$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer File: 7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer (raw, json) Hash identifier: bUIVNl9fSQ4MlmZZZrSMeGJdzEKkAMyxRJUju9jbLtw= Subject key identifier: 7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 5BA0456E10BF29E66318B9990FCC7BEA5FE1163C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft caRepository: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 04:22:45 +0000 Certificate not after: Thu 03 Apr 2025 04:27:45 +0000 Subordinate resources: IP: 157.20.212.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 00:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:a0:45:6e:10:bf:29:e6:63:18:b9:99:0f:cc:7b:ea:5f:e1:16:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 4 04:22:45 2024 GMT Not After : Apr 3 04:27:45 2025 GMT Subject: CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:77:dc:00:cd:cb:f9:15:95:5a:84:02:aa:99: 6b:67:f7:45:84:26:7f:3a:b8:ec:d3:bc:8d:bb:7d: 4f:32:ec:39:ec:75:08:3b:70:98:e5:a3:5f:b8:d5: 6e:50:8e:8a:ce:be:6c:cd:97:e3:02:eb:f0:d5:97: f0:30:c9:da:96:b3:13:e0:ac:72:6c:06:59:c1:30: ca:86:a4:d7:ae:62:fb:49:28:81:db:43:c6:7d:4a: 37:2b:ea:8d:eb:11:52:75:33:5e:15:a1:0a:5c:60: df:f8:41:80:7d:9d:65:c3:ee:54:62:57:ea:1a:3b: e1:a4:65:62:70:05:39:29:6c:e8:57:eb:dd:d3:58: e9:b8:56:7c:37:3e:98:d4:67:c8:f2:c8:66:e8:5c: 95:af:72:ec:8d:4f:a4:73:a0:0d:02:9b:af:12:4f: 1c:7f:1e:0b:6a:56:cc:0c:88:ad:d9:76:30:f4:be: 85:80:02:94:54:7a:be:80:80:44:25:72:f5:ee:d8: f1:75:8f:33:fa:2e:26:e1:48:35:df:19:c0:3c:cb: 1f:ef:ea:09:70:03:8f:43:c8:c5:19:36:98:9f:46: 4f:ea:86:fe:36:9b:b0:0d:c9:ad:73:5e:a9:ce:a4: d4:df:24:b5:a7:b1:5c:10:c6:5b:52:f0:af:dc:44: 28:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.212.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:22:20:79:b8:2f:73:1f:e5:8a:a3:11:f2:31:a0:fd:ca:9d: 35:9b:0a:65:ad:64:74:ae:6f:53:80:a7:ec:c1:c2:a9:c4:7b: 65:a7:5d:a9:24:eb:4d:6b:43:c9:fd:52:27:86:3e:2b:01:b2: cb:c5:6c:e4:a0:bc:9e:f6:e7:4e:6a:87:8b:df:fc:8d:b1:c9: 3a:44:cb:16:5d:12:cb:5a:37:ff:d1:7f:64:8f:86:98:8b:47: 2a:03:5b:cd:9e:de:97:ba:ed:3e:13:2d:0b:71:ea:97:bb:a6: 12:3c:97:f1:7d:92:fb:a4:1b:e2:cd:54:56:28:c5:41:6b:fa: ad:a1:f4:72:58:14:3e:56:a4:d7:f8:b6:0f:96:4f:65:7d:f9: 3a:1e:01:dc:38:70:a1:a6:26:20:c9:64:04:5e:37:b5:49:07: 61:f2:b5:2d:52:5c:eb:30:f9:cb:42:41:1e:92:9d:52:d2:60: b4:7d:a5:fa:76:6d:f8:98:cb:a7:f5:66:b4:dc:f0:84:12:c3: b3:83:11:0d:16:9d:6c:ae:c2:75:87:d2:56:b9:24:ad:10:0a: 33:3f:56:53:de:e5:21:9d:8d:e3:04:97:1f:70:e9:bd:89:3b: 02:3b:3e:df:c5:73:08:c4:83:9b:e2:0c:d4:0c:f5:e9:16:a4: 47:60:63:b4 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUW6BFbhC/KeZjGLmZD8x76l/hFjwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDQwNDA0MjI0NVoX DTI1MDQwMzA0Mjc0NVowMzExMC8GA1UEAxMoN0M0RUFDQjZBOEM4QzcyNzZENENF Qjg2RENEQ0EzRTdGNDY4QTc5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALx33ADNy/kVlVqEAqqZa2f3RYQmfzq47NO8jbt9TzLsOex1CDtwmOWjX7jV blCOis6+bM2X4wLr8NWX8DDJ2pazE+CscmwGWcEwyoak165i+0kogdtDxn1KNyvq jesRUnUzXhWhClxg3/hBgH2dZcPuVGJX6ho74aRlYnAFOSls6Ffr3dNY6bhWfDc+ mNRnyPLIZuhcla9y7I1PpHOgDQKbrxJPHH8eC2pWzAyIrdl2MPS+hYAClFR6voCA RCVy9e7Y8XWPM/ouJuFINd8ZwDzLH+/qCXADj0PIxRk2mJ9GT+qG/jabsA3JrXNe qc6k1N8ktaexXBDGW1Lwr9xEKJECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHxOrLaoyMcnbUzrhtzco+f0aKeTMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mM2I0N2FiNi1kMWYxLTRkMmUtOWNmYy04MDg0YTRiYWNmMGIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzYjQ3YWI2 LWQxZjEtNGQyZS05Y2ZjLTgwODRhNGJhY2YwYi8wLzdDNEVBQ0I2QThDOEM3Mjc2 RDRDRUI4NkRDRENBM0U3RjQ2OEE3OTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFNQwDQYJKoZIhvcNAQELBQADggEBAC0iIHm4L3Mf5YqjEfIxoP3KnTWbCmWt ZHSub1OAp+zBwqnEe2WnXakk601rQ8n9UieGPisBssvFbOSgvJ72505qh4vf/I2x yTpEyxZdEstaN//Rf2SPhpiLRyoDW82e3pe67T4TLQtx6pe7phI8l/F9kvukG+LN VFYoxUFr+q2h9HJYFD5WpNf4tg+WT2V9+ToeAdw4cKGmJiDJZAReN7VJB2HytS1S XOsw+ctCQR6SnVLSYLR9pfp2bfiYy6f1ZrTc8IQSw7ODEQ0WnWyuwnWH0la5JK0Q CjM/VlPe5SGdjeMElx9w6b2JOwI7Pt/FcwjEg5viDNQM9ekWpEdgY7Q= -----END CERTIFICATE-----Generated at Fri May 17 18:13:31 2024 by rpki-client on console-fra.rpki-client.org