$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer File: BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer (raw, json) Hash identifier: 0HFcLaA94FykzEmyb6EhOIxS6+bWHum5wSdDE1aZzY4= Subject key identifier: BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 61407684475EBC7921B78710C9BF1D56D4524401 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft caRepository: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 30 May 2024 07:31:50 +0000 Certificate not after: Thu 29 May 2025 07:36:50 +0000 Subordinate resources: IP: 157.20.178.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:40:76:84:47:5e:bc:79:21:b7:87:10:c9:bf:1d:56:d4:52:44:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 30 07:31:50 2024 GMT Not After : May 29 07:36:50 2025 GMT Subject: CN=BD9B7A89C85E0DF6786F5BD51D4B7D963618231A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b4:ba:8e:2f:59:fb:72:1c:53:d0:ce:52:5e: 5f:73:ff:16:4a:89:75:b0:c7:94:f8:64:e6:6f:9a: 21:13:ca:9c:7a:1b:58:b8:79:01:aa:37:ec:93:f6: 5d:2d:70:37:8b:a6:7c:73:01:de:34:3e:30:d0:29: bd:1d:da:bd:7a:26:aa:bf:1e:50:f0:87:13:1a:76: a6:c5:ac:e0:3e:be:1f:da:c7:a7:f8:11:70:c6:68: 18:af:b4:2c:82:09:55:8d:0f:69:50:ef:84:72:27: 44:b6:0b:75:15:5e:2d:de:70:ed:02:5a:9e:ad:a4: 00:11:2d:07:db:76:3c:75:10:41:27:a3:79:6d:9a: c5:f2:18:44:18:a8:1d:27:86:87:ab:0b:95:e5:bd: 64:a5:97:b8:a1:e0:b9:21:51:0d:2f:33:09:95:78: ee:0b:79:dd:c8:36:29:0b:c5:7d:78:93:07:be:48: db:57:a6:aa:5b:3c:53:27:24:5e:61:d5:ee:bf:77: f9:18:12:22:a0:6b:64:e9:7c:b8:70:47:75:0f:70: af:f4:c3:e8:f1:89:a7:56:72:41:5d:ca:3a:8e:9f: 59:2c:b1:69:ed:2e:22:d3:6a:0d:1a:18:9f:20:08: 83:4d:d8:66:90:75:06:93:a3:8e:0c:c5:41:3b:bf: 7d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.178.0/23 Signature Algorithm: sha256WithRSAEncryption 58:40:35:6a:4c:1d:bd:46:a9:64:3e:87:45:51:9b:80:36:3a: 3a:cb:36:2a:0a:7e:83:1b:15:0d:52:ce:0e:ce:24:bd:95:08: 0b:6b:cd:02:f9:7f:ca:95:dc:47:f3:49:b1:11:d9:9f:c3:b3: 1e:06:d2:29:d4:8c:41:9a:bc:88:f4:ed:f7:c8:34:51:04:90: 8f:da:6f:93:79:ba:41:16:a5:32:14:80:8e:d2:79:f8:50:f2: bc:d4:55:f7:0e:e1:5f:6c:bd:a1:d7:31:35:b8:06:78:03:4e: 16:1d:2f:be:b3:a1:60:e0:83:3f:83:c1:67:8f:14:ca:35:ae: 54:0b:ea:09:36:eb:01:c2:1b:dc:4d:61:cb:3c:2c:84:ea:89: 9e:9f:47:b3:6a:89:9a:4d:eb:45:45:a2:38:47:72:10:52:c2: 1a:20:16:bb:b8:32:31:b0:4d:e8:62:f4:99:1e:8b:ec:f2:30: 35:70:c8:78:5d:dd:d3:99:5b:dc:f0:bf:b9:57:c0:3c:7f:f0: 36:8d:4b:f4:bd:33:4d:f1:15:a5:8f:5f:01:c9:9d:b8:b5:50: 8e:27:80:da:e1:30:9a:2b:48:1e:3e:a5:cc:fe:88:e4:c8:9b: 67:90:54:72:0f:0a:31:e4:d0:63:78:db:ef:cd:a4:00:f3:16: 8a:77:cf:c1 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUYUB2hEdevHkht4cQyb8dVtRSRAEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDUzMDA3MzE1MFoX DTI1MDUyOTA3MzY1MFowMzExMC8GA1UEAxMoQkQ5QjdBODlDODVFMERGNjc4NkY1 QkQ1MUQ0QjdEOTYzNjE4MjMxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK20uo4vWftyHFPQzlJeX3P/FkqJdbDHlPhk5m+aIRPKnHobWLh5Aao37JP2 XS1wN4umfHMB3jQ+MNApvR3avXomqr8eUPCHExp2psWs4D6+H9rHp/gRcMZoGK+0 LIIJVY0PaVDvhHInRLYLdRVeLd5w7QJanq2kABEtB9t2PHUQQSejeW2axfIYRBio HSeGh6sLleW9ZKWXuKHguSFRDS8zCZV47gt53cg2KQvFfXiTB75I21emqls8Uyck XmHV7r93+RgSIqBrZOl8uHBHdQ9wr/TD6PGJp1ZyQV3KOo6fWSyxae0uItNqDRoY nyAIg03YZpB1BpOjjgzFQTu/feECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL2beonIXg32eG9b1R1LfZY2GCMaMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMzYwNjZlOC04ZTE5LTRkZTctOTQ3Yi05NGVlM2NkMDlmODUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IzNjA2NmU4 LThlMTktNGRlNy05NDdiLTk0ZWUzY2QwOWY4NS8wL0JEOUI3QTg5Qzg1RTBERjY3 ODZGNUJENTFENEI3RDk2MzYxODIzMUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFLIwDQYJKoZIhvcNAQELBQADggEBAFhANWpMHb1GqWQ+h0VRm4A2OjrLNioK foMbFQ1Szg7OJL2VCAtrzQL5f8qV3EfzSbER2Z/Dsx4G0inUjEGavIj07ffINFEE kI/ab5N5ukEWpTIUgI7SefhQ8rzUVfcO4V9svaHXMTW4BngDThYdL76zoWDggz+D wWePFMo1rlQL6gk26wHCG9xNYcs8LITqiZ6fR7NqiZpN60VFojhHchBSwhogFru4 MjGwTehi9Jkei+zyMDVwyHhd3dOZW9zwv7lXwDx/8DaNS/S9M03xFaWPXwHJnbi1 UI4ngNrhMJorSB4+pcz+iOTIm2eQVHIPCjHk0GN42+/NpADzFop3z8E= -----END CERTIFICATE-----Generated at Fri Jun 21 22:04:32 2024 by rpki-client on console-fra.rpki-client.org