$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer File: 99A17325620A243689E32E6074D5CFCA91D915EB.cer (raw, json) Hash identifier: VcdG4M3Fqf39ZXsGk2srnbxkPf11wgSvXPWVnjlWB3A= Subject key identifier: 99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0533718D8CE436204374A9F0E1FB370AC6917405 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft caRepository: rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 28 Mar 2024 15:34:27 +0000 Certificate not after: Thu 27 Mar 2025 15:39:27 +0000 Subordinate resources: IP: 157.20.156.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 00:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:33:71:8d:8c:e4:36:20:43:74:a9:f0:e1:fb:37:0a:c6:91:74:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 28 15:34:27 2024 GMT Not After : Mar 27 15:39:27 2025 GMT Subject: CN=99A17325620A243689E32E6074D5CFCA91D915EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fd:ca:0b:09:dc:6e:f2:b0:16:5c:93:24:ea: a0:70:cd:71:62:35:4d:6f:e9:e0:eb:e0:f8:b7:0b: 9f:d4:89:de:03:e4:e9:7b:0c:8f:48:66:91:35:d5: d0:6f:45:0c:0c:17:6e:5d:89:eb:b8:f4:4b:29:6e: 26:05:4f:5c:8c:6e:1e:1a:63:76:b5:ae:57:4f:70: 1a:e0:d1:fe:ff:d3:9f:a2:55:26:b4:79:ab:bd:0f: 3d:dd:9f:54:2b:1b:bf:a2:95:ed:68:ea:33:72:c8: 0b:6f:97:7d:56:ae:c1:0d:87:1a:63:e5:08:32:08: 36:f4:ff:fc:e3:89:de:a3:87:dc:b5:24:b5:31:59: d3:ee:f8:29:3c:91:38:c4:55:b4:9f:6a:18:90:3a: f3:1b:d8:cb:c4:d0:c6:ef:19:b6:59:6f:bc:3a:fd: a3:29:f9:bf:72:cd:5b:fe:97:bf:6a:46:dd:8b:44: ea:7c:12:0f:23:19:74:fd:10:ae:b3:2d:13:e3:86: 37:66:b8:97:1a:b7:32:48:06:5b:14:ab:b4:62:8c: 7e:48:ad:32:ee:92:98:5e:25:ef:22:e5:2e:15:80: f6:bd:44:72:6d:dc:af:59:d1:fc:ef:d8:e0:c8:5c: a0:70:48:2c:22:0d:74:6c:9d:6f:26:20:71:c8:d5: 3a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.156.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:23:88:4b:ca:69:a1:d5:af:0c:66:6a:b5:86:e9:41:20:75: cf:19:ac:e4:4f:64:91:7c:03:e3:cb:6d:55:c6:da:9e:d1:ac: b8:44:40:79:0c:9e:c0:eb:50:95:d2:6f:42:ca:05:0f:02:97: ee:97:8a:81:8e:a5:1f:1f:36:c6:1c:ae:0d:f9:01:79:b0:c2: fb:ac:ce:3e:64:e6:88:86:a2:28:06:21:20:72:ce:83:7f:2e: 4b:39:79:36:a8:db:bf:3e:86:e5:14:e6:9c:5c:0b:7f:5e:63: 2f:38:65:91:62:c7:81:c1:22:e9:10:37:43:58:30:a8:ea:29: 79:03:b9:5c:f6:bc:1d:90:2c:cf:5d:86:27:16:ba:08:0e:d4: 5c:e4:a4:45:61:c7:35:fa:b0:50:92:3f:e5:16:89:85:75:3a: 9c:e7:de:5f:4f:00:9a:f9:0f:9a:28:8d:eb:2d:09:ce:9e:05: 51:ee:57:b2:f0:6d:c4:44:99:77:d4:c4:91:46:d2:41:aa:93: 2a:b3:a4:9b:01:95:b7:0f:74:10:d4:f6:67:9e:b4:37:de:ef: 36:f3:3b:e8:7c:b2:51:ac:89:1c:71:c3:fe:33:c8:cc:0d:5f: f7:55:ef:ae:21:33:dd:b7:d2:41:35:ea:44:86:68:43:30:d7: 96:41:43:f9 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUBTNxjYzkNiBDdKnw4fs3CsaRdAUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDMyODE1MzQyN1oX DTI1MDMyNzE1MzkyN1owMzExMC8GA1UEAxMoOTlBMTczMjU2MjBBMjQzNjg5RTMy RTYwNzRENUNGQ0E5MUQ5MTVFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOD9ygsJ3G7ysBZckyTqoHDNcWI1TW/p4Ovg+LcLn9SJ3gPk6XsMj0hmkTXV 0G9FDAwXbl2J67j0SyluJgVPXIxuHhpjdrWuV09wGuDR/v/Tn6JVJrR5q70PPd2f VCsbv6KV7WjqM3LIC2+XfVauwQ2HGmPlCDIINvT//OOJ3qOH3LUktTFZ0+74KTyR OMRVtJ9qGJA68xvYy8TQxu8ZtllvvDr9oyn5v3LNW/6Xv2pG3YtE6nwSDyMZdP0Q rrMtE+OGN2a4lxq3MkgGWxSrtGKMfkitMu6SmF4l7yLlLhWA9r1Ecm3cr1nR/O/Y 4MhcoHBILCINdGydbyYgccjVOjcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJmhcyViCiQ2ieMuYHTVz8qR2RXrMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ZDU5YjgyMi01YzA4LTQ2ZjEtYjI1ZS03NThkYzE4ZTk5MDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkNTliODIy LTVjMDgtNDZmMS1iMjVlLTc1OGRjMThlOTkwNS8wLzk5QTE3MzI1NjIwQTI0MzY4 OUUzMkU2MDc0RDVDRkNBOTFEOTE1RUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFJwwDQYJKoZIhvcNAQELBQADggEBAIojiEvKaaHVrwxmarWG6UEgdc8ZrORP ZJF8A+PLbVXG2p7RrLhEQHkMnsDrUJXSb0LKBQ8Cl+6XioGOpR8fNsYcrg35AXmw wvuszj5k5oiGoigGISByzoN/Lks5eTao278+huUU5pxcC39eYy84ZZFix4HBIukQ N0NYMKjqKXkDuVz2vB2QLM9dhicWuggO1FzkpEVhxzX6sFCSP+UWiYV1Opzn3l9P AJr5D5oojestCc6eBVHuV7LwbcREmXfUxJFG0kGqkyqzpJsBlbcPdBDU9meetDfe 7zbzO+h8slGsiRxxw/4zyMwNX/dV764hM9230kE16kSGaEMw15ZBQ/k= -----END CERTIFICATE-----Generated at Fri May 17 18:13:31 2024 by rpki-client on console-fra.rpki-client.org