$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer File: 5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer (raw, json) Hash identifier: Gp27brZAyf5Jmb+gMJQwVequc3KN1anqRvgM238ZaO8= Subject key identifier: 5A:8D:4D:EC:5F:C2:9B:E6:E2:49:04:62:F5:80:90:3D:D4:A9:84:EB Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 57F0920238AD53C1B28BA5069DF4ACA405F73A3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft caRepository: rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 17 May 2024 05:44:52 +0000 Certificate not after: Fri 16 May 2025 05:49:52 +0000 Subordinate resources: IP: 157.66.122.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f0:92:02:38:ad:53:c1:b2:8b:a5:06:9d:f4:ac:a4:05:f7:3a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 17 05:44:52 2024 GMT Not After : May 16 05:49:52 2025 GMT Subject: CN=5A8D4DEC5FC29BE6E2490462F580903DD4A984EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:58:20:12:8c:b2:53:c6:6b:43:8f:0f:45:70: 7d:78:6c:ad:96:9a:3c:25:27:7f:40:a4:66:ed:a4: 58:42:fb:1e:7c:08:a2:d0:64:e1:d1:88:69:09:b0: 26:de:33:30:6a:84:ba:bd:dc:2b:12:09:e5:72:f0: a7:64:23:89:1d:f6:71:78:3e:ec:60:62:c8:c0:11: b5:de:9c:5b:1d:19:e9:63:59:96:50:09:e8:29:6b: 63:ba:b4:68:5b:9c:09:83:8f:76:a0:92:d3:02:8c: bd:78:40:d4:74:8b:e2:f3:6a:81:f9:d2:82:35:9a: d6:33:d7:ae:21:c0:67:49:f6:ed:a1:9e:fb:21:a6: 9c:01:b5:04:87:73:80:b8:9d:80:b8:cf:cd:b4:16: c2:da:c8:4c:b3:3b:3c:1f:f6:36:1f:d2:25:3a:b6: 33:7c:8b:e2:81:04:91:1a:ba:67:f5:a8:f9:21:c5: 22:e3:7f:96:e9:68:79:50:6a:6c:29:66:4a:d7:fb: de:08:6a:0b:bd:f7:7a:80:35:df:4e:ae:75:60:1b: a2:96:da:bb:25:c5:f3:25:1b:20:3a:20:8b:4c:77: 72:7a:af:4e:28:44:37:22:01:0f:36:d4:2e:26:8c: 71:89:92:a5:6c:5f:58:8b:aa:ed:3e:af:71:85:b1: dc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:8D:4D:EC:5F:C2:9B:E6:E2:49:04:62:F5:80:90:3D:D4:A9:84:EB X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.122.0/24 Signature Algorithm: sha256WithRSAEncryption 69:55:d0:6f:e3:bb:97:32:fc:fe:80:91:b3:87:0e:c8:0a:0a: d5:2b:c7:b5:1d:80:27:c5:3a:42:44:56:25:59:23:43:64:9b: 13:a7:9a:30:de:e9:b4:44:50:7a:30:51:7c:38:d6:3b:3a:14: 29:9b:8c:83:5d:b7:0b:a1:cc:25:af:99:90:ae:80:e4:0f:1e: 81:f2:3c:da:e8:50:58:9e:83:51:b5:da:89:bc:12:23:07:79: 6e:3e:86:3e:e2:f7:a4:42:ed:43:17:48:38:3e:ab:ea:f4:13: 6a:44:7b:5c:a3:45:50:bd:e3:b5:0e:9a:af:82:21:7f:ad:8f: 94:4d:07:cd:9b:d3:0c:0c:07:d6:53:a7:cf:62:67:01:2c:b4: 55:e1:dd:92:5b:b6:9e:c2:dc:6d:b6:a5:86:7c:ca:1a:b7:b1: fa:5b:b3:83:e5:c9:da:2a:36:c0:ee:e9:91:12:b9:dc:8b:fd: 20:00:f1:bb:b3:1d:42:47:e4:72:df:c5:c5:fb:80:87:27:61: 3e:c0:7e:44:86:d1:f6:16:52:e1:0f:83:ea:f6:b0:ac:6d:33: 78:d3:4d:45:00:70:0f:cf:ca:40:c7:4a:7b:7b:46:ae:11:33: db:da:06:c0:7c:68:c9:1a:19:51:55:cb:6a:9a:8a:25:4f:59: 2e:7f:98:c3 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUV/CSAjitU8Gyi6UGnfSspAX3Oj4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDUxNzA1NDQ1MloX DTI1MDUxNjA1NDk1MlowMzExMC8GA1UEAxMoNUE4RDRERUM1RkMyOUJFNkUyNDkw NDYyRjU4MDkwM0RENEE5ODRFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNYIBKMslPGa0OPD0VwfXhsrZaaPCUnf0CkZu2kWEL7HnwIotBk4dGIaQmw Jt4zMGqEur3cKxIJ5XLwp2QjiR32cXg+7GBiyMARtd6cWx0Z6WNZllAJ6ClrY7q0 aFucCYOPdqCS0wKMvXhA1HSL4vNqgfnSgjWa1jPXriHAZ0n27aGe+yGmnAG1BIdz gLidgLjPzbQWwtrITLM7PB/2Nh/SJTq2M3yL4oEEkRq6Z/Wo+SHFIuN/luloeVBq bClmStf73ghqC733eoA1306udWAbopbauyXF8yUbIDogi0x3cnqvTihENyIBDzbU LiaMcYmSpWxfWIuq7T6vcYWx3LkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFqNTexfwpvm4kkEYvWAkD3UqYTrMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jZWNmNWQ5NC03ZjFmLTQzYmYtYjdhYS0yMjBmMGMxNTZlYzAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NlY2Y1ZDk0 LTdmMWYtNDNiZi1iN2FhLTIyMGYwYzE1NmVjMC8wLzVBOEQ0REVDNUZDMjlCRTZF MjQ5MDQ2MkY1ODA5MDNERDRBOTg0RUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdQnowDQYJKoZIhvcNAQELBQADggEBAGlV0G/ju5cy/P6AkbOHDsgKCtUrx7Ud gCfFOkJEViVZI0NkmxOnmjDe6bREUHowUXw41js6FCmbjINdtwuhzCWvmZCugOQP HoHyPNroUFieg1G12om8EiMHeW4+hj7i96RC7UMXSDg+q+r0E2pEe1yjRVC947UO mq+CIX+tj5RNB82b0wwMB9ZTp89iZwEstFXh3ZJbtp7C3G22pYZ8yhq3sfpbs4Pl ydoqNsDu6ZESudyL/SAA8buzHUJH5HLfxcX7gIcnYT7AfkSG0fYWUuEPg+r2sKxt M3jTTUUAcA/PykDHSnt7Rq4RM9vaBsB8aMkaGVFVy2qaiiVPWS5/mMM= -----END CERTIFICATE-----Generated at Fri Jun 21 21:25:33 2024 by rpki-client on console-ams.rpki-client.org