$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer File: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer (raw, json) Hash identifier: 7S88H37Ap4o8OORMT8odNBboBxaEsgEZyYcf9y7ALk4= Subject key identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 3CF70F24F3E08F50095E2C601921CF97E41BF0A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft caRepository: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 22 May 2024 14:14:33 +0000 Certificate not after: Wed 21 May 2025 14:19:33 +0000 Subordinate resources: IP: 157.66.16.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f7:0f:24:f3:e0:8f:50:09:5e:2c:60:19:21:cf:97:e4:1b:f0:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 22 14:14:33 2024 GMT Not After : May 21 14:19:33 2025 GMT Subject: CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b4:00:67:a7:86:c3:8d:e1:0e:09:8a:3a:2f: a0:ca:b3:d5:c0:c6:05:6f:b3:6d:b2:3b:65:c7:bb: d7:3e:98:8f:6d:bd:fd:23:0b:25:e3:5e:6b:ef:57: 7f:98:7d:71:7f:ee:61:c9:f4:83:09:72:a8:b8:5b: 08:ac:61:4e:0e:6a:c2:1c:8d:a8:59:1c:b4:d5:8c: 0f:86:f2:7a:29:47:4d:90:e0:e0:25:12:72:6b:d0: b3:05:73:ae:22:29:21:de:85:73:de:2a:61:d4:12: f3:e3:d1:b2:5f:51:42:e9:ec:15:49:81:fc:50:5b: de:a0:a3:72:c0:91:b6:e6:97:ee:b0:71:ad:86:78: c1:c2:ce:2b:ef:11:a1:3f:b8:e0:e9:86:04:78:4f: 09:ed:f7:b2:01:ec:c3:13:fc:1c:c0:77:2f:44:7f: 89:66:30:23:e3:c5:0f:35:a6:d9:ee:c6:59:c0:b5: be:da:4b:9e:af:c5:80:d6:ec:cd:54:a2:7e:9a:97: 60:66:64:3e:77:76:31:40:8d:25:7e:d3:2b:03:3f: 48:19:d0:28:f3:1e:8a:d1:5a:6f:6a:b9:48:55:6e: b6:3a:e7:18:bb:bf:87:f1:8e:af:19:32:49:9f:63: 25:da:51:07:19:d9:37:e7:b5:c2:b0:35:b1:b7:a3: c0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.16.0/23 Signature Algorithm: sha256WithRSAEncryption 99:c9:d2:b8:2d:3e:44:1f:bd:dd:94:da:86:d3:c7:7b:9c:6b: 68:96:0f:a2:04:3a:5a:f9:b4:e2:a3:58:ec:c7:2c:c9:41:7a: d2:46:7e:ab:cc:54:66:f1:82:73:09:d3:b6:32:7c:6e:a5:58: a0:61:d6:d8:85:01:ac:a9:01:6c:fa:19:ea:b5:f0:0b:8e:6a: bb:90:4b:8e:83:64:ce:64:a2:c5:1e:a2:c7:f5:93:f7:dc:8f: 2b:c4:9f:a5:cd:2b:f5:6b:7e:1a:04:93:76:52:ba:6e:8b:f7: bb:ab:6b:9e:b7:5f:62:24:44:54:d7:1f:2b:a0:2c:38:bc:fc: 1f:4d:c3:f2:ea:cc:01:fe:c1:02:94:31:a0:be:fd:26:89:b7: a1:8d:f3:d4:6e:96:ec:c6:51:65:95:2d:dc:72:fd:94:d9:c1: 78:bd:27:06:78:9a:4d:c4:1e:b6:8b:f6:58:ed:4c:fe:1e:ce: 55:ca:5c:2e:49:6a:46:8b:4d:7a:ef:96:b1:f7:97:ae:4b:65: a1:d9:11:67:82:e3:79:48:be:55:a5:a5:35:5a:fc:70:6b:d5: f4:fc:71:9b:02:0b:00:4b:24:44:82:74:97:d6:1b:62:2c:21: f5:30:ec:96:04:09:f7:03:a1:46:23:e8:8a:28:45:24:ff:9b: c5:e7:29:0d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUPPcPJPPgj1AJXixgGSHPl+Qb8KcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDUyMjE0MTQzM1oX DTI1MDUyMTE0MTkzM1owMzExMC8GA1UEAxMoMzA4QTUxMDA0MEZERjlCQzI4QjdC NjNEMzIwM0U0MEUyMTA2RjFCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKq0AGenhsON4Q4JijovoMqz1cDGBW+zbbI7Zce71z6Yj229/SMLJeNea+9X f5h9cX/uYcn0gwlyqLhbCKxhTg5qwhyNqFkctNWMD4byeilHTZDg4CUScmvQswVz riIpId6Fc94qYdQS8+PRsl9RQunsFUmB/FBb3qCjcsCRtuaX7rBxrYZ4wcLOK+8R oT+44OmGBHhPCe33sgHswxP8HMB3L0R/iWYwI+PFDzWm2e7GWcC1vtpLnq/FgNbs zVSifpqXYGZkPnd2MUCNJX7TKwM/SBnQKPMeitFab2q5SFVutjrnGLu/h/GOrxky SZ9jJdpRBxnZN+e1wrA1sbejwCcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDCKUQBA/fm8KLe2PTID5A4hBvG0MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNGVkOGQ2Yy1mMGZhLTQ3Y2MtYWVhYS1iNGUzZWUxMTY4ODIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0ZWQ4ZDZj LWYwZmEtNDdjYy1hZWFhLWI0ZTNlZTExNjg4Mi8wLzMwOEE1MTAwNDBGREY5QkMy OEI3QjYzRDMyMDNFNDBFMjEwNkYxQjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdQhAwDQYJKoZIhvcNAQELBQADggEBAJnJ0rgtPkQfvd2U2obTx3uca2iWD6IE Olr5tOKjWOzHLMlBetJGfqvMVGbxgnMJ07YyfG6lWKBh1tiFAaypAWz6Geq18AuO aruQS46DZM5kosUeosf1k/fcjyvEn6XNK/VrfhoEk3ZSum6L97ura563X2IkRFTX HyugLDi8/B9Nw/LqzAH+wQKUMaC+/SaJt6GN89RuluzGUWWVLdxy/ZTZwXi9JwZ4 mk3EHraL9ljtTP4ezlXKXC5JakaLTXrvlrH3l65LZaHZEWeC43lIvlWlpTVa/HBr 1fT8cZsCCwBLJESCdJfWG2IsIfUw7JYECfcDoUYj6IooRST/m8XnKQ0= -----END CERTIFICATE-----Generated at Fri Jun 21 22:04:31 2024 by rpki-client on console-fra.rpki-client.org