$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer File: 60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer (raw, json) Hash identifier: W4Uwj8vTVwRW5BqkGWvOvXRnRt8+fWdpkLEWm8YA7/w= Subject key identifier: 60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2C6E36BE464A16065583A1F483EFF5DBCEE439BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft caRepository: rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 02 Feb 2024 21:17:08 +0000 Certificate not after: Fri 31 Jan 2025 21:22:08 +0000 Subordinate resources: IP: 103.85.56.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:6e:36:be:46:4a:16:06:55:83:a1:f4:83:ef:f5:db:ce:e4:39:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 2 21:17:08 2024 GMT Not After : Jan 31 21:22:08 2025 GMT Subject: CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a6:e1:b3:f6:b3:62:e6:47:73:e9:1c:56:60: 2a:1f:3e:84:21:d9:7a:d6:b9:45:45:e4:1e:a1:d3: fb:04:06:25:ce:88:0e:4e:4f:b8:c0:c5:2f:d4:4a: 17:4e:7d:15:6b:8e:84:ce:24:e1:9f:a6:a6:ea:01: e7:34:e8:f4:d8:d3:b8:bb:87:29:45:90:2f:fc:b8: 47:5d:b5:4b:65:0b:6d:bc:58:f5:6c:91:45:e5:29: cf:e6:77:10:e7:b0:76:0f:66:8b:91:0f:73:7d:43: 2b:e3:b9:c4:5c:41:e6:a5:ce:83:c5:9e:91:a5:56: e9:5b:38:98:e9:e9:c2:d3:23:45:ee:13:1e:e7:cc: 3e:4e:3d:71:54:ff:6e:4c:fd:34:0c:49:6f:34:a4: e2:23:b0:ba:68:d9:39:1a:ec:00:18:12:da:f7:1a: 7c:f7:95:39:a3:de:72:92:dc:9c:59:6b:bf:2d:6a: 5c:f9:3e:fb:19:a9:c0:13:a8:13:16:74:55:df:89: aa:f3:2a:92:a9:55:ad:31:ba:6b:af:6f:32:dd:bb: 65:a1:c6:ec:f4:2a:e6:cd:40:88:42:83:04:09:89: 73:44:ef:22:85:6c:a1:32:2d:e8:c0:ef:c0:ac:c1: 34:b6:86:f5:2b:96:e4:27:00:32:07:44:98:e4:c9: b4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.85.56.0/23 Signature Algorithm: sha256WithRSAEncryption 71:09:c6:dd:91:c8:39:2d:a8:18:10:60:ec:a0:f4:b8:37:7f: 5f:6c:aa:ef:b1:0d:4b:78:ed:a8:79:ef:e9:e9:22:4a:87:20: 4f:a8:8f:55:0f:4d:0e:b5:6b:7b:21:b2:21:72:9e:a4:77:c9: 27:5d:e2:4a:d3:bc:d0:34:63:f8:de:24:81:82:8d:2f:73:4d: bf:4f:bc:69:18:0c:a7:d6:6c:14:0f:ae:45:4d:13:82:60:bd: 36:cd:d1:e9:5f:c8:36:6f:94:d6:34:a3:a2:b3:8f:77:bc:53: 46:7b:df:e0:2f:f6:08:56:d3:ea:12:31:a7:71:58:1e:a1:0c: 8f:3b:84:cc:1c:b5:5d:60:32:24:c4:6b:cc:16:6a:14:cf:46: 27:49:19:b5:69:da:57:bc:e0:cb:6b:09:22:93:e1:02:6d:58: d6:3a:2f:2d:f1:5a:e5:c1:1d:f5:06:ea:85:a9:06:ea:66:36: a9:94:cf:63:e3:58:40:6b:0e:3e:27:f8:9d:b8:d7:d7:8e:5b: 0c:3d:e1:94:98:51:58:aa:98:2a:b2:d6:79:93:54:0f:f0:bf: 68:4d:21:85:9e:36:9f:fa:4a:bd:50:2b:59:db:23:7f:cf:c2: 7f:d8:fd:b2:3c:9a:b8:50:d1:de:75:22:29:73:b9:c7:3b:a3: 4b:7c:ba:c3 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIULG42vkZKFgZVg6H0g+/1287kOb4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIwMjIxMTcwOFoX DTI1MDEzMTIxMjIwOFowMzExMC8GA1UEAxMoNjBCRDU0Q0ZENjdCMkZGRkIxM0I1 NDdEOUYwNkNFREY4RUIxMTk2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMym4bP2s2LmR3PpHFZgKh8+hCHZeta5RUXkHqHT+wQGJc6IDk5PuMDFL9RK F059FWuOhM4k4Z+mpuoB5zTo9NjTuLuHKUWQL/y4R121S2ULbbxY9WyRReUpz+Z3 EOewdg9mi5EPc31DK+O5xFxB5qXOg8WekaVW6Vs4mOnpwtMjRe4THufMPk49cVT/ bkz9NAxJbzSk4iOwumjZORrsABgS2vcafPeVOaPecpLcnFlrvy1qXPk++xmpwBOo ExZ0Vd+JqvMqkqlVrTG6a69vMt27ZaHG7PQq5s1AiEKDBAmJc0TvIoVsoTIt6MDv wKzBNLaG9SuW5CcAMgdEmOTJtPkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGC9VM/Wey//sTtUfZ8Gzt+OsRlqMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lYTU3NjEzYi04YjA0LTRjNDUtYmVkZi00YWIwNjFkNGRjZjkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNTc2MTNi LThiMDQtNGM0NS1iZWRmLTRhYjA2MWQ0ZGNmOS8wLzYwQkQ1NENGRDY3QjJGRkZC MTNCNTQ3RDlGMDZDRURGOEVCMTE5NkEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnVTgwDQYJKoZIhvcNAQELBQADggEBAHEJxt2RyDktqBgQYOyg9Lg3f19squ+x DUt47ah57+npIkqHIE+oj1UPTQ61a3shsiFynqR3ySdd4krTvNA0Y/jeJIGCjS9z Tb9PvGkYDKfWbBQPrkVNE4JgvTbN0elfyDZvlNY0o6Kzj3e8U0Z73+Av9ghW0+oS MadxWB6hDI87hMwctV1gMiTEa8wWahTPRidJGbVp2le84MtrCSKT4QJtWNY6Ly3x WuXBHfUG6oWpBupmNqmUz2PjWEBrDj4n+J2419eOWww94ZSYUViqmCqy1nmTVA/w v2hNIYWeNp/6Sr1QK1nbI3/Pwn/Y/bI8mrhQ0d51Iilzucc7o0t8usM= -----END CERTIFICATE-----Generated at Wed May 8 15:17:37 2024 by rpki-client on console-fra.rpki-client.org