$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer File: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer (raw, json) Hash identifier: yTE0/7n7AtuDLzxudwNbWTlpevMxJpkMxvzZJCyg+Rs= Subject key identifier: 45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 393B0BA2B545A1C9EE47FD21FB7D3D1D11873135 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft caRepository: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 21 Jul 2024 18:52:40 +0000 Certificate not after: Sun 20 Jul 2025 18:57:40 +0000 Subordinate resources: IP: 157.66.174.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:3b:0b:a2:b5:45:a1:c9:ee:47:fd:21:fb:7d:3d:1d:11:87:31:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 21 18:52:40 2024 GMT Not After : Jul 20 18:57:40 2025 GMT Subject: CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:59:46:4c:67:9f:85:84:15:32:21:81:12:8a: e1:60:69:d7:c4:8e:86:ed:a6:7e:28:16:3d:58:5a: 63:31:d3:c2:2e:5a:38:50:b9:16:a6:32:51:c8:86: d1:f9:b2:b5:6f:6c:c9:43:bf:18:47:5b:0d:77:78: c4:b4:53:49:3a:1e:49:81:f2:ed:72:ee:96:0c:30: fc:23:13:46:90:b5:3f:0c:4f:7e:06:7c:80:49:19: 2d:0e:9e:4a:7c:fd:f8:45:f5:ec:aa:38:1e:50:ee: 5f:80:d0:31:b1:bf:ee:b3:f3:d9:da:61:91:0b:20: 7f:bc:a7:a6:97:93:2e:14:38:0c:18:89:87:09:19: 77:ab:10:f4:b9:56:64:f0:6c:bd:57:0d:22:d8:07: f9:df:25:21:1a:e2:52:29:3e:5c:5e:8a:48:2b:51: 81:4a:67:82:af:40:57:3e:f4:f0:09:75:2a:40:27: 89:7b:aa:e1:93:d1:12:18:d2:d8:02:4c:f6:a8:03: 43:25:eb:28:18:7b:84:a6:da:c0:db:4a:d4:66:1c: 72:ee:e1:5a:0c:fb:2b:a6:ac:14:56:9b:90:28:3a: d7:a4:9f:80:43:df:0e:d1:8b:c3:8f:ae:5f:c5:2a: 4a:c3:1e:d5:2a:e3:ae:f7:bc:bd:e6:39:96:13:63: 61:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.174.0/23 Signature Algorithm: sha256WithRSAEncryption 99:4d:af:ec:32:b2:1c:c6:21:16:1b:34:17:77:ab:33:ec:c0: 94:6b:95:00:25:2e:f8:9d:7a:e6:92:87:ed:d2:04:53:f5:7f: 01:60:f2:90:d1:17:4a:18:1e:b0:35:f6:98:49:b8:26:42:b8: ac:b7:d0:76:1c:df:32:71:2f:d0:3e:f8:2d:fa:eb:b8:00:7f: 14:70:2b:e4:7f:d4:6a:6f:e6:4d:11:7d:d3:58:2b:89:a9:e7: 13:59:93:a2:db:f0:e9:0b:2d:6d:96:3a:c7:63:86:e7:c5:25: 95:a4:32:b6:a4:c0:b1:d7:4c:b2:74:58:0c:6b:2b:51:29:78: 3d:af:23:e1:4e:6c:34:36:38:42:42:aa:9b:6f:53:cd:98:0a: d2:b1:b0:db:d9:34:80:21:fe:1e:6c:e6:3b:96:c1:60:3e:32: 35:7d:c9:c1:d8:1d:73:a7:9c:e6:06:81:18:6c:0c:31:01:4d: 65:f5:87:82:28:cf:5d:83:5f:51:e1:ae:37:7d:94:82:f0:b4: 6c:10:83:8d:4d:67:cc:ff:a9:c5:19:4f:b1:62:99:2d:84:90: 41:67:5e:de:d5:73:bc:38:c4:4b:8d:1f:19:49:74:49:57:77: f5:49:6a:89:8c:89:a7:47:6d:60:97:a0:5f:5b:91:22:ba:44: 55:91:49:6b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUOTsLorVFocnuR/0h+309HRGHMTUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDcyMTE4NTI0MFoX DTI1MDcyMDE4NTc0MFowMzExMC8GA1UEAxMoNDUzODc1M0FEMDFGQjkxRDdCMDI4 Q0M1M0Y1QUVDMjRBRDZDRDA4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9ZRkxnn4WEFTIhgRKK4WBp18SOhu2mfigWPVhaYzHTwi5aOFC5FqYyUciG 0fmytW9syUO/GEdbDXd4xLRTSToeSYHy7XLulgww/CMTRpC1PwxPfgZ8gEkZLQ6e Snz9+EX17Ko4HlDuX4DQMbG/7rPz2dphkQsgf7ynppeTLhQ4DBiJhwkZd6sQ9LlW ZPBsvVcNItgH+d8lIRriUik+XF6KSCtRgUpngq9AVz708Al1KkAniXuq4ZPREhjS 2AJM9qgDQyXrKBh7hKbawNtK1GYccu7hWgz7K6asFFabkCg616SfgEPfDtGLw4+u X8UqSsMe1Srjrve8veY5lhNjYSECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEU4dTrQH7kdewKMxT9a7CStbNCCMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzliNzMzZGNm LTlmNWUtNDc3NS05Y2U3LTlkZDUyNWI0NGI4Ni8wLzQ1Mzg3NTNBRDAxRkI5MUQ3 QjAyOENDNTNGNUFFQzI0QUQ2Q0QwODIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdQq4wDQYJKoZIhvcNAQELBQADggEBAJlNr+wyshzGIRYbNBd3qzPswJRrlQAl LvideuaSh+3SBFP1fwFg8pDRF0oYHrA19phJuCZCuKy30HYc3zJxL9A++C3667gA fxRwK+R/1Gpv5k0RfdNYK4mp5xNZk6Lb8OkLLW2WOsdjhufFJZWkMrakwLHXTLJ0 WAxrK1EpeD2vI+FObDQ2OEJCqptvU82YCtKxsNvZNIAh/h5s5juWwWA+MjV9ycHY HXOnnOYGgRhsDDEBTWX1h4Ioz12DX1Hhrjd9lILwtGwQg41NZ8z/qcUZT7FimS2E kEFnXt7Vc7w4xEuNHxlJdElXd/VJaomMiadHbWCXoF9bkSK6RFWRSWs= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org