$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer File: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer (raw, json) Hash identifier: DbkWIHXkccjqWQAhR1LJJ+FfXiAbwm4X+qFaXhP1o4Q= Subject key identifier: 1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4817EDE2ABD9BEABFD9847D427FD16B7AD1F0062 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft caRepository: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 15 Oct 2024 04:09:09 +0000 Certificate not after: Tue 14 Oct 2025 04:14:09 +0000 Subordinate resources: IP: 2001:df4:58c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:17:ed:e2:ab:d9:be:ab:fd:98:47:d4:27:fd:16:b7:ad:1f:00:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 15 04:09:09 2024 GMT Not After : Oct 14 04:14:09 2025 GMT Subject: CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:ae:e7:68:3f:fc:b0:55:3b:84:41:54:c9: 8b:4f:f5:9c:13:08:19:11:94:10:45:2a:b2:aa:49: 07:fd:ba:15:43:20:8c:ce:1b:02:67:13:21:61:d9: 22:a2:17:6e:f3:3c:c4:18:43:bc:5f:56:03:f3:c0: d2:d8:49:8f:b6:40:ae:ab:4d:df:24:d9:55:b4:1e: 6a:54:65:9a:b4:6c:79:50:d9:59:4d:6d:7a:14:d4: 03:61:4b:c0:01:db:00:1b:c9:25:c3:2f:af:a0:74: 09:84:90:65:3a:68:0f:6c:52:b8:a2:89:1a:9d:a8: 9e:20:0d:e5:43:96:40:80:e7:c4:59:ce:20:b1:bf: 59:d5:11:15:9d:b6:5d:cb:a4:b9:71:f3:9f:c5:c8: 19:0b:c7:01:31:e6:95:e4:fe:42:3e:0e:ab:dc:6c: e6:23:b8:7b:93:a2:87:cc:24:7f:61:ea:36:8d:4d: f1:64:99:ce:6b:d2:77:da:4d:1d:ac:f1:1c:e3:5b: a2:5c:0e:77:af:a4:8d:87:37:1f:eb:c7:9c:3c:28: c5:ea:ca:01:17:91:7a:5a:62:cf:7b:d8:b4:f0:12: b5:75:46:2d:6e:0b:10:76:6a:a2:78:1b:dd:a8:c9: 4e:29:c3:74:d4:f3:a9:e4:f6:4d:de:8e:d1:df:64: 71:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:58c0::/48 Signature Algorithm: sha256WithRSAEncryption 81:ab:db:f1:57:5a:75:81:c5:94:a1:68:e5:63:13:4b:b9:71: 70:f2:3c:a9:8e:f9:3e:2a:eb:ac:3c:77:39:52:c2:6e:b6:d1: e8:fb:fb:84:ff:7a:cb:05:f3:54:c1:f7:cb:9a:7c:40:5c:04: b4:44:57:3f:e9:40:8b:38:4d:ea:b8:b7:0c:6e:ea:c5:fd:ab: 09:09:cb:f4:43:c3:c2:25:5c:88:a2:af:e3:3c:9c:a4:91:eb: 36:b2:a2:c8:c0:e3:15:94:ad:43:ce:dc:5c:27:cb:03:f8:e4: 0d:72:49:1f:95:fe:4f:db:ac:76:3b:15:c2:7e:b4:39:e4:bf: 54:d8:16:f7:51:fb:91:9a:a2:88:f6:69:29:97:be:49:72:7b: 05:8e:3f:82:ad:ca:dd:9d:f9:e9:c8:0f:95:d7:d7:b1:1e:23: c2:3f:c8:bc:6c:3d:19:b8:b1:a3:e7:86:cd:e4:2d:1d:7e:59: 11:5e:19:03:ed:11:d3:65:63:06:3c:57:3c:c9:1e:74:97:4a: b1:5c:e3:f9:cf:d9:be:c5:24:6f:ec:41:8a:2e:02:1d:ae:1d: 6e:6f:99:c4:6f:a2:cd:8b:4c:bd:70:4f:70:dc:69:9c:eb:86: c4:49:c9:2e:ae:74:17:76:44:5f:7a:5c:dd:bf:d1:ed:ad:58: f7:89:9b:9e -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUSBft4qvZvqv9mEfUJ/0Wt60fAGIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAxNTA0MDkwOVoX DTI1MTAxNDA0MTQwOVowMzExMC8GA1UEAxMoMUY1MTU5MTlDQ0MwQTkwMEZGOTcx N0UxQjdFRjExRjVBNTE4M0RGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALi9rudoP/ywVTuEQVTJi0/1nBMIGRGUEEUqsqpJB/26FUMgjM4bAmcTIWHZ IqIXbvM8xBhDvF9WA/PA0thJj7ZArqtN3yTZVbQealRlmrRseVDZWU1tehTUA2FL wAHbABvJJcMvr6B0CYSQZTpoD2xSuKKJGp2oniAN5UOWQIDnxFnOILG/WdURFZ22 XcukuXHzn8XIGQvHATHmleT+Qj4Oq9xs5iO4e5Oih8wkf2HqNo1N8WSZzmvSd9pN HazxHONbolwOd6+kjYc3H+vHnDwoxerKAReRelpiz3vYtPAStXVGLW4LEHZqongb 3ajJTinDdNTzqeT2Td6O0d9kcf8CAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB9RWRnMwKkA/5cX4bfvEfWlGD3zMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yMWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIxZDk3YjQw LWMwMzEtNGU1Yi05YjQyLWQyYWUxYzljZjk4Ny8xLzFGNTE1OTE5Q0NDMEE5MDBG Rjk3MTdFMUI3RUYxMUY1QTUxODNERjMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ30WMAwDQYJKoZIhvcNAQELBQADggEBAIGr2/FXWnWBxZShaOVjE0u5cXDy PKmO+T4q66w8dzlSwm620ej7+4T/essF81TB98uafEBcBLREVz/pQIs4Teq4twxu 6sX9qwkJy/RDw8IlXIiir+M8nKSR6zayosjA4xWUrUPO3FwnywP45A1ySR+V/k/b rHY7FcJ+tDnkv1TYFvdR+5Gaooj2aSmXvklyewWOP4Ktyt2d+enID5XX17EeI8I/ yLxsPRm4saPnhs3kLR1+WRFeGQPtEdNlYwY8VzzJHnSXSrFc4/nP2b7FJG/sQYou Ah2uHW5vmcRvos2LTL1wT3DcaZzrhsRJyS6udBd2RF96XN2/0e2tWPeJm54= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:39 2024 by rpki-client on console-ams.rpki-client.org