$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer File: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer (raw, json) Hash identifier: pqxtPLz31GU10dsQyuEqFH7vrNsprlHN2iEnSTiVq14= Subject key identifier: CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 437584313B85AC225C1D23FBC9F265747791417C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft caRepository: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 22 May 2024 19:51:22 +0000 Certificate not after: Wed 21 May 2025 19:56:22 +0000 Subordinate resources: IP: 157.10.222.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:75:84:31:3b:85:ac:22:5c:1d:23:fb:c9:f2:65:74:77:91:41:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 22 19:51:22 2024 GMT Not After : May 21 19:56:22 2025 GMT Subject: CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:93:dd:d4:4c:d1:60:4f:58:32:5d:4f:7d:9d: 25:c3:cf:e8:8f:ba:cf:57:fc:2c:dc:30:6e:b2:c8: 9d:3f:26:02:c0:07:6f:b1:e8:2a:4b:58:93:6f:fe: 3f:db:8c:94:e9:35:a9:46:60:e0:50:be:8e:94:85: 11:33:b2:d3:f5:f0:c8:39:de:4a:82:05:77:a0:9c: cc:d1:77:3e:65:a3:1c:69:6f:d2:35:44:3a:18:3f: be:01:a7:a5:07:fc:4c:d7:67:bc:f2:f1:4b:f4:31: 38:6d:03:ae:23:18:26:5b:c3:66:75:f5:5f:20:8e: 65:fb:4c:8b:3b:13:b5:d6:ea:33:50:58:45:2f:48: df:75:b2:7d:3f:58:a9:e2:f1:a9:a7:0a:0e:41:7b: 84:1f:4d:b9:d1:6f:32:3a:a5:14:7f:51:12:5f:a2: 73:b6:98:8c:9b:88:10:94:51:ef:25:32:44:df:da: 73:9e:48:76:96:8d:f4:34:1e:9c:b7:1d:80:ed:c5: 8c:07:4e:dd:4f:16:e3:19:4e:7b:dd:eb:ca:9b:32: eb:29:a6:6d:2a:18:d8:c0:26:2b:6c:1b:75:cd:92: 4b:fa:72:ff:a5:43:a1:07:cd:30:74:93:82:a5:d3: 4b:7a:a8:f6:a6:f0:a9:2e:11:1a:9d:4c:42:9c:a3: 69:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.222.0/23 Signature Algorithm: sha256WithRSAEncryption 32:5e:56:72:ed:e9:fa:d6:58:fc:fe:7c:94:08:80:23:d0:30: 41:75:7e:cd:d7:d3:ba:ec:95:ed:57:aa:35:f7:0a:ab:e1:7a: 87:02:97:de:36:74:b7:c2:6a:9e:68:3c:23:79:d6:db:fa:93: bc:7f:46:ef:bb:57:7f:eb:ed:ce:f6:2f:bb:1c:5d:6d:10:c4: 90:72:9f:04:7f:0d:97:2b:50:d9:bf:e0:cd:55:f5:cd:77:e5: 31:14:e6:d5:62:d7:c1:f8:c5:44:26:cd:2a:e8:4b:0c:c9:70: 1a:a0:dc:28:f6:be:d8:95:2c:7f:a5:ab:b9:41:72:4d:79:5f: 96:1d:4c:d6:da:21:6f:58:5c:e9:47:a8:bb:3c:90:0c:28:e0: 6b:2a:aa:ec:49:aa:a0:e4:f5:f2:c4:a2:f2:44:d1:ae:d0:45: 40:b7:0e:4a:51:36:8d:2f:78:de:43:48:f4:31:f7:d2:a0:20: 7a:c1:6e:c6:1b:a6:e7:9f:e0:0a:86:71:1f:87:f0:1d:ac:68: 03:95:7f:a9:b7:a1:10:40:f8:1b:90:3f:c3:81:43:7f:14:fa: fe:93:55:8f:70:4c:4c:a5:29:bd:37:ba:0d:51:6e:35:39:70: 2b:9d:1d:6d:74:ff:69:60:ad:77:52:e1:88:9f:46:78:64:8e: 59:a4:ff:63 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQ3WEMTuFrCJcHSP7yfJldHeRQXwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDUyMjE5NTEyMloX DTI1MDUyMTE5NTYyMlowMzExMC8GA1UEAxMoQ0VCNEY5QUUzNDc2NjMwQUFGMjJG NENENDJDRTYwNkJCNDQ0NDE0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPKT3dRM0WBPWDJdT32dJcPP6I+6z1f8LNwwbrLInT8mAsAHb7HoKktYk2/+ P9uMlOk1qUZg4FC+jpSFETOy0/XwyDneSoIFd6CczNF3PmWjHGlv0jVEOhg/vgGn pQf8TNdnvPLxS/QxOG0DriMYJlvDZnX1XyCOZftMizsTtdbqM1BYRS9I33WyfT9Y qeLxqacKDkF7hB9NudFvMjqlFH9REl+ic7aYjJuIEJRR7yUyRN/ac55IdpaN9DQe nLcdgO3FjAdO3U8W4xlOe93rypsy6ymmbSoY2MAmK2wbdc2SS/py/6VDoQfNMHST gqXTS3qo9qbwqS4RGp1MQpyjaWkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM60+a40dmMKryL0zULOYGu0REFAMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jYTM3NmE2ZS0zZWNhLTRmNzMtOGQxNS1kMWRkZWU5MWZmOTgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhMzc2YTZl LTNlY2EtNGY3My04ZDE1LWQxZGRlZTkxZmY5OC8wL0NFQjRGOUFFMzQ3NjYzMEFB RjIyRjRDRDQyQ0U2MDZCQjQ0NDQxNDAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdCt4wDQYJKoZIhvcNAQELBQADggEBADJeVnLt6frWWPz+fJQIgCPQMEF1fs3X 07rsle1XqjX3CqvheocCl942dLfCap5oPCN51tv6k7x/Ru+7V3/r7c72L7scXW0Q xJBynwR/DZcrUNm/4M1V9c135TEU5tVi18H4xUQmzSroSwzJcBqg3Cj2vtiVLH+l q7lBck15X5YdTNbaIW9YXOlHqLs8kAwo4GsqquxJqqDk9fLEovJE0a7QRUC3DkpR No0veN5DSPQx99KgIHrBbsYbpuef4AqGcR+H8B2saAOVf6m3oRBA+BuQP8OBQ38U +v6TVY9wTEylKb03ug1RbjU5cCudHW10/2lgrXdS4YifRnhkjlmk/2M= -----END CERTIFICATE-----Generated at Fri Jun 21 22:04:32 2024 by rpki-client on console-fra.rpki-client.org