$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer File: 62F71C75A752B45AE4B51A4E7010124979820A90.cer (raw, json) Hash identifier: xpfUQCIMtk/N9dV1VI9F1AYH1HbkEcYXA+M5hhNIelg= Subject key identifier: 62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 595E8BF8A09CB65DED9E949F3AE4D5942DF2A6C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft caRepository: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 09 Jun 2024 14:18:59 +0000 Certificate not after: Sun 08 Jun 2025 14:23:59 +0000 Subordinate resources: IP: 157.66.192.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5e:8b:f8:a0:9c:b6:5d:ed:9e:94:9f:3a:e4:d5:94:2d:f2:a6:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 9 14:18:59 2024 GMT Not After : Jun 8 14:23:59 2025 GMT Subject: CN=62F71C75A752B45AE4B51A4E7010124979820A90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:f9:1d:41:c2:8b:ab:a2:a9:31:85:88:7c: 85:24:95:d3:23:76:e1:a8:53:0e:f7:cf:12:ab:2b: e5:38:ff:68:59:85:ce:a1:b7:01:96:f6:b5:df:05: ca:95:f4:ae:34:86:cf:db:4e:04:2f:3a:15:5c:17: ba:57:46:ee:87:32:52:79:73:49:03:c2:59:e6:45: 0d:8b:0d:13:8c:1d:32:66:53:8c:cf:c0:cf:8c:2f: 17:a8:a6:e9:9f:2c:a4:62:e7:19:3b:c8:1f:13:07: cd:36:4a:d2:33:db:44:d5:a4:a4:c5:1e:56:20:ed: 44:cc:fd:24:1c:ca:8a:c0:ee:0b:42:de:e7:08:fc: 1b:08:f8:81:7d:9f:28:07:3e:bf:1b:b6:02:ae:7d: 2f:4d:65:97:e3:c6:a5:77:7b:8a:28:82:d1:f4:0e: c1:bf:40:f8:9c:7d:08:b3:63:20:bd:ed:ec:5d:ae: fe:e8:57:97:c7:0e:47:27:ee:f9:f9:ec:4f:8b:d0: e3:50:75:b4:02:79:0a:fe:36:74:e7:0c:06:b6:20: b4:1b:b8:be:86:f3:9b:02:da:54:57:e7:69:5c:3f: d9:96:e1:f1:04:52:c3:a4:02:2e:0e:bf:70:48:d9: 1b:f6:1f:a6:b0:7c:bd:d3:19:a8:d0:c3:ab:52:2a: ec:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.192.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:f5:d5:a1:ab:75:d2:00:5d:d7:b1:c0:fa:d8:23:9b:b8:3b: 68:b3:4e:5e:7d:24:a9:70:c7:ad:39:0d:76:18:82:0d:47:9d: a9:fa:12:e7:64:09:57:b4:84:5d:9f:bc:73:f8:b7:ec:68:1e: 05:21:47:64:3b:86:d4:12:bc:3c:ff:1a:d8:0a:9d:47:a6:41: 39:bb:60:94:86:85:39:e9:b0:c2:bc:c4:90:4b:68:1f:f4:37: 54:10:2e:9c:4f:84:14:f2:c7:1c:f7:f4:f7:b1:79:d9:e7:6f: a0:30:0e:aa:aa:ad:8f:80:90:84:ac:3a:f6:0d:16:2f:e8:7f: 8d:d4:aa:0c:e6:2a:94:e7:71:e6:f1:fc:91:ed:8f:98:15:bf: 36:5d:a1:23:39:de:7a:cd:9b:6e:80:7b:b6:11:4e:93:9b:d3: 77:55:e6:7f:96:ad:a3:b4:e7:53:8e:b1:34:38:05:5c:e3:2e: 3e:b1:71:d4:b0:c8:1d:6b:43:a3:98:1c:85:19:0f:80:8f:c9: 1c:a6:7c:2f:b6:67:da:b7:9d:ca:b4:6e:88:d1:dd:58:40:4f: d7:85:78:63:d3:db:39:6f:7a:3a:78:15:ce:d2:72:e2:99:59: 68:e8:61:db:f2:c3:9e:3f:90:a5:39:01:58:9b:83:28:1d:a9: 7e:c5:60:c2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUWV6L+KCctl3tnpSfOuTVlC3ypskwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDYwOTE0MTg1OVoX DTI1MDYwODE0MjM1OVowMzExMC8GA1UEAxMoNjJGNzFDNzVBNzUyQjQ1QUU0QjUx QTRFNzAxMDEyNDk3OTgyMEE5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbf+R1BwouroqkxhYh8hSSV0yN24ahTDvfPEqsr5Tj/aFmFzqG3AZb2td8F ypX0rjSGz9tOBC86FVwXuldG7ocyUnlzSQPCWeZFDYsNE4wdMmZTjM/Az4wvF6im 6Z8spGLnGTvIHxMHzTZK0jPbRNWkpMUeViDtRMz9JBzKisDuC0Le5wj8Gwj4gX2f KAc+vxu2Aq59L01ll+PGpXd7iiiC0fQOwb9A+Jx9CLNjIL3t7F2u/uhXl8cORyfu +fnsT4vQ41B1tAJ5Cv42dOcMBrYgtBu4vobzmwLaVFfnaVw/2Zbh8QRSw6QCLg6/ cEjZG/YfprB8vdMZqNDDq1Iq7HECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGL3HHWnUrRa5LUaTnAQEkl5ggqQMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBkZTJkMDkw LTQ3NjYtNDc1Yy05Y2VmLTdiZWI1ODVjZjI0MS8wLzYyRjcxQzc1QTc1MkI0NUFF NEI1MUE0RTcwMTAxMjQ5Nzk4MjBBOTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdQsAwDQYJKoZIhvcNAQELBQADggEBAEz11aGrddIAXdexwPrYI5u4O2izTl59 JKlwx605DXYYgg1Hnan6EudkCVe0hF2fvHP4t+xoHgUhR2Q7htQSvDz/GtgKnUem QTm7YJSGhTnpsMK8xJBLaB/0N1QQLpxPhBTyxxz39Pexednnb6AwDqqqrY+AkISs OvYNFi/of43UqgzmKpTncebx/JHtj5gVvzZdoSM53nrNm26Ae7YRTpOb03dV5n+W raO051OOsTQ4BVzjLj6xcdSwyB1rQ6OYHIUZD4CPyRymfC+2Z9q3ncq0bojR3VhA T9eFeGPT2zlvejp4Fc7ScuKZWWjoYdvyw54/kKU5AVibgygdqX7FYMI= -----END CERTIFICATE-----Generated at Fri Jun 21 21:25:33 2024 by rpki-client on console-ams.rpki-client.org