$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer File: AA97B959271291FBE142491B81063AD5B04487FA.cer (raw, json) Hash identifier: laIRgGZdjXXA6eWEuJ/PXT+cHB6KkwJphM60+S3hJZ4= Subject key identifier: AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 663ADE525A3D1856FCD52F1248A48DDBE6786DB1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft caRepository: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 05 Apr 2024 04:12:13 +0000 Certificate not after: Fri 04 Apr 2025 04:17:13 +0000 Subordinate resources: IP: 157.15.172.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 00:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:3a:de:52:5a:3d:18:56:fc:d5:2f:12:48:a4:8d:db:e6:78:6d:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 5 04:12:13 2024 GMT Not After : Apr 4 04:17:13 2025 GMT Subject: CN=AA97B959271291FBE142491B81063AD5B04487FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:9b:b2:8f:63:56:0b:3d:31:a5:62:56:51: 6f:78:93:2a:a3:b8:5f:4a:6e:5b:74:44:14:5e:ef: 17:78:3e:00:5d:c8:0b:0d:d2:79:7d:d9:36:24:33: 06:a9:68:5f:e7:d8:c9:99:e3:fe:30:97:75:38:b5: 90:ba:4c:76:1a:68:5a:3b:71:8d:8a:ad:08:0b:f3: a3:8e:f7:4a:3b:a5:0a:5a:da:a9:cf:91:58:e4:01: 30:e2:0a:ae:ae:9b:59:55:62:8d:50:10:a4:6d:e9: ae:75:be:85:95:4c:9b:45:21:6f:98:51:76:da:a8: ae:b3:00:0e:44:d4:ca:53:19:bf:45:98:f8:bc:ca: 24:07:10:98:ec:66:aa:cd:85:26:4a:49:03:30:d2: 3f:36:1d:be:1b:be:a7:73:68:b8:54:25:93:6b:a8: 0d:06:cf:48:10:21:61:4c:bb:f2:95:fb:d3:b4:3a: e1:4c:22:ea:cc:c3:1e:7e:ef:e8:78:39:8c:92:d3: d8:32:9c:3f:5e:2d:d8:02:4c:1c:ee:9d:3b:fc:95: fa:10:f9:40:38:33:54:db:e6:1d:79:28:d6:1c:08: 4e:5b:3f:1a:f6:9f:be:c7:62:01:9d:7c:8a:a7:41: df:80:1a:43:b5:c2:01:11:e1:ad:d1:81:71:c0:ba: 7c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.172.0/23 Signature Algorithm: sha256WithRSAEncryption 30:9b:a9:63:f0:01:71:ea:68:49:32:6e:1f:1a:96:b2:cf:0f: 2d:ac:e4:5e:70:c8:e1:dd:80:5e:ed:7b:9a:16:b5:ad:43:1e: d3:d0:07:d7:a2:ca:41:2e:89:c4:6a:5d:d9:e6:15:85:e8:a1: 5a:d2:9b:ea:20:40:3b:59:29:59:eb:fe:64:2d:d4:04:2c:93: 77:0b:41:7c:11:5d:a4:57:35:3b:9b:8c:e6:5e:37:a6:79:2a: 75:f1:96:25:e0:34:06:2a:5f:80:72:8b:95:b0:f4:b8:7f:37: 3f:c1:20:21:cd:31:e3:b7:89:fc:e8:c9:52:e3:3f:cd:40:0c: bf:61:ab:95:ae:b6:de:2b:e2:4f:e0:20:b2:32:3f:c3:98:8b: 44:76:96:57:d3:d0:6d:59:7c:ec:d2:1b:6b:d1:d6:22:a3:3f: 60:ea:6d:66:f3:e2:c2:22:08:58:f7:9d:b5:e7:d1:f3:4f:2c: 99:50:91:ad:c0:2f:e4:1b:db:10:a5:52:24:52:33:63:c1:e2: d0:f2:03:57:c1:c5:dc:f5:9f:13:01:35:67:c6:68:8a:59:76: 28:7a:2b:7b:43:71:c6:64:18:be:33:0c:00:f3:2d:55:66:7b: 20:fa:1e:b4:0d:07:17:ea:d8:5b:0a:e5:3c:28:d0:0d:c0:c3: 06:54:e1:46 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZjreUlo9GFb81S8SSKSN2+Z4bbEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDQwNTA0MTIxM1oX DTI1MDQwNDA0MTcxM1owMzExMC8GA1UEAxMoQUE5N0I5NTkyNzEyOTFGQkUxNDI0 OTFCODEwNjNBRDVCMDQ0ODdGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALIjm7KPY1YLPTGlYlZRb3iTKqO4X0puW3REFF7vF3g+AF3ICw3SeX3ZNiQz BqloX+fYyZnj/jCXdTi1kLpMdhpoWjtxjYqtCAvzo473SjulClraqc+RWOQBMOIK rq6bWVVijVAQpG3prnW+hZVMm0Uhb5hRdtqorrMADkTUylMZv0WY+LzKJAcQmOxm qs2FJkpJAzDSPzYdvhu+p3NouFQlk2uoDQbPSBAhYUy78pX707Q64Uwi6szDHn7v 6Hg5jJLT2DKcP14t2AJMHO6dO/yV+hD5QDgzVNvmHXko1hwITls/GvafvsdiAZ18 iqdB34AaQ7XCARHhrdGBccC6fH0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKqXuVknEpH74UJJG4EGOtWwRIf6MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lZGU4Y2NiOS0wYTYzLTQ5YTktYWE4YS1lZDAxNmVlMzUxZjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VkZThjY2I5 LTBhNjMtNDlhOS1hYThhLWVkMDE2ZWUzNTFmMC8wL0FBOTdCOTU5MjcxMjkxRkJF MTQyNDkxQjgxMDYzQUQ1QjA0NDg3RkEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdD6wwDQYJKoZIhvcNAQELBQADggEBADCbqWPwAXHqaEkybh8alrLPDy2s5F5w yOHdgF7te5oWta1DHtPQB9eiykEuicRqXdnmFYXooVrSm+ogQDtZKVnr/mQt1AQs k3cLQXwRXaRXNTubjOZeN6Z5KnXxliXgNAYqX4Byi5Ww9Lh/Nz/BICHNMeO3ifzo yVLjP81ADL9hq5Wutt4r4k/gILIyP8OYi0R2llfT0G1ZfOzSG2vR1iKjP2DqbWbz 4sIiCFj3nbXn0fNPLJlQka3AL+Qb2xClUiRSM2PB4tDyA1fBxdz1nxMBNWfGaIpZ dih6K3tDccZkGL4zDADzLVVmeyD6HrQNBxfq2FsK5Two0A3AwwZU4UY= -----END CERTIFICATE-----Generated at Fri May 17 18:13:31 2024 by rpki-client on console-fra.rpki-client.org