$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer File: B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer (raw, json) Hash identifier: xIlfV30zoILbsQBytga/lKNVx1VIX5UuvI83IBe5jxc= Subject key identifier: B9:14:C6:1A:5D:B1:C6:5E:66:CE:5A:F6:4C:3E:20:C2:01:96:2B:5B Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 57BAD57B586FE1A914A065060C6CA56621CAD823 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft caRepository: rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 04 Aug 2024 15:19:17 +0000 Certificate not after: Sun 03 Aug 2025 15:24:17 +0000 Subordinate resources: IP: 157.10.179.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ba:d5:7b:58:6f:e1:a9:14:a0:65:06:0c:6c:a5:66:21:ca:d8:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 4 15:19:17 2024 GMT Not After : Aug 3 15:24:17 2025 GMT Subject: CN=B914C61A5DB1C65E66CE5AF64C3E20C201962B5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:db:12:82:28:2a:9d:5d:9d:dd:cb:51:dd:22: 24:90:47:e5:38:7b:83:02:f9:67:9a:99:e7:72:9f: 81:00:19:c7:c4:1c:6a:e0:fe:24:a6:cc:fe:6a:fb: a0:a6:83:91:85:bb:24:3f:fa:98:5b:a1:10:54:32: f8:c5:44:e6:99:99:3e:96:ad:90:b6:a1:be:20:e6: 07:20:81:43:77:d9:ef:ec:92:b1:9a:d3:47:d0:d8: 2a:0b:bd:83:20:86:63:34:75:6f:f8:6a:c5:c6:ca: 6d:60:b3:3a:84:7f:fb:4e:9f:c1:c1:81:64:5c:1b: d4:9c:1b:92:5b:d2:1f:6a:4b:b3:a1:52:b5:44:5d: 0d:2e:bf:59:45:69:46:f7:ef:46:bd:fc:d1:b3:26: e8:56:e0:f7:0c:f9:74:18:ce:ef:44:ef:19:8c:71: d3:69:a9:a8:e4:58:d3:75:9b:4f:aa:bb:43:ce:3e: 60:6a:5d:16:fb:44:81:47:83:58:d1:5b:a5:45:1d: ed:a0:1a:9f:a6:dc:58:fd:9b:a0:03:8a:46:ae:92: 40:5e:f8:c6:13:74:d7:ad:76:97:c4:aa:d3:af:89: 24:f8:4e:7b:7b:0e:8e:ed:f4:de:72:6d:3d:40:99: 69:c9:0e:e8:8a:ac:27:21:91:2e:fd:66:c9:65:94: a6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:14:C6:1A:5D:B1:C6:5E:66:CE:5A:F6:4C:3E:20:C2:01:96:2B:5B X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.179.0/24 Signature Algorithm: sha256WithRSAEncryption 68:c6:5e:6b:03:3f:b5:e2:29:a4:78:a2:8a:01:df:c2:04:11: 60:4c:89:94:89:53:20:8e:eb:bf:ce:6f:a4:2f:78:f3:fa:9e: 85:a3:5a:6e:69:82:ab:53:c4:a6:b6:a9:5b:75:1b:22:f4:0d: 9f:31:28:b7:9b:4f:96:4d:1a:03:30:7d:d6:31:94:ef:94:6b: 42:70:17:d9:4d:8c:90:3d:a3:81:9a:24:2b:5c:5a:5f:3a:96: cb:c5:5e:e8:25:b2:a6:eb:9d:0f:1d:a8:e4:c8:d7:ca:45:bc: d1:ea:7f:8a:c5:6e:b6:f8:b3:cf:e4:5b:73:6d:47:d3:d2:b3: fe:d5:50:37:0f:98:a4:53:ee:6c:b5:54:73:a3:e2:e1:48:4d: 1f:46:ec:76:5e:20:8c:95:f1:14:ad:e7:59:f4:c2:e4:56:8e: ac:c5:7c:39:b4:90:60:2e:86:69:d9:a4:13:e8:4a:93:0d:c1: fe:97:3d:f9:73:4b:96:40:7f:57:41:c0:21:64:e7:9e:b8:94: 92:a0:98:01:32:89:49:88:09:52:16:91:a9:ad:8c:60:71:9f: e1:80:c0:66:f2:af:ac:56:25:fd:e4:04:e3:6a:47:4d:96:b5: 07:45:2c:d0:c0:ad:25:40:09:df:5f:a0:92:9b:67:32:16:e1: 6a:9f:43:b2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUV7rVe1hv4akUoGUGDGylZiHK2CMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDgwNDE1MTkxN1oX DTI1MDgwMzE1MjQxN1owMzExMC8GA1UEAxMoQjkxNEM2MUE1REIxQzY1RTY2Q0U1 QUY2NEMzRTIwQzIwMTk2MkI1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMrbEoIoKp1dnd3LUd0iJJBH5Th7gwL5Z5qZ53KfgQAZx8QcauD+JKbM/mr7 oKaDkYW7JD/6mFuhEFQy+MVE5pmZPpatkLahviDmByCBQ3fZ7+ySsZrTR9DYKgu9 gyCGYzR1b/hqxcbKbWCzOoR/+06fwcGBZFwb1JwbklvSH2pLs6FStURdDS6/WUVp RvfvRr380bMm6Fbg9wz5dBjO70TvGYxx02mpqORY03WbT6q7Q84+YGpdFvtEgUeD WNFbpUUd7aAan6bcWP2boAOKRq6SQF74xhN01612l8Sq06+JJPhOe3sOju303nJt PUCZackO6IqsJyGRLv1myWWUprMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLkUxhpdscZeZs5a9kw+IMIBlitbMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hOGRjMTNmZi01YjEwLTQ0YTYtYjZmMy04ZjAzNWU1ODk3ZDgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4ZGMxM2Zm LTViMTAtNDRhNi1iNmYzLThmMDM1ZTU4OTdkOC8wL0I5MTRDNjFBNURCMUM2NUU2 NkNFNUFGNjRDM0UyMEMyMDE5NjJCNUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdCrMwDQYJKoZIhvcNAQELBQADggEBAGjGXmsDP7XiKaR4oooB38IEEWBMiZSJ UyCO67/Ob6QvePP6noWjWm5pgqtTxKa2qVt1GyL0DZ8xKLebT5ZNGgMwfdYxlO+U a0JwF9lNjJA9o4GaJCtcWl86lsvFXuglsqbrnQ8dqOTI18pFvNHqf4rFbrb4s8/k W3NtR9PSs/7VUDcPmKRT7my1VHOj4uFITR9G7HZeIIyV8RSt51n0wuRWjqzFfDm0 kGAuhmnZpBPoSpMNwf6XPflzS5ZAf1dBwCFk5564lJKgmAEyiUmICVIWkamtjGBx n+GAwGbyr6xWJf3kBONqR02WtQdFLNDArSVACd9foJKbZzIW4WqfQ7I= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org