$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer File: 7ED69B0DB232E419E90D72766374EA03E6F18F73.cer (raw, json) Hash identifier: wTI7lGwrVkzoP7pPnZ6oWv3/BTXVW992qt1uzkTfmvY= Subject key identifier: 7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0BCB40DF95E29E1EA6CB04B8ACE26E8E2CE9446D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft caRepository: rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 02 May 2024 11:13:14 +0000 Certificate not after: Thu 01 May 2025 11:18:14 +0000 Subordinate resources: IP: 157.20.94.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 18:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:cb:40:df:95:e2:9e:1e:a6:cb:04:b8:ac:e2:6e:8e:2c:e9:44:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 2 11:13:14 2024 GMT Not After : May 1 11:18:14 2025 GMT Subject: CN=7ED69B0DB232E419E90D72766374EA03E6F18F73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d3:ec:9d:ab:6e:83:08:58:12:0d:46:ad:bc: 9c:0c:68:34:ee:33:9e:24:ac:14:4d:03:14:39:8d: cd:7b:0f:fd:65:c8:7b:db:99:b1:70:5d:30:40:f1: 43:fa:bb:98:48:5c:c0:a3:ba:f4:29:41:97:88:90: 10:33:a2:44:bc:a0:f2:f7:1e:e7:e3:a4:41:64:66: 96:f5:5d:2e:0e:48:3c:66:00:00:d9:8f:65:4d:b8: f8:bc:72:14:44:ad:d2:40:f7:e9:26:50:13:be:5d: 85:00:49:91:c3:b4:06:d4:42:d0:f5:51:2f:7d:9f: 56:69:23:d9:f9:33:21:0b:94:22:a5:b6:b4:d2:56: b8:cd:92:f9:59:a4:53:d9:14:1a:68:1f:4d:b4:bb: e6:0f:5f:a3:c7:bf:64:11:36:d2:5d:33:90:b6:37: f5:aa:af:57:4c:b4:0b:81:0e:7a:da:a1:30:0a:7a: 2c:73:cf:0a:8e:e0:63:92:74:f0:14:05:cd:8f:fd: 97:aa:3d:4d:2f:e8:6c:1e:01:0a:4d:52:d2:5d:03: 60:da:7b:aa:e7:c6:4f:a9:4c:4a:a0:dc:81:7b:33: 83:b8:49:a3:d0:1e:e9:62:3d:dd:9d:85:4b:76:1a: ed:c6:ad:19:23:2d:df:89:6e:bd:e4:cf:ab:0f:2b: e4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.94.0/24 Signature Algorithm: sha256WithRSAEncryption 31:74:02:6b:d4:15:88:46:82:64:df:bb:78:02:d9:e3:12:52: 68:1d:f3:d0:d4:4c:03:9f:6a:41:05:70:c0:f9:71:01:eb:fb: 5b:9a:d2:15:a3:8e:7f:5a:84:b2:bf:f4:95:84:fd:e5:76:a1: c2:33:0f:f3:dd:16:94:6d:ee:47:ae:3f:c1:47:71:7a:e7:0c: 74:bc:40:9f:f6:bc:8c:7c:af:0d:d4:fb:c8:79:65:95:75:cb: 5e:28:01:12:82:52:74:f9:29:69:7c:31:1c:28:de:b4:98:72: 06:10:40:3b:a5:c4:7c:c8:83:0e:72:c1:f1:9f:4d:40:2f:42: 7c:23:32:c4:a4:65:e4:e9:9f:d4:d7:bd:cf:3a:95:36:2d:73: b3:c0:aa:08:83:7d:74:80:32:50:e3:9f:64:c4:fb:ad:8a:83: 49:6f:8f:28:71:6a:20:4d:f6:51:56:c4:a7:42:e3:ab:13:3b: 7f:29:ff:87:68:76:b0:8a:5a:ce:86:57:11:7b:77:df:71:6d: ab:df:bc:e5:87:97:77:5f:50:80:da:10:8f:8d:9a:c1:8f:bf: 41:78:a8:6c:a2:b2:52:9e:8b:53:3e:25:a2:86:1f:e3:7a:7c: b3:ca:9d:3c:3b:08:ec:41:c2:9b:df:6b:99:62:7a:12:49:2c: d0:b8:ee:19 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUC8tA35Xinh6mywS4rOJujizpRG0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDUwMjExMTMxNFoX DTI1MDUwMTExMTgxNFowMzExMC8GA1UEAxMoN0VENjlCMERCMjMyRTQxOUU5MEQ3 Mjc2NjM3NEVBMDNFNkYxOEY3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOnT7J2rboMIWBINRq28nAxoNO4zniSsFE0DFDmNzXsP/WXIe9uZsXBdMEDx Q/q7mEhcwKO69ClBl4iQEDOiRLyg8vce5+OkQWRmlvVdLg5IPGYAANmPZU24+Lxy FESt0kD36SZQE75dhQBJkcO0BtRC0PVRL32fVmkj2fkzIQuUIqW2tNJWuM2S+Vmk U9kUGmgfTbS75g9fo8e/ZBE20l0zkLY39aqvV0y0C4EOetqhMAp6LHPPCo7gY5J0 8BQFzY/9l6o9TS/obB4BCk1S0l0DYNp7qufGT6lMSqDcgXszg7hJo9Ae6WI93Z2F S3Ya7catGSMt34luveTPqw8r5K0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH7Wmw2yMuQZ6Q1ydmN06gPm8Y9zMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNzJkMTc1Mi00ODUzLTRjNzQtYjU3NC05OTRkM2IxMjQwOTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3MmQxNzUy LTQ4NTMtNGM3NC1iNTc0LTk5NGQzYjEyNDA5MC8wLzdFRDY5QjBEQjIzMkU0MTlF OTBENzI3NjYzNzRFQTAzRTZGMThGNzMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdFF4wDQYJKoZIhvcNAQELBQADggEBADF0AmvUFYhGgmTfu3gC2eMSUmgd89DU TAOfakEFcMD5cQHr+1ua0hWjjn9ahLK/9JWE/eV2ocIzD/PdFpRt7keuP8FHcXrn DHS8QJ/2vIx8rw3U+8h5ZZV1y14oARKCUnT5KWl8MRwo3rSYcgYQQDulxHzIgw5y wfGfTUAvQnwjMsSkZeTpn9TXvc86lTYtc7PAqgiDfXSAMlDjn2TE+62Kg0lvjyhx aiBN9lFWxKdC46sTO38p/4dodrCKWs6GVxF7d99xbavfvOWHl3dfUIDaEI+NmsGP v0F4qGyislKei1M+JaKGH+N6fLPKnTw7COxBwpvfa5liehJJLNC47hk= -----END CERTIFICATE-----Generated at Tue May 21 10:10:38 2024 by rpki-client on console-ams.rpki-client.org