$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer File: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (raw, json) Hash identifier: FCwchNTIXQpDSuD5+meN7UoYwGYoBfy2iyvxtholuYY= Subject key identifier: 55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92 Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 42093AF3798E702164D5CC416A53A09B5DB9E8B0 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Manifest: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft caRepository: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 30 Jul 2023 23:44:15 +0000 Certificate not after: Sun 28 Jul 2024 23:49:15 +0000 Subordinate resources: IP: 212.117.48.0/20 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 13:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:09:3a:f3:79:8e:70:21:64:d5:cc:41:6a:53:a0:9b:5d:b9:e8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Jul 30 23:44:15 2023 GMT Not After : Jul 28 23:49:15 2024 GMT Subject: CN=55E79C1D60B12E58D121B265CA67C0BD60D4CF92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:28:5b:1d:b7:fa:da:86:d9:aa:1d:2c:2b:48: 7f:75:5b:6b:59:aa:a3:9d:10:34:eb:44:a3:79:f6: c3:15:a9:e0:6f:d7:4e:d1:fb:00:0e:87:9a:26:ea: b9:db:bd:36:a2:d7:fb:5d:3a:50:e1:09:b0:79:6e: d9:f1:bf:d0:cd:82:57:ea:fd:2d:b4:f8:20:be:0f: ed:30:43:8b:e1:35:fd:67:25:99:7f:52:0e:71:96: 22:79:2a:e7:82:6d:36:3a:e4:c1:fd:e4:29:5b:a9: cd:e2:45:f8:36:f4:3b:08:ea:74:a0:8d:77:e3:a2: 49:0a:c1:e0:77:c0:2c:02:92:14:6b:b7:84:4b:31: 30:ce:07:6e:62:67:96:db:e5:00:43:9f:6f:92:69: de:ff:dc:32:ff:55:7d:91:56:37:63:2a:3a:4b:68: 7a:0b:cf:2a:00:90:63:6f:44:e6:be:e3:6a:68:30: 29:6a:32:cd:19:ea:41:10:da:c3:35:14:87:ef:57: 47:9b:01:37:8d:a0:3f:d3:8b:8d:1a:47:aa:aa:90: bf:19:30:69:1b:a2:17:60:91:9f:f3:c4:63:40:69: ff:47:5b:d7:5e:d1:27:72:7c:eb:d3:94:31:42:21: 64:43:44:13:de:4e:74:f3:98:96:06:e6:cd:2c:7e: 9d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92 X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.117.48.0/20 Signature Algorithm: sha256WithRSAEncryption ab:bd:21:6d:0a:c5:0f:fe:39:50:a9:a5:d7:22:96:97:fe:f1: ce:db:98:a1:f2:1b:0d:6e:b0:4c:ab:f4:43:61:11:78:38:3b: a5:7d:a2:d9:df:81:f4:8a:f8:03:64:d6:4b:63:c4:3f:9a:53: f0:ef:f0:f3:ec:84:6d:50:a7:8f:65:a7:59:c9:15:9d:16:b2: 43:4b:2a:56:11:00:21:15:22:ab:4d:14:0a:88:d5:1b:af:6b: 06:03:46:32:4b:1a:62:3e:7b:a9:e1:86:dc:f7:1a:2f:b9:7a: 92:96:b1:25:6d:a4:df:58:fb:f4:45:ea:a6:fc:a7:5c:54:75: d2:06:1a:a8:aa:ba:2f:1d:81:e2:a1:73:21:6e:2e:c4:b7:a6: 7c:9c:02:45:19:d0:45:12:f8:7a:3c:96:7a:84:03:e9:46:95: 9b:0e:6b:4d:2c:fe:5a:8a:bc:46:f9:2c:68:ba:fb:54:41:c6: 31:5b:57:4f:b9:e8:3a:0c:9b:11:30:3e:5a:f7:bb:44:8d:7e: 58:a8:11:92:52:da:61:ed:49:ad:7d:87:25:46:4b:ed:54:2a: 82:2d:1b:73:a9:ba:a4:f2:02:6d:4f:c4:ba:1a:df:ff:66:42: e4:78:f7:a2:f8:1b:0e:41:78:ed:5f:c1:f9:fc:2a:55:17:87: 9d:0c:6e:84 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQgk683mOcCFk1cxBalOgm1256LAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTIzMDczMDIzNDQxNVoX DTI0MDcyODIzNDkxNVowMzExMC8GA1UEAxMoNTVFNzlDMUQ2MEIxMkU1OEQxMjFC MjY1Q0E2N0MwQkQ2MEQ0Q0Y5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMoWx23+tqG2aodLCtIf3Vba1mqo50QNOtEo3n2wxWp4G/XTtH7AA6Hmibq udu9NqLX+106UOEJsHlu2fG/0M2CV+r9LbT4IL4P7TBDi+E1/WclmX9SDnGWInkq 54JtNjrkwf3kKVupzeJF+Db0OwjqdKCNd+OiSQrB4HfALAKSFGu3hEsxMM4HbmJn ltvlAEOfb5Jp3v/cMv9VfZFWN2MqOktoegvPKgCQY29E5r7jamgwKWoyzRnqQRDa wzUUh+9XR5sBN42gP9OLjRpHqqqQvxkwaRuiF2CRn/PEY0Bp/0db117RJ3J869OU MUIhZENEE95OdPOYlgbmzSx+nUECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFXnnB1gsS5Y0SGyZcpnwL1g1M+SMB8GA1UdIwQYMBaAFBI0 XxFaxLYqUfUnTFTIHoZGO9C6MA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8w LzEyMzQ1RjExNUFDNEI2MkE1MUY1Mjc0QzU0QzgxRTg2NDYzQkQwQkEuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3QzcyRkQxRkYyL0Vq UmZFVnJFdGlwUjlTZE1WTWdlaGtZNzBMby5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5MWQzYzMw LTk1ZGMtNGI3Mi1hZTFiLWFkMWU5OGIwZTE3OS8xLzU1RTc5QzFENjBCMTJFNThE MTIxQjI2NUNBNjdDMEJENjBENENGOTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATUdTAwDQYJKoZIhvcNAQELBQADggEBAKu9IW0KxQ/+OVCppdcilpf+8c7bmKHy Gw1usEyr9ENhEXg4O6V9otnfgfSK+ANk1ktjxD+aU/Dv8PPshG1Qp49lp1nJFZ0W skNLKlYRACEVIqtNFAqI1RuvawYDRjJLGmI+e6nhhtz3Gi+5epKWsSVtpN9Y+/RF 6qb8p1xUddIGGqiqui8dgeKhcyFuLsS3pnycAkUZ0EUS+Ho8lnqEA+lGlZsOa00s /lqKvEb5LGi6+1RBxjFbV0+56DoMmxEwPlr3u0SNflioEZJS2mHtSa19hyVGS+1U KoItG3OpuqTyAm1PxLoa3/9mQuR496L4Gw5BeO1fwfn8KlUXh50MboQ= -----END CERTIFICATE-----Generated at Sat Apr 27 13:32:24 2024 by rpki-client on console-ams.rpki-client.org