$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer File: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer (raw, json) Hash identifier: V5hQjuMpiJPKZtzvdaE78+3x80D79Gg+fHl8tVbUkso= Subject key identifier: AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 36AC3EB9CBA9505613829AD88EA237BEE255282D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft caRepository: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 Nov 2024 11:51:39 +0000 Certificate not after: Sat 01 Nov 2025 11:56:39 +0000 Subordinate resources: IP: 157.66.40.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ac:3e:b9:cb:a9:50:56:13:82:9a:d8:8e:a2:37:be:e2:55:28:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 2 11:51:39 2024 GMT Not After : Nov 1 11:56:39 2025 GMT Subject: CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cc:d5:76:7c:da:14:c7:44:f5:b9:88:a5:af: 2e:f5:fb:53:20:86:1e:d8:2f:f3:9d:ee:01:a8:47: 71:cc:46:d1:ff:2f:00:9b:15:7b:41:b5:9f:b2:2a: 15:cf:7e:f0:63:cf:cd:a0:ee:64:e3:19:3d:8e:6a: c7:05:47:a2:f0:56:19:41:ce:53:4e:43:9e:d0:73: 28:8c:d2:d2:ee:23:ef:00:9b:24:8e:9e:4d:61:ce: 6e:88:20:fb:f5:ae:f6:46:f4:e7:fb:69:a4:fc:bc: 19:8b:85:d4:32:7e:79:40:f9:31:92:9c:39:90:a6: 62:aa:ae:da:c0:b2:e5:17:1a:14:1c:a9:41:9b:c5: 95:c6:e5:cf:a8:71:ab:f7:4c:9a:5d:d5:61:34:94: 4b:3e:28:de:01:c6:0f:4a:92:c8:b3:b6:ef:20:09: c4:42:d1:60:0b:e9:66:97:63:bd:b8:ef:dc:8e:0b: 86:0f:71:0b:6b:21:f9:20:06:ba:3f:98:5e:64:58: 9f:25:77:af:84:cf:71:9c:7e:d0:ac:9d:e2:5c:f2: b2:3f:f0:7e:17:78:24:f6:d9:be:55:bc:31:8f:9f: 9a:da:53:47:fc:8d:fe:e0:7e:c6:fc:8f:fe:ed:f7: 78:29:30:58:cd:a7:aa:14:b1:34:09:0a:bd:71:82: 13:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.40.0/23 Signature Algorithm: sha256WithRSAEncryption 27:4f:d2:3c:88:34:f6:c4:8e:23:53:88:62:06:e2:93:e8:9b: 80:a9:52:da:ae:65:9c:fc:71:fb:fa:40:c8:41:77:2b:ae:64: 90:01:29:5b:0a:29:92:a1:34:39:a8:62:8f:43:dd:51:be:37: 71:bc:bc:05:97:25:a6:e7:11:f5:16:ac:2a:a9:03:d2:66:c5: 84:0d:f4:6a:6d:52:5b:e2:c9:a0:a8:56:fc:93:93:3b:8e:ad: af:e4:47:cc:8e:bf:7a:89:49:61:e5:6b:49:49:7f:b7:ad:ab: 85:e3:12:54:b4:32:67:91:04:ba:ca:a1:45:8e:69:62:60:74: 9c:ea:2f:fe:5b:9f:24:d2:ea:0c:08:10:54:fc:d7:f7:61:84: 38:b8:08:13:62:2e:e4:7c:63:f3:7d:61:5a:8a:2c:7e:44:aa: 92:27:f3:17:14:6b:28:5a:3d:a9:ae:d8:5a:fd:d3:ec:3c:69: 64:fd:0a:93:34:e7:dc:67:8a:78:69:1e:3b:c8:39:fe:4d:ef: 42:ad:1b:dc:ab:cd:1c:41:5a:89:b4:af:32:76:8a:0d:d0:2c: a2:8f:93:f4:c7:9c:63:a2:7d:8c:9c:d4:26:cb:dc:da:53:6b: ab:59:62:2b:38:d8:55:e7:0f:52:56:98:85:c9:ef:bf:4f:6e: cf:3e:8f:ab -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUNqw+ucupUFYTgprYjqI3vuJVKC0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTEwMjExNTEzOVoX DTI1MTEwMTExNTYzOVowMzExMC8GA1UEAxMoQUY2ODcxQ0FGRDA1QzZGNjI1OUNE QzlCM0ZFODY1NkZDRURFQzNENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/M1XZ82hTHRPW5iKWvLvX7UyCGHtgv853uAahHccxG0f8vAJsVe0G1n7Iq Fc9+8GPPzaDuZOMZPY5qxwVHovBWGUHOU05DntBzKIzS0u4j7wCbJI6eTWHObogg +/Wu9kb05/tppPy8GYuF1DJ+eUD5MZKcOZCmYqqu2sCy5RcaFBypQZvFlcblz6hx q/dMml3VYTSUSz4o3gHGD0qSyLO27yAJxELRYAvpZpdjvbjv3I4Lhg9xC2sh+SAG uj+YXmRYnyV3r4TPcZx+0Kyd4lzysj/wfhd4JPbZvlW8MY+fmtpTR/yN/uB+xvyP /u33eCkwWM2nqhSxNAkKvXGCE9sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK9occr9Bcb2JZzcmz/oZW/O3sPVMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83N2YyYzE5MC0zMGY1LTRmMTktYmZjYS0wYjk4N2E1MmZkNTUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3ZjJjMTkw LTMwZjUtNGYxOS1iZmNhLTBiOTg3YTUyZmQ1NS8wL0FGNjg3MUNBRkQwNUM2RjYy NTlDREM5QjNGRTg2NTZGQ0VERUMzRDUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdQigwDQYJKoZIhvcNAQELBQADggEBACdP0jyINPbEjiNTiGIG4pPom4CpUtqu ZZz8cfv6QMhBdyuuZJABKVsKKZKhNDmoYo9D3VG+N3G8vAWXJabnEfUWrCqpA9Jm xYQN9GptUlviyaCoVvyTkzuOra/kR8yOv3qJSWHla0lJf7etq4XjElS0MmeRBLrK oUWOaWJgdJzqL/5bnyTS6gwIEFT81/dhhDi4CBNiLuR8Y/N9YVqKLH5EqpIn8xcU ayhaPamu2Fr90+w8aWT9CpM059xninhpHjvIOf5N70KtG9yrzRxBWom0rzJ2ig3Q LKKPk/THnGOifYyc1CbL3NpTa6tZYis42FXnD1JWmIXJ779Pbs8+j6s= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org