$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer File: 871B4235DFC56C482416E7BBA192562092FFE055.cer (raw, json) Hash identifier: a6QX63vNJt3wf+2rJjt8O+Qt7QshYSu9cAQotfBgQm8= Subject key identifier: 87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 707E0E2C243E5420C32879832BCE7ED87F2C953F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft caRepository: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 19 Mar 2024 04:18:24 +0000 Certificate not after: Tue 18 Mar 2025 04:23:24 +0000 Subordinate resources: IP: 157.20.92.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 00:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:7e:0e:2c:24:3e:54:20:c3:28:79:83:2b:ce:7e:d8:7f:2c:95:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 19 04:18:24 2024 GMT Not After : Mar 18 04:23:24 2025 GMT Subject: CN=871B4235DFC56C482416E7BBA192562092FFE055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:60:e8:27:ac:2a:94:fc:6b:2f:84:a4:43:50: 49:df:35:d9:36:42:31:5a:93:c1:f2:1b:36:cf:20: 54:89:b3:ce:43:dc:26:d0:67:40:1e:c1:c5:ec:e1: 8e:d1:26:e2:85:7b:5c:7b:f1:24:60:fb:bb:87:0f: f5:82:7e:af:1e:8b:e0:19:6c:56:c6:f7:b7:81:97: 22:20:2a:38:eb:52:79:e2:38:6b:da:53:69:9f:ef: 2c:4b:0b:8f:68:6b:3a:40:36:00:ff:a3:9a:4a:06: 57:de:ae:6f:eb:10:3a:44:1a:33:88:a5:cb:ab:a1: 0c:77:b6:a7:a6:36:e5:31:62:d0:dc:00:52:b6:09: 03:dc:9a:2d:8b:80:cc:30:e3:f6:97:3c:84:a1:69: 45:4c:f1:41:16:00:7a:21:58:be:93:f3:1e:65:63: d6:57:68:5c:44:80:70:a7:2f:ae:64:cf:51:62:75: b2:1c:07:4a:63:3b:f6:fa:7a:61:f4:15:a3:82:6b: 1c:2b:59:0b:d4:9f:98:2f:0c:82:1b:fd:30:5d:25: 69:69:b2:ae:74:43:b9:13:38:b7:11:92:61:7a:09: e8:84:2c:29:2c:bb:ac:df:2b:10:92:52:eb:0c:36: df:0a:dd:46:f1:04:2f:0a:3a:01:e0:32:35:2b:e1: be:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.92.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:b2:ee:56:8c:aa:c9:38:8b:9b:2c:dc:0f:a0:f2:9c:60:85: 2e:dc:46:b7:d2:8b:91:27:31:21:06:ae:36:8f:61:1d:10:8c: 6d:69:53:cb:7b:68:31:65:ae:f5:41:bf:09:8a:d5:c6:92:dd: bb:75:32:8d:8b:55:5c:c8:73:c2:92:09:ce:96:bf:f4:e7:b4: fc:2c:2d:fb:1e:c5:86:5a:e1:a6:20:42:1d:c3:43:a7:1e:34: 8e:bc:7f:b0:ee:4f:d3:b2:07:ac:fe:19:b2:42:00:67:17:80: c7:67:a7:e9:13:7f:22:90:44:2f:e0:5f:06:36:bc:71:cd:5c: c4:d2:24:a3:7d:0e:46:75:35:d2:7c:3d:35:89:94:23:c5:eb: 4a:0c:a9:c6:57:0f:52:e4:2a:3e:24:41:4c:66:d6:56:bc:ae: 0d:ca:58:1b:3c:22:64:12:d1:88:b7:5e:31:1c:5d:9f:fc:5a: 63:11:20:2d:27:fd:0a:dc:7d:13:f3:60:25:b3:8a:f8:43:c0: 6c:34:34:47:01:75:de:5f:80:c6:89:b3:fb:87:24:20:8b:82: d8:95:b3:b8:25:fb:ad:69:e5:61:30:ce:48:57:67:e9:1e:db: f2:ee:ae:8e:72:1b:8f:e0:2c:0d:8c:bc:b2:e3:c2:d6:54:14: 79:51:81:c5 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUcH4OLCQ+VCDDKHmDK85+2H8slT8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDMxOTA0MTgyNFoX DTI1MDMxODA0MjMyNFowMzExMC8GA1UEAxMoODcxQjQyMzVERkM1NkM0ODI0MTZF N0JCQTE5MjU2MjA5MkZGRTA1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPpg6CesKpT8ay+EpENQSd812TZCMVqTwfIbNs8gVImzzkPcJtBnQB7Bxezh jtEm4oV7XHvxJGD7u4cP9YJ+rx6L4BlsVsb3t4GXIiAqOOtSeeI4a9pTaZ/vLEsL j2hrOkA2AP+jmkoGV96ub+sQOkQaM4ily6uhDHe2p6Y25TFi0NwAUrYJA9yaLYuA zDDj9pc8hKFpRUzxQRYAeiFYvpPzHmVj1ldoXESAcKcvrmTPUWJ1shwHSmM79vp6 YfQVo4JrHCtZC9SfmC8Mghv9MF0laWmyrnRDuRM4txGSYXoJ6IQsKSy7rN8rEJJS 6ww23wrdRvEELwo6AeAyNSvhvhECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIcbQjXfxWxIJBbnu6GSViCS/+BVMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82YTg5NmZkYy01NjM4LTQxZDItOGE5OS02OGNlODE2YmQzY2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZhODk2ZmRj LTU2MzgtNDFkMi04YTk5LTY4Y2U4MTZiZDNjZi8wLzg3MUI0MjM1REZDNTZDNDgy NDE2RTdCQkExOTI1NjIwOTJGRkUwNTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFFwwDQYJKoZIhvcNAQELBQADggEBAGuy7laMqsk4i5ss3A+g8pxghS7cRrfS i5EnMSEGrjaPYR0QjG1pU8t7aDFlrvVBvwmK1caS3bt1Mo2LVVzIc8KSCc6Wv/Tn tPwsLfsexYZa4aYgQh3DQ6ceNI68f7DuT9OyB6z+GbJCAGcXgMdnp+kTfyKQRC/g XwY2vHHNXMTSJKN9DkZ1NdJ8PTWJlCPF60oMqcZXD1LkKj4kQUxm1la8rg3KWBs8 ImQS0Yi3XjEcXZ/8WmMRIC0n/QrcfRPzYCWzivhDwGw0NEcBdd5fgMaJs/uHJCCL gtiVs7gl+61p5WEwzkhXZ+ke2/Luro5yG4/gLA2MvLLjwtZUFHlRgcU= -----END CERTIFICATE-----Generated at Fri May 17 17:47:04 2024 by rpki-client on console-ams.rpki-client.org