgaXDESKG2V8vlbW7vEPd3DtQNhEgNLTwDEjG1ZRhSd7QF LA/nj6JiwKhY85YeDSe6O2KRsJImwBA5DPu8STO41QJ1HOWOCAPEN44SbzfPJhRt LI90NmI/SbPmeooL56KTo3E25HB3mJEJb+NMGO938w1ykknBFRx/0rYw3D1t5f8b J3L29qrwB+V2DaRc+eumadlSyWHdF9oxD4rdq1ldBwxgw4ijJj+RNbPAvSsWZJYq J8S5y37XD4Qki4k9jMoDoY+klpsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOnGkMUem/G1l4My/VupSoUBkvVMMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81MDUzODhmNC0xMDdiLTQ0YTktOWQ4Zi0xNjAzZmVjZmRlZTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUwNTM4OGY0 LTEwN2ItNDRhOS05ZDhmLTE2MDNmZWNmZGVlOS8wL0U5QzY5MEM1MUU5QkYxQjU5 NzgzMzJGRDVCQTk0QTg1MDE5MkY1NEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgGfIwDQYJKoZIhvcNAQELBQADggEBAIIJhiBHeYI+SmRNB0Pfvv5szmXVDE58 CBU9zeSEBh8W6kFvhFe5J2XiyRs9n0zG0fFUnr3gYs8Q/WdkMfrDuGgtCdd4Df3V ZFEDFuAg7cBBUqDYyAPoeF1X+ARcvThSsNawqI6T7HFknFFH8/5u5Hc3yNbqPVJE VDQ0qbPJptfI2aCw7in2Pt29Pb08RDQ/FE5PI7vKK80ltRAfeN5FGbxuhiVIaG0p JXNIGV43iZbeq7OaRpSVZiXNYy7VC0lHrZQEisfgaEbN17VrNjxWZD5hj8c20AWM jdiIMr4KXvWcDhjV/BlFU4ibg+iMGv1rmKMmwMggvdQucg6BjiDFeTU= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org