$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer File: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer (raw, json) Hash identifier: lCeV6nPBYzy/CNqB0LwLYUncCo9N501YOvkLuFyicoQ= Subject key identifier: 5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 46AE3E822F4A3283A873EFD393EAD53BD3E2F499 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft caRepository: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 17 Jul 2024 17:18:45 +0000 Certificate not after: Wed 16 Jul 2025 17:23:45 +0000 Subordinate resources: IP: 157.66.62.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ae:3e:82:2f:4a:32:83:a8:73:ef:d3:93:ea:d5:3b:d3:e2:f4:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 17 17:18:45 2024 GMT Not After : Jul 16 17:23:45 2025 GMT Subject: CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f0:14:7e:ac:2d:03:00:03:27:55:5f:01:ee: a5:7e:88:98:e8:e4:7b:8a:17:8c:87:d4:24:0d:fb: 22:f8:6e:a0:bc:cc:c6:16:76:e1:d2:98:a1:27:9e: bb:df:89:14:19:34:14:02:d6:9b:33:fa:07:ac:82: bf:38:aa:41:49:e8:e9:74:39:53:ce:05:49:b4:ad: 8d:a9:dd:32:76:b0:78:65:a2:73:03:26:b3:7f:0a: 6c:32:ea:b0:43:ec:47:f2:46:2d:6f:ad:ed:ba:c3: ca:37:ea:f9:7d:fb:1d:31:d5:22:0f:e9:85:7b:bf: e5:81:87:63:ca:5f:3c:11:10:61:c7:3e:a0:d3:69: bf:8a:56:7e:4e:b5:e6:c0:aa:c4:8b:1f:43:51:4b: 68:17:34:e0:fc:ec:df:77:14:45:59:14:88:03:39: 06:cb:e3:59:91:fa:54:d8:0e:06:26:52:3b:5e:f6: 2e:3e:c8:1c:87:30:61:29:a2:88:11:db:bc:fb:11: 4a:fe:e6:8a:fd:78:87:e7:a0:23:90:1f:94:df:30: b8:49:a8:0e:10:a8:2d:ef:af:ed:ab:e9:b9:66:73: 6a:01:8b:6a:58:5e:05:69:4a:02:84:74:26:28:87: b4:cf:8f:ac:2d:27:a8:00:75:fd:a7:f1:a4:ee:60: ed:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.62.0/23 Signature Algorithm: sha256WithRSAEncryption 50:d3:c2:c0:c9:3f:e1:0d:4b:1e:53:35:c1:f0:4f:58:e7:45: 3e:5a:f0:03:a3:41:c0:c4:74:c2:df:cb:4d:80:f2:9f:b0:27: f1:b3:83:ac:ce:e1:df:73:d0:6b:fd:90:51:de:c0:01:9b:a9: 3a:10:61:d4:8d:86:27:bb:f5:13:e7:f8:dd:94:c1:15:73:0d: 8f:70:cb:80:45:0f:08:d7:81:cd:5c:41:13:a9:12:46:ca:f8: 77:7f:e2:d4:82:5a:47:e3:53:52:f2:7f:1b:9d:f4:89:c9:88: f1:ab:53:01:7b:18:79:14:a1:f7:a5:7a:91:ae:02:cc:e9:3e: 1f:c4:ac:ff:77:c1:ed:cb:22:10:ab:03:c0:3d:74:40:e0:80: 71:b6:ca:40:ed:5e:f1:1c:2e:ce:b1:8d:f5:4d:19:81:b5:ce: fb:92:a2:05:6d:b7:59:6c:86:af:1d:69:bc:73:89:9d:b0:14: 0e:08:e1:a5:6e:c1:63:c6:2f:cf:3e:11:42:be:41:e7:1e:5d: cd:03:3c:6b:ed:80:b9:32:86:3a:cf:9d:de:50:b7:92:92:df: 7b:a1:20:6d:be:15:65:4d:dc:6a:af:01:2d:d7:e3:52:71:7e: cd:bb:4d:b6:c5:b4:43:76:5c:f7:6f:34:e5:2b:3b:11:4c:f1: 11:14:e2:c9 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURq4+gi9KMoOoc+/Tk+rVO9Pi9JkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDcxNzE3MTg0NVoX DTI1MDcxNjE3MjM0NVowMzExMC8GA1UEAxMoNUM3MjA2RENCMUI4MDM0QTQ4NUM5 MjE2MUIyRTJDNzY2Mjc4MEI3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPwFH6sLQMAAydVXwHupX6ImOjke4oXjIfUJA37IvhuoLzMxhZ24dKYoSee u9+JFBk0FALWmzP6B6yCvziqQUno6XQ5U84FSbStjandMnaweGWicwMms38KbDLq sEPsR/JGLW+t7brDyjfq+X37HTHVIg/phXu/5YGHY8pfPBEQYcc+oNNpv4pWfk61 5sCqxIsfQ1FLaBc04Pzs33cURVkUiAM5BsvjWZH6VNgOBiZSO172Lj7IHIcwYSmi iBHbvPsRSv7miv14h+egI5AflN8wuEmoDhCoLe+v7avpuWZzagGLalheBWlKAoR0 JiiHtM+PrC0nqAB1/afxpO5g7TcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFxyBtyxuANKSFySFhsuLHZieAt/MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83ZGRiYjc5Yy05ZWEyLTQ3ZjAtYjQ1Zi0xODE2NjUwYmEyM2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdkZGJiNzlj LTllYTItNDdmMC1iNDVmLTE4MTY2NTBiYTIzZi8wLzVDNzIwNkRDQjFCODAzNEE0 ODVDOTIxNjFCMkUyQzc2NjI3ODBCN0YubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdQj4wDQYJKoZIhvcNAQELBQADggEBAFDTwsDJP+ENSx5TNcHwT1jnRT5a8AOj QcDEdMLfy02A8p+wJ/Gzg6zO4d9z0Gv9kFHewAGbqToQYdSNhie79RPn+N2UwRVz DY9wy4BFDwjXgc1cQROpEkbK+Hd/4tSCWkfjU1Lyfxud9InJiPGrUwF7GHkUofel epGuAszpPh/ErP93we3LIhCrA8A9dEDggHG2ykDtXvEcLs6xjfVNGYG1zvuSogVt t1lshq8dabxziZ2wFA4I4aVuwWPGL88+EUK+QeceXc0DPGvtgLkyhjrPnd5Qt5KS 33uhIG2+FWVN3GqvAS3X41Jxfs27TbbFtEN2XPdvNOUrOxFM8REU4sk= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org