$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer File: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer (raw, json) Hash identifier: GG3jWfQC87ilDXWl5rBaWP3UhFOhDix2I1n8KDSPdpM= Subject key identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 68A1BEDC247C830705EE8D36B277DB27A7973BB3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft caRepository: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 29 May 2024 07:41:11 +0000 Certificate not after: Wed 28 May 2025 07:46:11 +0000 Subordinate resources: IP: 157.66.56.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a1:be:dc:24:7c:83:07:05:ee:8d:36:b2:77:db:27:a7:97:3b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 29 07:41:11 2024 GMT Not After : May 28 07:46:11 2025 GMT Subject: CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:13:2b:81:42:64:86:52:c5:8c:84:6e:46:06: ce:9b:d4:68:89:75:99:35:a4:dc:98:9e:2e:42:f0: 92:e0:ea:af:18:4d:4b:5b:9f:cc:4b:1b:22:6e:8b: ea:2e:0a:f5:40:27:49:d9:2c:00:6c:37:47:92:16: 23:2b:7e:d3:38:10:74:58:b1:c8:ca:a1:c3:b2:1f: 85:0d:87:90:ef:08:f2:f9:10:1f:3a:fa:f7:4c:47: ae:d3:42:78:ca:3a:5c:f7:69:e6:b4:f0:d1:9f:d3: 79:fe:0e:35:cd:01:fc:15:1b:c6:be:6e:de:51:4a: 52:4b:88:06:20:17:c1:f6:43:66:d6:db:17:fe:13: 0e:44:70:fa:d3:5c:e9:76:8d:b3:b2:52:69:76:b4: 5a:c8:66:e1:5e:56:f6:6c:9f:ef:cf:b9:20:29:9b: 22:e5:11:7d:2f:19:fb:f9:e5:4b:48:e1:d2:a3:fe: 87:43:15:d0:83:16:da:d8:94:5b:90:ea:d6:97:e3: a0:30:9c:44:27:25:c4:d5:a1:17:9e:e0:bd:3b:06: 66:ad:72:c6:89:72:1d:55:c4:83:c9:7a:5d:20:de: aa:1b:8e:f6:2a:d6:f4:29:64:d1:02:3c:30:cb:0b: 3b:ce:93:6b:d9:cf:22:71:95:95:64:99:31:05:95: be:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.56.0/24 Signature Algorithm: sha256WithRSAEncryption 14:4f:a9:4a:ae:b4:5a:5d:53:08:19:7b:b7:56:ec:de:f3:90: 26:55:68:24:e7:70:78:9e:bc:2c:54:a9:da:2f:5a:79:8f:04: 5e:71:ac:34:70:31:7c:9e:42:23:c8:d1:7d:03:a4:3d:86:d3: 02:b1:19:1a:c6:32:10:94:9d:ef:f0:50:bb:99:6a:63:75:fc: 4a:69:19:98:78:23:6e:ce:89:de:1a:d4:f0:1c:99:0b:c1:b3: b1:63:6e:e2:9b:42:23:01:48:26:fe:33:c1:12:1a:cc:c4:56: c3:0a:44:cd:33:a6:2a:ec:8d:54:be:4d:a1:9e:d1:36:08:28: 41:ea:f9:e5:54:3b:cc:6b:1e:f8:7c:51:bf:89:04:92:b2:37: de:f6:fb:1c:04:1c:f8:b2:ac:7a:39:9f:54:67:0a:5a:ff:96: 06:1a:98:10:e4:d4:45:d9:c3:09:ff:6d:9d:06:9a:fc:3a:d5: 37:4e:c9:a8:7f:02:a0:a3:c3:38:3c:83:33:f2:75:57:69:d2: 68:af:4e:f2:55:b2:5c:f4:f5:0c:c6:af:5c:86:42:24:12:63: 9e:31:d1:2b:ca:be:77:ce:23:56:ca:c5:4c:ee:6a:ff:63:bf: 13:66:c2:dd:a5:ec:e2:82:ff:24:12:6c:17:bb:a3:37:d5:e2: bd:50:24:bc -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUaKG+3CR8gwcF7o02snfbJ6eXO7MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDUyOTA3NDExMVoX DTI1MDUyODA3NDYxMVowMzExMC8GA1UEAxMoNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2 MUIwQkRDMTg4NEMxMDIxQjQ3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM0TK4FCZIZSxYyEbkYGzpvUaIl1mTWk3JieLkLwkuDqrxhNS1ufzEsbIm6L 6i4K9UAnSdksAGw3R5IWIyt+0zgQdFixyMqhw7IfhQ2HkO8I8vkQHzr690xHrtNC eMo6XPdp5rTw0Z/Tef4ONc0B/BUbxr5u3lFKUkuIBiAXwfZDZtbbF/4TDkRw+tNc 6XaNs7JSaXa0Wshm4V5W9myf78+5ICmbIuURfS8Z+/nlS0jh0qP+h0MV0IMW2tiU W5Dq1pfjoDCcRCclxNWhF57gvTsGZq1yxolyHVXEg8l6XSDeqhuO9irW9Clk0QI8 MMsLO86Ta9nPInGVlWSZMQWVvo0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFExdD9elbsK1a5hsL3BiEwQIbR2MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xZDc1NTM0Ny02YjFjLTQyYzEtOWY1NC1kN2VhYjIyZTE4MmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkNzU1MzQ3 LTZiMWMtNDJjMS05ZjU0LWQ3ZWFiMjJlMTgyYy8wLzUxMzE3NDNGNUU5NUJCMEFE NUFFNjFCMEJEQzE4ODRDMTAyMUI0NzYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdQjgwDQYJKoZIhvcNAQELBQADggEBABRPqUqutFpdUwgZe7dW7N7zkCZVaCTn cHievCxUqdovWnmPBF5xrDRwMXyeQiPI0X0DpD2G0wKxGRrGMhCUne/wULuZamN1 /EppGZh4I27Oid4a1PAcmQvBs7FjbuKbQiMBSCb+M8ESGszEVsMKRM0zpirsjVS+ TaGe0TYIKEHq+eVUO8xrHvh8Ub+JBJKyN972+xwEHPiyrHo5n1RnClr/lgYamBDk 1EXZwwn/bZ0Gmvw61TdOyah/AqCjwzg8gzPydVdp0mivTvJVslz09QzGr1yGQiQS Y54x0SvKvnfOI1bKxUzuav9jvxNmwt2l7OKC/yQSbBe7ozfV4r1QJLw= -----END CERTIFICATE-----Generated at Fri Jun 21 22:04:32 2024 by rpki-client on console-fra.rpki-client.org