$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer File: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer (raw, json) Hash identifier: rVtZ3z/V/j5IEiV792SpGnWaU7hSkeaR02E5m2wVC9Y= Subject key identifier: 96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 184AAADEDEB5B9325A18D8264FEA65092EE40E43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft caRepository: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 18 Dec 2024 09:11:34 +0000 Certificate not after: Wed 17 Dec 2025 09:16:34 +0000 Subordinate resources: IP: 160.25.176.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:4a:aa:de:de:b5:b9:32:5a:18:d8:26:4f:ea:65:09:2e:e4:0e:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Dec 18 09:11:34 2024 GMT Not After : Dec 17 09:16:34 2025 GMT Subject: CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:07:ab:ec:97:ce:eb:1b:74:f3:40:4d:09:eb: 3d:df:3e:60:ea:4f:e4:e6:8e:b3:19:17:ed:a1:fb: 9b:ca:16:f5:49:ca:94:d6:00:dc:0e:cb:8c:a3:c5: 9b:bd:da:87:6a:69:74:62:d8:ff:53:11:49:52:50: e4:f4:71:35:1a:41:b3:bd:11:82:07:67:40:dc:c9: 9c:1d:f1:ef:50:cb:cf:f9:02:a4:25:4b:92:8f:20: e9:62:de:38:95:1d:11:ab:a3:a0:59:b6:cf:c7:e8: c3:08:38:76:38:15:dd:b8:05:bf:69:29:78:4b:20: b9:cf:70:cf:ef:6a:cb:0b:d9:13:28:de:b5:a3:84: 9a:08:ea:db:e1:c7:ab:29:f4:39:24:f0:b4:42:9c: ee:bc:b2:63:dc:f9:58:38:97:0c:59:82:3d:8c:ad: 6d:4c:5b:16:86:e8:8e:e5:62:8b:be:f2:ce:bd:4f: 23:72:d0:dd:d5:09:08:10:5e:79:3b:31:9b:59:88: 63:3d:fd:ff:9c:15:10:d9:8d:b7:2c:f4:93:8d:15: 38:be:4c:99:d9:43:c8:ee:aa:1c:18:f2:23:51:95: 6b:55:56:39:e9:83:50:56:39:12:11:f7:e4:c9:33: 54:fd:80:27:19:54:a1:60:27:fc:ed:64:c1:5b:53: 48:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.176.0/23 Signature Algorithm: sha256WithRSAEncryption 79:f5:74:5d:a3:2c:62:ee:b0:d2:e3:77:77:51:af:80:54:0b: 14:09:71:24:db:bb:9f:5f:a9:64:6f:c6:7e:61:49:9d:07:d5: eb:28:77:ea:d8:10:98:8f:23:02:15:e0:42:d0:2c:5b:31:03: a8:88:fd:a4:b8:b0:27:96:5d:91:ed:fd:24:95:44:34:79:e7: 56:12:f0:4b:b5:f0:4e:9a:82:63:39:d1:ab:c5:98:4e:e5:0d: a8:e2:42:6a:d4:fd:40:3d:2e:82:31:5a:30:0d:f4:2b:bb:c2: 45:6e:23:28:92:58:af:8f:23:ab:73:57:6a:84:a1:8d:dd:ab: 71:b0:90:27:46:38:01:77:28:5a:05:14:4c:c3:d1:e6:9c:ed: 5f:11:cd:ba:70:9f:bd:6f:00:61:f0:52:a4:f7:45:2c:08:28: 01:c4:24:5c:fc:a8:39:d7:47:02:c2:42:7d:ee:4e:f7:81:54: ac:c7:ef:1a:65:88:7e:e3:6e:20:9a:8c:57:07:aa:f8:7f:ef: 0f:96:e5:b2:a0:0e:36:2d:f9:86:a7:1d:65:ef:aa:10:7a:45: 87:e2:9f:4b:2f:54:6c:9d:9b:dc:ee:ef:c9:20:a0:4b:92:e3: 4a:58:de:c2:1e:fc:c6:97:91:41:ab:8e:13:cb:ce:5e:63:a1: ec:78:b1:29 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUGEqq3t61uTJaGNgmT+plCS7kDkMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTIxODA5MTEzNFoX DTI1MTIxNzA5MTYzNFowMzExMC8GA1UEAxMoOTZGQjMxNzRFNzFENENFOUJCMUM1 NzI5NUMyRjU1RTc0NjQxRjhFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN4Hq+yXzusbdPNATQnrPd8+YOpP5OaOsxkX7aH7m8oW9UnKlNYA3A7LjKPF m73ah2ppdGLY/1MRSVJQ5PRxNRpBs70RggdnQNzJnB3x71DLz/kCpCVLko8g6WLe OJUdEaujoFm2z8fowwg4djgV3bgFv2kpeEsguc9wz+9qywvZEyjetaOEmgjq2+HH qyn0OSTwtEKc7ryyY9z5WDiXDFmCPYytbUxbFobojuVii77yzr1PI3LQ3dUJCBBe eTsxm1mIYz39/5wVENmNtyz0k40VOL5MmdlDyO6qHBjyI1GVa1VWOemDUFY5EhH3 5MkzVP2AJxlUoWAn/O1kwVtTSKkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJb7MXTnHUzpuxxXKVwvVedGQfjuMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lMzhmOWI2Yi0wMjdhLTRiZTYtYWIwMi0yOGQ1NTFjMzk4MTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UzOGY5YjZi LTAyN2EtNGJlNi1hYjAyLTI4ZDU1MWMzOTgxOS8wLzk2RkIzMTc0RTcxRDRDRTlC QjFDNTcyOTVDMkY1NUU3NDY0MUY4RUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgGbAwDQYJKoZIhvcNAQELBQADggEBAHn1dF2jLGLusNLjd3dRr4BUCxQJcSTb u59fqWRvxn5hSZ0H1esod+rYEJiPIwIV4ELQLFsxA6iI/aS4sCeWXZHt/SSVRDR5 51YS8Eu18E6agmM50avFmE7lDajiQmrU/UA9LoIxWjAN9Cu7wkVuIyiSWK+PI6tz V2qEoY3dq3GwkCdGOAF3KFoFFEzD0eac7V8Rzbpwn71vAGHwUqT3RSwIKAHEJFz8 qDnXRwLCQn3uTveBVKzH7xpliH7jbiCajFcHqvh/7w+W5bKgDjYt+YanHWXvqhB6 RYfin0svVGydm9zu78kgoEuS40pY3sIe/MaXkUGrjhPLzl5joex4sSk= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net