$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer File: 1F609817DD084C4559EEB9B06E8013157EB82DB8.cer (raw, json) Hash identifier: FVq44lAPtc0iJAwKgTZ5aNGk250hUQTb9PTGBHjKHv4= Subject key identifier: 1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 09527B09935C2474A2A352811D7C10E698027569 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft caRepository: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 25 Nov 2024 10:23:44 +0000 Certificate not after: Mon 24 Nov 2025 10:28:44 +0000 Subordinate resources: IP: 45.123.140.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:52:7b:09:93:5c:24:74:a2:a3:52:81:1d:7c:10:e6:98:02:75:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 25 10:23:44 2024 GMT Not After : Nov 24 10:28:44 2025 GMT Subject: CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d7:9b:02:50:4e:66:05:dd:90:a4:1f:07:93: d6:af:99:09:31:0c:74:ed:a5:77:8e:d5:bc:6b:ca: 0e:b6:ac:16:09:46:4c:64:52:00:9e:65:3d:25:5d: f5:37:cc:d9:ab:e6:7a:ff:22:ed:84:2c:db:d5:00: a6:72:ec:e2:c0:d2:6f:7a:a9:64:4d:18:23:88:c9: 3a:b0:c3:5a:65:69:46:66:1d:d3:e3:7c:27:55:2c: 48:8d:46:6b:97:9b:7c:cf:aa:ad:75:d7:cc:ec:1a: cd:94:54:7b:3b:04:e9:33:18:7e:68:8e:cc:e4:60: 11:16:cd:64:89:61:0f:02:40:73:be:bc:f7:05:65: 88:0e:e1:56:db:b4:a7:a7:f4:45:92:a3:7f:8f:de: 07:48:9c:67:1b:4f:42:f7:c5:b0:dd:9c:6e:2b:4a: a0:37:8c:5b:65:81:55:3c:39:b8:92:b8:c4:da:78: 80:ee:e4:85:b6:5a:9e:4e:41:7e:0b:69:70:4b:4e: 47:0e:15:fe:6f:b2:db:0f:e4:8b:41:e0:1b:56:a1: c8:f4:9d:6e:b4:fa:d9:a4:d0:ab:52:0e:6a:78:3e: d8:d8:a4:f1:41:f4:6d:75:2a:6a:06:c8:c6:2f:d9: 1c:56:b1:e4:f5:b8:64:44:64:0b:75:d0:cb:82:2f: e9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.123.140.0/23 Signature Algorithm: sha256WithRSAEncryption 92:a0:d9:ef:c7:5a:88:35:83:17:66:73:c0:96:a6:40:bb:bc: 60:79:1c:5e:07:ef:a0:53:5c:ba:32:73:b8:fc:4c:85:2b:bb: 38:5c:c2:f1:d9:be:8e:27:ce:cd:dd:a1:1f:9f:6e:ab:da:7d: 10:ee:f9:d3:c9:34:82:18:8a:c7:8a:1f:42:4d:0f:fb:32:ca: 8d:14:33:d7:9a:b5:b3:b1:9f:f2:b4:e8:54:2a:d7:1f:d8:64: 01:3c:6d:58:ce:eb:36:9d:d9:32:a7:ae:fa:20:a6:bf:cc:71: 15:a5:39:73:e0:f3:0b:b3:ad:78:39:77:0a:fb:19:b7:72:94: 9b:03:50:6e:8c:44:aa:bc:c7:3e:70:0a:4b:29:af:b1:47:18: d6:01:06:cf:fb:11:2e:e2:f7:6b:c1:dc:29:a9:e7:90:09:6e: 4c:8a:c7:b9:70:df:61:3d:cc:ce:bb:c0:1a:69:4d:70:43:5b: 2c:9e:f4:f3:13:68:65:62:48:1a:33:ce:ca:8f:0b:3f:ad:b0: 67:2d:30:70:1c:ec:4a:66:e9:81:8f:3d:3e:bb:70:2b:5a:cc: aa:15:2e:c2:c2:45:90:90:68:75:1f:5d:d5:c4:7b:bc:ca:2d: 90:b7:3e:fa:3f:a5:df:47:95:ed:e6:f6:85:e3:cd:74:38:0c: 2e:85:51:9c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUCVJ7CZNcJHSio1KBHXwQ5pgCdWkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEyNTEwMjM0NFoX DTI1MTEyNDEwMjg0NFowMzExMC8GA1UEAxMoMUY2MDk4MTdERDA4NEM0NTU5RUVC OUIwNkU4MDEzMTU3RUI4MkRCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOnXmwJQTmYF3ZCkHweT1q+ZCTEMdO2ld47VvGvKDrasFglGTGRSAJ5lPSVd 9TfM2avmev8i7YQs29UApnLs4sDSb3qpZE0YI4jJOrDDWmVpRmYd0+N8J1UsSI1G a5ebfM+qrXXXzOwazZRUezsE6TMYfmiOzORgERbNZIlhDwJAc7689wVliA7hVtu0 p6f0RZKjf4/eB0icZxtPQvfFsN2cbitKoDeMW2WBVTw5uJK4xNp4gO7khbZank5B fgtpcEtORw4V/m+y2w/ki0HgG1ahyPSdbrT62aTQq1IOang+2Nik8UH0bXUqagbI xi/ZHFax5PW4ZERkC3XQy4Iv6ZcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB9gmBfdCExFWe65sG6AExV+uC24MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mZjdhN2Q5OC0yMzM4LTRkNzctOTY2Mi1mMzNlYTY4Yzg2ZjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZmN2E3ZDk4 LTIzMzgtNGQ3Ny05NjYyLWYzM2VhNjhjODZmMi8wLzFGNjA5ODE3REQwODRDNDU1 OUVFQjlCMDZFODAxMzE1N0VCODJEQjgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAEte4wwDQYJKoZIhvcNAQELBQADggEBAJKg2e/HWog1gxdmc8CWpkC7vGB5HF4H 76BTXLoyc7j8TIUruzhcwvHZvo4nzs3doR+fbqvafRDu+dPJNIIYiseKH0JND/sy yo0UM9eatbOxn/K06FQq1x/YZAE8bVjO6zad2TKnrvogpr/McRWlOXPg8wuzrXg5 dwr7GbdylJsDUG6MRKq8xz5wCkspr7FHGNYBBs/7ES7i92vB3Cmp55AJbkyKx7lw 32E9zM67wBppTXBDWyye9PMTaGViSBozzsqPCz+tsGctMHAc7Epm6YGPPT67cCta zKoVLsLCRZCQaHUfXdXEe7zKLZC3Pvo/pd9Hle3m9oXjzXQ4DC6FUZw= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:45 2024 by rpki-client on console-fra.rpki-client.org