$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer File: F2E8B493535CE192E2A343E44990C2B86B854E0F.cer (raw, json) Hash identifier: ItLBJr/Re9uWmf3i4Lj29SSXqNiuE8G2JnI4+kiFQDk= Subject key identifier: F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 7A2FB467CB1E85D7A197A43B7D21E4D06EEEDE9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft caRepository: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 08 Jul 2024 03:01:09 +0000 Certificate not after: Mon 07 Jul 2025 03:06:09 +0000 Subordinate resources: IP: 160.19.89.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:2f:b4:67:cb:1e:85:d7:a1:97:a4:3b:7d:21:e4:d0:6e:ee:de:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 8 03:01:09 2024 GMT Not After : Jul 7 03:06:09 2025 GMT Subject: CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:73:17:3c:39:d3:09:fd:9d:18:64:28:e0: ee:0c:83:d6:80:ed:c7:d4:09:5f:4f:a9:5b:0e:77: 61:da:a4:32:67:cd:03:3c:7b:8b:af:1e:5e:ce:b9: 01:65:1d:11:62:f8:17:9c:f3:15:c2:7c:29:c2:8b: 35:23:8a:9b:83:ee:d0:07:8a:3f:47:a7:bc:ad:a2: c7:d1:ef:c8:25:67:26:77:9b:e4:5c:ed:4d:7f:4c: ca:7c:54:98:ea:9d:3d:b8:8e:53:00:5b:c4:b5:58: f6:a3:ea:5a:1a:ca:a4:be:57:10:d2:41:82:6a:f8: 06:f3:fa:b7:ae:8e:26:07:ae:49:9d:7c:33:60:3b: a0:dc:cb:d8:98:02:c4:47:e5:90:c3:ce:b5:57:29: 0e:f8:55:b3:18:68:65:54:10:7b:fc:fb:3b:75:c3: 24:77:ab:ec:8f:9b:65:85:db:a0:51:b8:0f:ad:2b: c4:16:4e:4d:b8:92:bc:21:e9:42:a8:cc:5a:84:bb: 2d:c2:f8:15:7c:a2:da:47:91:37:ef:e1:68:5b:b0: 81:79:72:cf:2a:6b:33:74:7f:9f:48:b7:92:0c:a9: 76:0c:82:f3:b8:99:66:23:ff:83:e0:74:60:96:08: 91:6f:98:96:ee:13:a1:11:47:f9:9c:43:d6:59:77: b4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.89.0/24 Signature Algorithm: sha256WithRSAEncryption 61:88:7f:4d:d9:34:ce:7c:ad:d8:ed:bb:9a:5b:72:f5:08:15: 3f:5f:3e:80:26:fa:10:44:a0:37:b3:a3:7e:fa:44:b7:2b:8d: 27:46:60:88:66:a4:27:85:4e:8e:c0:52:6a:c7:81:5e:3a:37: 39:50:0a:8d:5d:3f:d1:c9:19:8c:d0:58:c1:ab:91:aa:78:be: dc:ed:bf:0d:d0:e2:2d:dc:c8:8b:67:a1:4c:09:3e:39:cd:65: 39:ed:19:8d:90:82:4f:47:bc:b1:f9:17:45:94:d3:ed:e0:47: f3:86:0a:e1:55:f4:9a:16:90:8b:d2:4f:84:4c:76:83:a1:aa: 5f:86:7f:4d:eb:a6:7f:29:c7:8f:7e:5f:83:7c:8c:cf:09:1f: 68:23:65:43:ad:c9:43:73:69:5c:59:e3:0f:b6:bc:ce:b0:25: c6:96:d8:7c:35:48:35:fa:00:5a:f5:a5:3e:32:00:da:2b:33: 02:fc:9c:e9:1f:ba:ec:f8:79:a7:a5:3e:06:b3:fd:4a:20:5d: c5:a5:c0:b5:59:07:71:97:08:ec:4a:24:b2:1d:a6:99:d8:bf: 97:c4:7d:38:bd:17:44:87:9d:34:c5:89:21:b4:b5:ed:13:5f: 2f:18:0a:ed:04:b6:77:e7:85:93:1e:bc:c5:d7:d9:53:19:73: 32:22:25:e5 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUei+0Z8sehdehl6Q7fSHk0G7u3p4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDcwODAzMDEwOVoX DTI1MDcwNzAzMDYwOVowMzExMC8GA1UEAxMoRjJFOEI0OTM1MzVDRTE5MkUyQTM0 M0U0NDk5MEMyQjg2Qjg1NEUwRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALKNcxc8OdMJ/Z0YZCjg7gyD1oDtx9QJX0+pWw53YdqkMmfNAzx7i68eXs65 AWUdEWL4F5zzFcJ8KcKLNSOKm4Pu0AeKP0envK2ix9HvyCVnJneb5FztTX9MynxU mOqdPbiOUwBbxLVY9qPqWhrKpL5XENJBgmr4BvP6t66OJgeuSZ18M2A7oNzL2JgC xEflkMPOtVcpDvhVsxhoZVQQe/z7O3XDJHer7I+bZYXboFG4D60rxBZOTbiSvCHp QqjMWoS7LcL4FXyi2keRN+/haFuwgXlyzyprM3R/n0i3kgypdgyC87iZZiP/g+B0 YJYIkW+Ylu4ToRFH+ZxD1ll3tJ8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPLotJNTXOGS4qND5EmQwrhrhU4PMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZGMxMDA3ZC1mZDYxLTQ1NDMtOGY1Zi0zZmRmZmE0YjAxZTYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RkYzEwMDdk LWZkNjEtNDU0My04ZjVmLTNmZGZmYTRiMDFlNi8wL0YyRThCNDkzNTM1Q0UxOTJF MkEzNDNFNDQ5OTBDMkI4NkI4NTRFMEYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgE1kwDQYJKoZIhvcNAQELBQADggEBAGGIf03ZNM58rdjtu5pbcvUIFT9fPoAm +hBEoDezo376RLcrjSdGYIhmpCeFTo7AUmrHgV46NzlQCo1dP9HJGYzQWMGrkap4 vtztvw3Q4i3cyItnoUwJPjnNZTntGY2Qgk9HvLH5F0WU0+3gR/OGCuFV9JoWkIvS T4RMdoOhql+Gf03rpn8px49+X4N8jM8JH2gjZUOtyUNzaVxZ4w+2vM6wJcaW2Hw1 SDX6AFr1pT4yANorMwL8nOkfuuz4eaelPgaz/UogXcWlwLVZB3GXCOxKJLIdppnY v5fEfTi9F0SHnTTFiSG0te0TXy8YCu0EtnfnhZMevMXX2VMZczIiJeU= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org