$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer File: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer (raw, json) Hash identifier: nmHCQunJ/rWFCsd1mrbXq7wq2xiHDufgbVA+Kd2GVFg= Subject key identifier: F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 25A62D47DB0A2A2C68532884BBCF0605B202406A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft caRepository: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 30 Aug 2024 03:09:02 +0000 Certificate not after: Fri 29 Aug 2025 03:14:02 +0000 Subordinate resources: IP: 160.19.110.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a6:2d:47:db:0a:2a:2c:68:53:28:84:bb:cf:06:05:b2:02:40:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 30 03:09:02 2024 GMT Not After : Aug 29 03:14:02 2025 GMT Subject: CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ae:6d:45:7e:e4:07:c5:eb:db:67:ca:be:f0: ea:4e:95:61:58:51:d5:04:23:36:4f:32:33:45:ee: a1:33:bf:0a:2c:a4:e3:d0:57:a4:40:d6:f1:59:3f: ed:2e:35:9d:40:ba:4e:e6:ff:b7:4c:82:b7:a8:b3: ea:9d:23:f5:28:92:d7:1c:53:8c:c5:36:1e:c8:66: 89:1a:d2:59:b7:f5:ec:07:81:9c:00:69:99:34:e2: 5f:ee:30:09:11:85:ca:d1:73:25:00:e5:3a:65:59: 89:d2:87:c2:31:90:1b:42:89:38:b4:26:fb:78:db: 4c:c9:ab:d5:b3:c5:f4:56:23:99:54:e1:dc:00:56: dc:e0:ac:02:25:7f:dc:e2:b5:05:8a:c6:de:3f:9e: 0e:ae:cc:2b:a8:6e:f7:54:ee:8e:7c:83:e8:37:29: 54:64:9c:ef:65:90:ef:b8:cb:b6:51:1f:7e:ba:45: 0f:40:55:5a:c8:54:f6:46:17:c6:c0:d9:ed:16:ce: 16:47:5d:2a:96:64:34:f6:1b:19:c9:62:02:02:f6: 2a:f4:23:9d:37:69:c9:18:82:ff:b9:a4:40:68:3d: 91:af:b6:86:ca:c2:dc:5a:6a:b7:fc:aa:8d:82:55: e2:c5:7e:7c:b1:0b:77:c6:88:77:47:30:c2:56:0a: 89:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.110.0/23 Signature Algorithm: sha256WithRSAEncryption 64:f5:2d:d6:db:b9:0b:cc:80:5e:53:70:bb:84:ae:6c:57:d8: f9:be:ac:d5:cb:5c:43:21:f7:0c:f4:43:b1:fe:38:28:25:1f: 31:bd:f9:df:68:68:ce:4e:bf:dd:07:ec:3a:78:65:89:18:21: 98:85:3a:7d:0c:59:61:76:36:45:cd:09:39:75:74:5e:0a:c8: 60:69:f1:db:91:ce:e6:9c:4c:4e:c9:ab:c1:6c:ad:12:1e:52: ac:98:27:84:36:85:29:7a:09:f7:68:1c:3d:76:64:03:8e:13: 5a:e7:45:28:74:70:8a:04:4a:79:a0:e0:be:13:a3:26:54:fa: 6e:49:a4:da:a2:7a:8b:25:b8:23:cc:0f:fd:9a:91:73:7a:d8: 00:5b:89:72:f0:1a:b7:75:eb:d7:0a:39:2c:18:8b:87:6e:ed: 10:f2:ce:45:67:ca:35:96:04:ae:18:ed:8c:0e:37:28:aa:b5: bb:b5:2d:87:b5:d9:8d:40:18:f9:08:f3:11:41:bd:f4:10:b5: 2d:60:35:f6:50:a8:1c:ac:91:4d:e3:d9:60:58:83:41:ff:a3: ac:fc:03:63:71:c6:90:3b:7f:e2:9c:8b:b6:11:76:47:6c:cb: 9d:40:40:c2:4a:be:00:e2:a8:d0:e7:e2:7c:32:18:b6:54:f2: e8:2b:b1:cb -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJaYtR9sKKixoUyiEu88GBbICQGowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDgzMDAzMDkwMloX DTI1MDgyOTAzMTQwMlowMzExMC8GA1UEAxMoRjNDNDUwNzE2OTdBQjY4RkRFQUVC RjU4MjBFNzBEREQxQjQ5NEI1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALKubUV+5AfF69tnyr7w6k6VYVhR1QQjNk8yM0XuoTO/Ciyk49BXpEDW8Vk/ 7S41nUC6Tub/t0yCt6iz6p0j9SiS1xxTjMU2HshmiRrSWbf17AeBnABpmTTiX+4w CRGFytFzJQDlOmVZidKHwjGQG0KJOLQm+3jbTMmr1bPF9FYjmVTh3ABW3OCsAiV/ 3OK1BYrG3j+eDq7MK6hu91TujnyD6DcpVGSc72WQ77jLtlEffrpFD0BVWshU9kYX xsDZ7RbOFkddKpZkNPYbGcliAgL2KvQjnTdpyRiC/7mkQGg9ka+2hsrC3Fpqt/yq jYJV4sV+fLELd8aId0cwwlYKibUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPPEUHFperaP3q6/WCDnDd0bSUtYMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ZDliMzUxOS0zZGYzLTQ0MDYtODI4Zi0zZWJiOTFkOTI5NDQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRkOWIzNTE5 LTNkZjMtNDQwNi04MjhmLTNlYmI5MWQ5Mjk0NC8wL0YzQzQ1MDcxNjk3QUI2OEZE RUFFQkY1ODIwRTcwREREMUI0OTRCNTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgE24wDQYJKoZIhvcNAQELBQADggEBAGT1LdbbuQvMgF5TcLuErmxX2Pm+rNXL XEMh9wz0Q7H+OCglHzG9+d9oaM5Ov90H7Dp4ZYkYIZiFOn0MWWF2NkXNCTl1dF4K yGBp8duRzuacTE7Jq8FsrRIeUqyYJ4Q2hSl6CfdoHD12ZAOOE1rnRSh0cIoESnmg 4L4ToyZU+m5JpNqieosluCPMD/2akXN62ABbiXLwGrd169cKOSwYi4du7RDyzkVn yjWWBK4Y7YwONyiqtbu1LYe12Y1AGPkI8xFBvfQQtS1gNfZQqByskU3j2WBYg0H/ o6z8A2NxxpA7f+Kci7YRdkdsy51AQMJKvgDiqNDn4nwyGLZU8ugrscs= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org