$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer File: F69535097C181B143312D8EA1A6A52D500443902.cer (raw, json) Hash identifier: 1wNawNfhRySCjuAQVJcUMPMTiLlY95vSS4ogqWYoruc= Subject key identifier: F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 080B5FC03220B2F8F0351514311CDFC7CAC89E48 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft caRepository: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 12 Aug 2024 09:05:51 +0000 Certificate not after: Mon 11 Aug 2025 09:10:51 +0000 Subordinate resources: IP: 160.25.248.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:0b:5f:c0:32:20:b2:f8:f0:35:15:14:31:1c:df:c7:ca:c8:9e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 12 09:05:51 2024 GMT Not After : Aug 11 09:10:51 2025 GMT Subject: CN=F69535097C181B143312D8EA1A6A52D500443902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:74:21:1f:aa:e7:07:e5:86:0b:66:12:bf:6c: 8b:85:51:1a:49:ea:4e:45:63:49:43:3b:ed:58:1e: 36:22:95:e6:7c:d2:40:ca:10:3f:1c:cd:19:0a:8e: 75:54:cc:77:29:67:0f:3a:1a:58:f8:e3:cd:bb:48: 31:49:2d:37:c0:01:8d:6c:ee:c2:00:67:3d:44:05: be:8e:62:ba:d8:7b:4f:ab:71:fd:fb:3c:65:3e:fd: b2:f3:94:3b:0b:43:aa:12:37:6c:39:9c:35:35:3e: 4c:51:07:db:a0:55:df:75:79:ec:ad:50:01:4b:a1: 22:f5:e1:d6:c5:bf:e7:c9:20:97:fb:3f:97:b6:74: b0:ae:b6:56:cf:39:b7:cd:da:9a:19:a4:1c:f1:e2: 43:14:17:1a:e5:55:f5:85:75:80:83:be:24:8d:aa: 23:47:52:6c:75:c1:4f:11:be:4b:7b:29:24:3f:98: 2e:cb:39:0d:be:d3:16:5a:9f:11:a8:00:14:63:c5: 9d:46:a7:fb:74:61:2b:89:74:54:bf:8d:24:55:2c: 2a:74:f1:5b:a2:1e:7a:c1:13:22:20:14:e7:fc:d9: c0:b3:8a:0c:ea:89:c3:77:7f:0d:82:5a:2f:bb:db: ae:fd:e3:eb:e4:a4:80:1a:97:b8:86:5e:be:23:41: 04:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.248.0/24 Signature Algorithm: sha256WithRSAEncryption 69:b7:0d:d8:2f:59:2a:ae:cf:9c:a9:e2:08:43:1e:69:02:fb: 31:66:55:11:0b:e6:82:e3:c5:4e:8b:61:f7:ce:65:b2:e1:62: f5:1e:6b:9e:a4:e5:85:a5:ae:23:66:94:c6:e8:f5:61:cd:51: c4:db:32:79:e8:fa:2f:28:03:df:86:2b:5d:c1:c1:2f:ca:c7: 07:94:e1:e8:f5:b5:27:20:69:03:9d:cc:f8:4f:35:ab:c7:5d: 3e:60:9d:7f:28:55:c0:e5:9c:d8:e6:3b:8a:09:97:a3:9d:b8: d5:46:8f:95:1d:70:d5:a9:62:4a:6f:bc:35:7f:65:4a:59:c2: 21:28:09:5c:e9:8d:03:1a:b0:2e:d8:9d:1b:03:6a:6a:5f:4d: e1:54:c6:ae:93:ab:29:c7:26:39:d9:44:1f:6a:d0:a1:05:be: 7e:48:12:a7:bb:8b:c8:44:ff:45:0b:fe:6a:26:b4:a4:60:eb: f1:2f:ba:6a:90:9c:21:0a:da:cf:24:35:e9:cf:44:4c:f4:de: e7:c2:95:12:23:1a:72:ff:20:04:8e:3d:49:10:bc:9c:e9:74: 99:17:69:c2:27:a6:65:9f:13:54:94:31:18:8d:57:4d:d2:ac: 16:c4:d5:61:24:6f:81:51:72:e1:fd:d4:86:39:9e:2a:03:ca: 70:0b:a4:0e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUCAtfwDIgsvjwNRUUMRzfx8rInkgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDgxMjA5MDU1MVoX DTI1MDgxMTA5MTA1MVowMzExMC8GA1UEAxMoRjY5NTM1MDk3QzE4MUIxNDMzMTJE OEVBMUE2QTUyRDUwMDQ0MzkwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMd0IR+q5wflhgtmEr9si4VRGknqTkVjSUM77VgeNiKV5nzSQMoQPxzNGQqO dVTMdylnDzoaWPjjzbtIMUktN8ABjWzuwgBnPUQFvo5iuth7T6tx/fs8ZT79svOU OwtDqhI3bDmcNTU+TFEH26BV33V57K1QAUuhIvXh1sW/58kgl/s/l7Z0sK62Vs85 t83amhmkHPHiQxQXGuVV9YV1gIO+JI2qI0dSbHXBTxG+S3spJD+YLss5Db7TFlqf EagAFGPFnUan+3RhK4l0VL+NJFUsKnTxW6IeesETIiAU5/zZwLOKDOqJw3d/DYJa L7vbrv3j6+SkgBqXuIZeviNBBIsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPaVNQl8GBsUMxLY6hpqUtUARDkCMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zZTRjNTcwYS00NDc0LTRjYmYtYjhmOS1mZjk3OTE3ODE1NDkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNlNGM1NzBh LTQ0NzQtNGNiZi1iOGY5LWZmOTc5MTc4MTU0OS8wL0Y2OTUzNTA5N0MxODFCMTQz MzEyRDhFQTFBNkE1MkQ1MDA0NDM5MDIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgGfgwDQYJKoZIhvcNAQELBQADggEBAGm3DdgvWSquz5yp4ghDHmkC+zFmVREL 5oLjxU6LYffOZbLhYvUea56k5YWlriNmlMbo9WHNUcTbMnno+i8oA9+GK13BwS/K xweU4ej1tScgaQOdzPhPNavHXT5gnX8oVcDlnNjmO4oJl6OduNVGj5UdcNWpYkpv vDV/ZUpZwiEoCVzpjQMasC7YnRsDampfTeFUxq6TqynHJjnZRB9q0KEFvn5IEqe7 i8hE/0UL/momtKRg6/EvumqQnCEK2s8kNenPREz03ufClRIjGnL/IASOPUkQvJzp dJkXacInpmWfE1SUMRiNV03SrBbE1WEkb4FRcuH91IY5nioDynALpA4= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org