$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer File: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer (raw, json) Hash identifier: STQ9CVlXo6t5d8h82g8exZrS5d7cnG79dZYEFIWjtFM= Subject key identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 69868934F4144FB7A13EAB64A6264FD8BD1010D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft caRepository: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 04 Mar 2025 19:08:33 +0000 Certificate not after: Tue 03 Mar 2026 19:13:33 +0000 Subordinate resources: IP: 157.10.63.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:86:89:34:f4:14:4f:b7:a1:3e:ab:64:a6:26:4f:d8:bd:10:10:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Mar 4 19:08:33 2025 GMT Not After : Mar 3 19:13:33 2026 GMT Subject: CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fb:cb:f7:4c:2c:55:72:a7:ff:3a:e7:66:d4: 55:df:98:b1:f2:fd:29:07:4f:c9:b5:43:8e:a7:91: eb:09:dd:6a:e2:c3:4f:0f:23:60:61:53:a0:72:cc: 48:20:58:72:0e:68:a3:30:48:15:44:c4:b4:65:b0: 7c:53:67:61:81:5e:a5:9a:87:d6:88:1c:bb:1f:79: 04:23:0e:cb:0e:ff:86:29:4d:1b:74:31:71:65:35: ed:81:b2:70:0f:58:4b:92:fe:ed:c9:c3:52:69:f5: bf:a4:1b:80:ed:a7:b9:75:26:be:52:8f:21:79:6c: 82:68:a8:fb:e1:c7:8a:30:18:37:17:98:92:c4:df: ae:cd:78:55:14:35:e8:cb:bd:9d:40:a3:c6:52:bd: 6c:a8:5d:5b:7e:2b:53:a8:5b:b0:0a:a3:2e:c9:cb: 8f:0e:3a:87:14:2e:94:48:20:86:35:c1:49:52:83: fd:1f:53:3f:03:0f:a6:88:a7:e4:0d:76:34:89:35: 92:7e:dd:70:f7:eb:58:23:ad:ef:6f:06:b7:a0:42: 94:d4:08:72:a9:58:25:5c:1f:4f:a5:f0:3e:7c:c0: d1:45:27:0d:45:ab:5d:80:4a:5f:41:e0:29:e0:fe: ac:ae:b9:da:6a:52:1f:2f:bd:78:cd:8a:e7:44:a8: 5e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.63.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:aa:23:e3:8e:d7:7d:86:79:66:07:dd:63:a1:c4:d7:b5:ad: ec:55:69:b7:05:6d:cc:e5:d8:2c:27:c6:a6:66:42:bc:c8:45: 63:b2:97:7d:dd:08:02:5d:31:3f:7f:a6:4d:07:bf:5a:e2:5c: 71:a5:6b:e5:1a:59:12:6f:5f:fd:af:70:68:a5:a7:27:c1:b8: 1d:95:e8:52:42:d4:71:6c:b0:c0:46:52:9c:59:db:b3:bb:7a: b4:95:d1:d7:50:a9:70:84:54:dc:2e:28:ae:3b:d0:09:e3:6d: 41:be:1c:34:27:8b:6e:32:69:92:e6:35:bd:4d:88:a6:82:14: 6b:c4:6b:ee:13:6f:09:d6:ad:01:41:e4:15:71:8a:3a:93:c7: a2:3b:3a:4a:7c:fa:e0:d4:9e:f1:6c:a2:8b:31:3a:09:a4:f0: 0d:51:15:bb:46:93:36:8c:12:f2:cb:75:cd:e2:f4:42:9d:6a: 22:f7:d1:69:1d:6c:cd:e5:61:ee:3f:f8:66:f1:b2:12:35:39: a7:9e:e5:14:61:a0:f3:ef:4d:c2:d8:1b:35:43:5d:00:39:8b: 0b:d4:5e:a8:fa:1c:18:a4:42:95:9b:b6:c8:36:8d:69:90:bd: b2:d0:92:2f:8d:4a:99:9b:5c:c8:77:78:e9:c9:a8:0b:e5:b7: eb:e2:f4:8e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUaYaJNPQUT7ehPqtkpiZP2L0QENcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDMwNDE5MDgzM1oX DTI2MDMwMzE5MTMzM1owMzExMC8GA1UEAxMoNEEzNzc2NENDODBEMUI4QTY4MTlF MEYwRjE0NTQ2NkUwQkU1MkNCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANf7y/dMLFVyp/8652bUVd+YsfL9KQdPybVDjqeR6wndauLDTw8jYGFToHLM SCBYcg5oozBIFUTEtGWwfFNnYYFepZqH1ogcux95BCMOyw7/hilNG3QxcWU17YGy cA9YS5L+7cnDUmn1v6QbgO2nuXUmvlKPIXlsgmio++HHijAYNxeYksTfrs14VRQ1 6Mu9nUCjxlK9bKhdW34rU6hbsAqjLsnLjw46hxQulEgghjXBSVKD/R9TPwMPpoin 5A12NIk1kn7dcPfrWCOt728Gt6BClNQIcqlYJVwfT6XwPnzA0UUnDUWrXYBKX0Hg KeD+rK652mpSHy+9eM2K50SoXhsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEo3dkzIDRuKaBng8PFFRm4L5Sy9MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mZDNhMmZkZi1iY2JhLTQ3NTctYjM2Ni1lMWEwYWQyZDM3NGEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZkM2EyZmRm LWJjYmEtNDc1Ny1iMzY2LWUxYTBhZDJkMzc0YS8wLzRBMzc3NjRDQzgwRDFCOEE2 ODE5RTBGMEYxNDU0NjZFMEJFNTJDQkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdCj8wDQYJKoZIhvcNAQELBQADggEBAI2qI+OO132GeWYH3WOhxNe1rexVabcF bczl2CwnxqZmQrzIRWOyl33dCAJdMT9/pk0Hv1riXHGla+UaWRJvX/2vcGilpyfB uB2V6FJC1HFssMBGUpxZ27O7erSV0ddQqXCEVNwuKK470AnjbUG+HDQni24yaZLm Nb1NiKaCFGvEa+4TbwnWrQFB5BVxijqTx6I7Okp8+uDUnvFsoosxOgmk8A1RFbtG kzaMEvLLdc3i9EKdaiL30WkdbM3lYe4/+GbxshI1Oaee5RRhoPPvTcLYGzVDXQA5 iwvUXqj6HBikQpWbtsg2jWmQvbLQki+NSpmbXMh3eOnJqAvlt+vi9I4= -----END CERTIFICATE-----Generated at Mon Apr 7 04:31:39 2025 by rpki-client