$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer (raw, json) Hash identifier: oJXm6Rv/JQnr/XJje1niha56Ls8m+yAIhcrrDQHGR1U= Subject key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 40592746AEBDAC8B16CC527E501DB5EC26B3FE00 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft caRepository: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 11 Jan 2024 02:52:38 +0000 Certificate not after: Thu 09 Jan 2025 02:57:38 +0000 Subordinate resources: IP: 157.10.88.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:59:27:46:ae:bd:ac:8b:16:cc:52:7e:50:1d:b5:ec:26:b3:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 11 02:52:38 2024 GMT Not After : Jan 9 02:57:38 2025 GMT Subject: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:62:c5:7a:3b:45:93:38:14:47:e0:8c:44:c1: 0f:77:b8:9f:e9:6f:41:fd:f5:98:75:c0:3c:51:d3: 09:2d:73:ad:e2:a9:88:02:8b:32:9e:32:00:30:6a: 6b:59:76:85:e2:96:f3:9e:4f:71:74:d5:cc:7c:82: d8:bd:a0:64:04:3f:71:95:5f:e5:e1:1d:7b:20:94: d9:8f:31:d3:0e:5f:a3:f2:97:4b:36:22:10:be:19: d5:bc:5d:d4:c3:a4:85:5a:5b:7d:e8:26:b2:2e:0c: 55:24:42:fb:7c:28:4a:83:f1:3b:5f:1a:75:93:a2: ca:b9:dd:dd:a9:54:a6:31:fa:fe:a7:a6:60:9a:16: be:2b:c0:a4:01:3c:a5:bc:a1:6a:bc:b6:09:96:f4: b2:d5:ab:40:6d:e1:22:f6:53:27:8f:aa:76:91:01: 74:15:23:32:b4:f2:e8:12:64:a6:5f:cb:58:5b:1f: 8c:b8:59:e1:d3:af:ee:3d:e6:94:5d:9a:5a:4a:89: 90:59:c1:03:dd:ba:1a:f4:42:85:91:a2:75:5a:fe: 46:40:84:94:f0:a2:14:cf:d7:bf:44:69:6d:ad:b3: fe:0f:5e:58:15:b8:a0:a9:06:b2:a7:87:b0:44:c6: 5b:68:36:92:73:27:1c:d7:de:ae:1c:a3:04:a0:f4: 6b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.88.0/23 Signature Algorithm: sha256WithRSAEncryption 60:a3:98:ce:6a:fa:3c:9f:d9:35:9f:b0:98:36:c6:59:62:b0: 41:8d:ec:77:c0:82:a9:1b:57:19:b1:1c:69:6d:3c:70:a7:44: 26:91:d7:2f:60:2e:79:ce:ee:97:76:37:75:a5:0b:76:eb:c9: 73:4d:ab:8d:1b:7f:89:6d:ef:5f:20:76:f2:89:94:90:c4:40: 93:fc:f6:1e:15:b7:fb:7e:65:46:6c:bc:ec:8c:f3:aa:1e:c4: ba:5b:48:49:3e:79:b7:74:ae:8a:fe:6e:b2:a4:cd:c6:bc:a4: 5f:57:6d:b5:17:be:11:95:47:41:e0:48:a8:c9:5c:7f:8a:9a: a8:82:90:2c:0d:e9:36:81:e7:4a:76:d7:62:07:d7:25:2c:5e: 32:01:15:dc:39:5e:7f:75:cb:9b:cb:dc:6f:29:47:d0:c4:32: a9:ec:cc:4d:0f:e7:80:e9:ef:f5:26:8c:be:4c:e7:78:c6:51: 93:37:e8:8d:a5:e0:a8:9f:01:5f:cb:b8:df:88:c4:d5:6a:2d: 92:bd:00:46:6c:88:62:03:72:3f:d1:37:8b:47:c9:ea:ad:f0: e1:b9:76:67:01:33:6f:fa:b1:48:82:49:89:cd:0a:3c:35:04: 7f:9d:16:66:b4:ec:47:ee:22:48:57:47:c9:05:7c:01:9a:82: 82:50:a4:be -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQFknRq69rIsWzFJ+UB217Caz/gAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDExMTAyNTIzOFoX DTI1MDEwOTAyNTczOFowMzExMC8GA1UEAxMoQzg4ODY0REQzQzFFNkQwRDVGQTkx NDY3RjAzQjI2NkRGNUY3OTI1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALBixXo7RZM4FEfgjETBD3e4n+lvQf31mHXAPFHTCS1zreKpiAKLMp4yADBq a1l2heKW855PcXTVzHyC2L2gZAQ/cZVf5eEdeyCU2Y8x0w5fo/KXSzYiEL4Z1bxd 1MOkhVpbfegmsi4MVSRC+3woSoPxO18adZOiyrnd3alUpjH6/qemYJoWvivApAE8 pbyhary2CZb0stWrQG3hIvZTJ4+qdpEBdBUjMrTy6BJkpl/LWFsfjLhZ4dOv7j3m lF2aWkqJkFnBA926GvRChZGidVr+RkCElPCiFM/Xv0Rpba2z/g9eWBW4oKkGsqeH sETGW2g2knMnHNferhyjBKD0a2ECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMiIZN08Hm0NX6kUZ/A7Jm3195JVMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczMmU0Zjg2 LTQ4ZTctNDhjNy1iYTkxLWUyNTk2ODM3OGU5NS8wL0M4ODg2NEREM0MxRTZEMEQ1 RkE5MTQ2N0YwM0IyNjZERjVGNzkyNTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdClgwDQYJKoZIhvcNAQELBQADggEBAGCjmM5q+jyf2TWfsJg2xllisEGN7HfA gqkbVxmxHGltPHCnRCaR1y9gLnnO7pd2N3WlC3bryXNNq40bf4lt718gdvKJlJDE QJP89h4Vt/t+ZUZsvOyM86oexLpbSEk+ebd0ror+brKkzca8pF9XbbUXvhGVR0Hg SKjJXH+KmqiCkCwN6TaB50p212IH1yUsXjIBFdw5Xn91y5vL3G8pR9DEMqnszE0P 54Dp7/UmjL5M53jGUZM36I2l4KifAV/LuN+IxNVqLZK9AEZsiGIDcj/RN4tHyeqt 8OG5dmcBM2/6sUiCSYnNCjw1BH+dFma07EfuIkhXR8kFfAGagoJQpL4= -----END CERTIFICATE-----Generated at Fri Jun 21 22:04:32 2024 by rpki-client on console-fra.rpki-client.org