$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer File: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer (raw, json) Hash identifier: wjspN581O3LnpHzjhz9Abzt2pJRmWLEAv9E4PB+PVnw= Subject key identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 019894B9B4A7212B7AC5D1BAF776618B8C4108C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft caRepository: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Apr 2024 07:09:01 +0000 Certificate not after: Tue 01 Apr 2025 07:14:01 +0000 Subordinate resources: IP: 157.10.63.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 00:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:94:b9:b4:a7:21:2b:7a:c5:d1:ba:f7:76:61:8b:8c:41:08:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 2 07:09:01 2024 GMT Not After : Apr 1 07:14:01 2025 GMT Subject: CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fb:cb:f7:4c:2c:55:72:a7:ff:3a:e7:66:d4: 55:df:98:b1:f2:fd:29:07:4f:c9:b5:43:8e:a7:91: eb:09:dd:6a:e2:c3:4f:0f:23:60:61:53:a0:72:cc: 48:20:58:72:0e:68:a3:30:48:15:44:c4:b4:65:b0: 7c:53:67:61:81:5e:a5:9a:87:d6:88:1c:bb:1f:79: 04:23:0e:cb:0e:ff:86:29:4d:1b:74:31:71:65:35: ed:81:b2:70:0f:58:4b:92:fe:ed:c9:c3:52:69:f5: bf:a4:1b:80:ed:a7:b9:75:26:be:52:8f:21:79:6c: 82:68:a8:fb:e1:c7:8a:30:18:37:17:98:92:c4:df: ae:cd:78:55:14:35:e8:cb:bd:9d:40:a3:c6:52:bd: 6c:a8:5d:5b:7e:2b:53:a8:5b:b0:0a:a3:2e:c9:cb: 8f:0e:3a:87:14:2e:94:48:20:86:35:c1:49:52:83: fd:1f:53:3f:03:0f:a6:88:a7:e4:0d:76:34:89:35: 92:7e:dd:70:f7:eb:58:23:ad:ef:6f:06:b7:a0:42: 94:d4:08:72:a9:58:25:5c:1f:4f:a5:f0:3e:7c:c0: d1:45:27:0d:45:ab:5d:80:4a:5f:41:e0:29:e0:fe: ac:ae:b9:da:6a:52:1f:2f:bd:78:cd:8a:e7:44:a8: 5e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.63.0/24 Signature Algorithm: sha256WithRSAEncryption 77:a2:65:cc:e6:8d:a4:bf:97:c7:62:d5:d6:a7:6b:a8:6d:d2: 96:7f:d3:c0:cc:b3:4d:18:a4:43:a2:e3:86:fe:1d:e2:3b:51: 18:6d:81:d1:45:97:a5:89:66:77:6f:5a:5b:aa:ca:9a:94:ce: 09:60:92:17:ab:db:b1:75:8c:67:f5:77:8c:1d:79:c5:51:e7: 9a:43:31:03:04:20:3c:2d:39:68:4c:fd:4b:c1:04:1a:d9:e1: 15:2c:92:35:83:d6:69:9e:18:e3:f1:21:86:e0:60:be:88:1b: 70:ac:fe:cd:1a:9d:da:6c:56:3e:dc:e8:2b:ff:da:bd:68:c6: 50:fb:3d:35:bf:17:34:de:5e:bd:66:1b:7c:d6:b6:8c:96:aa: ed:15:29:84:8b:1e:1b:11:28:d6:0d:7a:b8:24:05:8f:8d:c1: 7f:83:15:8b:80:d8:a1:e3:14:3d:60:49:de:fa:a4:f6:c7:13: 74:2b:f3:f1:0a:cb:92:e6:47:e6:da:35:1f:f1:57:b3:86:d4: fb:26:50:45:85:fd:b0:21:ca:4b:70:d9:f5:13:a0:9f:d9:74: 63:8f:86:11:7e:fb:1a:0a:aa:1c:06:d4:ad:ef:d8:94:55:bd: c0:f7:ca:ef:99:6e:d0:9c:63:94:56:6b:04:9e:f1:6d:4d:bd: 7a:43:f8:a1 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUAZiUubSnISt6xdG693Zhi4xBCMcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDQwMjA3MDkwMVoX DTI1MDQwMTA3MTQwMVowMzExMC8GA1UEAxMoNEEzNzc2NENDODBEMUI4QTY4MTlF MEYwRjE0NTQ2NkUwQkU1MkNCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANf7y/dMLFVyp/8652bUVd+YsfL9KQdPybVDjqeR6wndauLDTw8jYGFToHLM SCBYcg5oozBIFUTEtGWwfFNnYYFepZqH1ogcux95BCMOyw7/hilNG3QxcWU17YGy cA9YS5L+7cnDUmn1v6QbgO2nuXUmvlKPIXlsgmio++HHijAYNxeYksTfrs14VRQ1 6Mu9nUCjxlK9bKhdW34rU6hbsAqjLsnLjw46hxQulEgghjXBSVKD/R9TPwMPpoin 5A12NIk1kn7dcPfrWCOt728Gt6BClNQIcqlYJVwfT6XwPnzA0UUnDUWrXYBKX0Hg KeD+rK652mpSHy+9eM2K50SoXhsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEo3dkzIDRuKaBng8PFFRm4L5Sy9MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mZDNhMmZkZi1iY2JhLTQ3NTctYjM2Ni1lMWEwYWQyZDM3NGEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZkM2EyZmRm LWJjYmEtNDc1Ny1iMzY2LWUxYTBhZDJkMzc0YS8wLzRBMzc3NjRDQzgwRDFCOEE2 ODE5RTBGMEYxNDU0NjZFMEJFNTJDQkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdCj8wDQYJKoZIhvcNAQELBQADggEBAHeiZczmjaS/l8di1dana6ht0pZ/08DM s00YpEOi44b+HeI7URhtgdFFl6WJZndvWluqypqUzglgkher27F1jGf1d4wdecVR 55pDMQMEIDwtOWhM/UvBBBrZ4RUskjWD1mmeGOPxIYbgYL6IG3Cs/s0andpsVj7c 6Cv/2r1oxlD7PTW/FzTeXr1mG3zWtoyWqu0VKYSLHhsRKNYNergkBY+NwX+DFYuA 2KHjFD1gSd76pPbHE3Qr8/EKy5LmR+baNR/xV7OG1PsmUEWF/bAhyktw2fUToJ/Z dGOPhhF++xoKqhwG1K3v2JRVvcD3yu+ZbtCcY5RWawSe8W1NvXpD+KE= -----END CERTIFICATE-----Generated at Fri May 17 17:47:04 2024 by rpki-client on console-ams.rpki-client.org