$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer File: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer (raw, json) Hash identifier: bP6lqA6xSb958VhrIMwiN9pkEmVaSa7zrcJjAwxzfNc= Subject key identifier: FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1964FB889A4FEF743E8295B621400785AC0C92CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft caRepository: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 09 Sep 2024 06:52:38 +0000 Certificate not after: Mon 08 Sep 2025 06:57:38 +0000 Subordinate resources: IP: 160.25.250.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:64:fb:88:9a:4f:ef:74:3e:82:95:b6:21:40:07:85:ac:0c:92:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Sep 9 06:52:38 2024 GMT Not After : Sep 8 06:57:38 2025 GMT Subject: CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:73:3c:c9:9d:49:07:42:36:e9:d6:b2:85:ec: 2e:17:55:65:79:74:6f:48:9a:eb:89:ac:f5:f1:bb: 0b:28:7f:4f:89:d8:3d:3d:28:72:e5:96:ee:f7:9c: 88:66:dd:a2:40:78:56:98:f7:bf:ae:1c:e1:b0:51: fc:eb:86:5f:07:39:f2:40:9b:4d:0d:39:73:60:39: aa:27:cd:7c:c3:20:5a:77:e3:2e:36:6c:f9:dc:21: 63:ae:79:bd:30:62:19:11:9b:ca:15:5c:b0:32:27: 59:f6:d4:f4:9e:e6:2d:6c:78:69:be:9e:0e:ce:c5: a3:2a:86:de:8a:3e:96:ac:9b:22:b8:55:39:a6:c9: 14:a0:48:79:ae:0f:09:fe:db:f1:d5:bd:14:5d:49: 0c:3d:14:e7:4b:70:ea:08:18:b9:80:d0:64:75:1d: 67:49:3e:2b:22:d7:5e:3c:7c:70:77:cc:68:cc:9f: de:4a:5e:90:b0:e4:37:25:9b:b0:25:bc:79:56:cb: f3:10:90:10:c6:1d:28:26:83:51:28:0a:e2:9e:06: c2:4a:3b:9c:24:43:09:34:a9:97:58:1b:47:37:75: 4c:a3:f5:6c:7f:b1:a0:4c:3f:89:44:10:40:80:83: 82:be:fd:06:c4:e8:12:c0:30:78:fd:25:f0:fe:74: 96:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.250.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:4c:14:c3:d2:fa:18:b4:5f:3f:38:bb:e6:75:9b:14:21:8e: 8a:8a:94:9e:26:71:09:98:21:02:97:f9:f5:27:da:ba:4f:b3: 41:8e:4a:d3:e8:b0:01:a4:22:65:05:d6:12:99:87:23:84:62: 50:21:ae:f8:c6:3d:b3:30:8a:32:75:45:75:0d:f8:93:c6:ce: 16:eb:0e:f3:c8:d3:94:10:4a:06:5f:f9:d5:ef:25:14:2f:7f: fc:d8:ae:0e:50:60:7f:a9:f6:d7:db:13:c6:32:25:50:90:fc: 22:0d:48:64:29:5f:ef:86:ba:28:1d:e3:80:55:c9:58:3a:f9: 5b:b2:37:8d:18:07:4c:d3:d1:fd:c9:b1:1a:db:8d:5f:bb:27: ca:d9:e7:d8:2b:83:b6:4c:d9:9a:5d:34:e7:67:dc:be:a7:e7: 89:e0:5f:f2:99:34:61:ab:f2:6b:0f:09:70:b1:1a:89:19:aa: e1:3d:33:ab:97:17:59:cd:a0:4e:19:81:c0:3f:03:b2:ec:89: 43:83:ed:11:fe:d9:3f:6f:a9:2e:37:29:8a:b7:6f:8e:6c:21: b0:61:e5:d7:5c:78:fd:93:b9:29:9a:ab:a4:b2:e6:12:5d:8b: 4d:32:52:21:09:8e:63:be:28:ec:e9:d4:20:a0:65:a5:1f:00: 9a:e8:ab:ce -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUGWT7iJpP73Q+gpW2IUAHhawMksowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDkwOTA2NTIzOFoX DTI1MDkwODA2NTczOFowMzExMC8GA1UEAxMoRkJDMzlBNkUxNzdGOEREN0JBNUUy NTdENDQ4OUM1NzU3NEMwN0U4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALtzPMmdSQdCNunWsoXsLhdVZXl0b0ia64ms9fG7Cyh/T4nYPT0ocuWW7vec iGbdokB4Vpj3v64c4bBR/OuGXwc58kCbTQ05c2A5qifNfMMgWnfjLjZs+dwhY655 vTBiGRGbyhVcsDInWfbU9J7mLWx4ab6eDs7FoyqG3oo+lqybIrhVOabJFKBIea4P Cf7b8dW9FF1JDD0U50tw6ggYuYDQZHUdZ0k+KyLXXjx8cHfMaMyf3kpekLDkNyWb sCW8eVbL8xCQEMYdKCaDUSgK4p4Gwko7nCRDCTSpl1gbRzd1TKP1bH+xoEw/iUQQ QICDgr79BsToEsAweP0l8P50llUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPvDmm4Xf43Xul4lfUSJxXV0wH6BMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80N2FkMGEzYS0yNmI4LTQ0OWEtODhlYy1iZjAzOThlYTUzYTYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3YWQwYTNh LTI2YjgtNDQ5YS04OGVjLWJmMDM5OGVhNTNhNi8wL0ZCQzM5QTZFMTc3RjhERDdC QTVFMjU3RDQ0ODlDNTc1NzRDMDdFODEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgGfowDQYJKoZIhvcNAQELBQADggEBAC5MFMPS+hi0Xz84u+Z1mxQhjoqKlJ4m cQmYIQKX+fUn2rpPs0GOStPosAGkImUF1hKZhyOEYlAhrvjGPbMwijJ1RXUN+JPG zhbrDvPI05QQSgZf+dXvJRQvf/zYrg5QYH+p9tfbE8YyJVCQ/CINSGQpX++Guigd 44BVyVg6+VuyN40YB0zT0f3JsRrbjV+7J8rZ59grg7ZM2ZpdNOdn3L6n54ngX/KZ NGGr8msPCXCxGokZquE9M6uXF1nNoE4ZgcA/A7LsiUOD7RH+2T9vqS43KYq3b45s IbBh5ddceP2TuSmaq6Sy5hJdi00yUiEJjmO+KOzp1CCgZaUfAJroq84= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org