$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer File: D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer (raw, json) Hash identifier: k5Xj37jtkcp4m2Nwczu3gsttmOFYCW4cnPBJvq6krXg= Subject key identifier: D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 4754385C771D16374C31AE661F680E41D7751973 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft caRepository: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 24 May 2024 16:23:47 +0000 Certificate not after: Fri 23 May 2025 16:28:47 +0000 Subordinate resources: IP: 157.66.176.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:54:38:5c:77:1d:16:37:4c:31:ae:66:1f:68:0e:41:d7:75:19:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 24 16:23:47 2024 GMT Not After : May 23 16:28:47 2025 GMT Subject: CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e5:ad:b9:29:30:8b:63:8a:d9:46:28:a1:6e: b9:e3:4f:ec:62:dd:7e:b3:71:4a:08:9b:97:c2:58: 7b:a9:64:6f:dd:6e:2a:64:8c:bd:d0:e1:d4:e0:18: 70:53:c5:7a:71:b2:49:dc:7e:2d:df:ad:a0:b5:55: 98:c8:bf:04:58:66:03:c6:1c:d0:10:3c:85:79:00: 62:77:9d:8c:2d:38:b5:81:3f:ea:9e:28:cf:bc:b1: c3:ce:c5:a9:b1:56:e2:e4:4d:cd:96:63:e5:0e:dd: ee:43:ec:fe:a8:3b:bc:cc:3a:c4:45:b6:ab:5c:0a: 88:94:f2:3c:b7:0b:4e:6b:0e:42:83:ac:a7:c4:9a: ca:fd:d3:f7:67:9e:4d:0e:ec:84:ef:38:75:bb:a1: 4e:e9:17:63:62:2c:45:d0:88:c6:b0:6a:34:35:ac: 3a:fe:aa:79:5b:34:99:42:57:82:ec:ed:ea:87:dd: c6:a8:0d:22:12:e2:ab:dc:69:74:61:c1:3d:e7:5f: 75:c8:ae:ee:31:a9:ba:d6:c8:dd:09:da:9c:80:83: af:f6:cb:8d:27:28:aa:cd:ab:e0:4d:a6:0b:84:d0: da:51:b1:d7:a7:4e:4b:75:c5:bb:49:14:bf:9b:86: fd:d6:0f:cc:7e:e7:4c:dd:b1:90:c6:64:a6:6e:38: 2d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.176.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:53:a5:14:5e:83:36:37:1d:de:e6:41:8d:24:f3:a9:b8:e4: 3c:56:aa:fe:99:d7:c5:2e:6c:73:19:ec:df:c2:ae:a3:53:52: 3d:6c:47:e1:30:86:7f:10:5e:04:10:69:59:fb:08:ea:98:05: 0a:af:d1:f1:5d:a3:f2:78:9c:19:f5:02:b5:2e:eb:5e:53:02: 96:97:b4:24:44:30:1f:c4:ca:ab:67:72:ce:90:22:4e:10:c4: f4:2e:64:d8:89:98:4f:4d:04:99:9d:62:9d:5a:78:a2:db:66: 3f:ff:91:15:ac:b8:b8:7b:24:a1:00:76:ec:df:1f:0e:4c:50: fe:24:87:bb:0c:87:86:d9:2b:a0:60:55:15:70:58:65:08:21: a7:58:38:be:40:cc:c3:f1:ec:0d:1c:f1:52:53:a4:fe:a4:e0: df:08:64:8e:6f:ed:a7:4c:a6:2b:b7:24:b3:04:0c:77:f2:ce: e1:52:90:63:64:fe:b7:06:45:89:10:be:58:35:40:d7:43:7f: 32:fc:af:4a:7e:93:1c:64:f0:b7:a3:d2:49:b2:df:aa:e0:2c: 45:26:92:a3:bb:cd:00:7b:21:15:14:9b:ec:c8:32:a2:d6:43: d0:18:af:cc:4c:a9:61:bf:17:1f:05:f3:82:1c:0d:ad:3a:fa: 8d:1c:de:af -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUR1Q4XHcdFjdMMa5mH2gOQdd1GXMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDUyNDE2MjM0N1oX DTI1MDUyMzE2Mjg0N1owMzExMC8GA1UEAxMoRDAwRjQ4QkM4Nzc5MTBGREQwQjdG RjIyOUZEN0RBNTE2NzY5QzkwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALjlrbkpMItjitlGKKFuueNP7GLdfrNxSgibl8JYe6lkb91uKmSMvdDh1OAY cFPFenGySdx+Ld+toLVVmMi/BFhmA8Yc0BA8hXkAYnedjC04tYE/6p4oz7yxw87F qbFW4uRNzZZj5Q7d7kPs/qg7vMw6xEW2q1wKiJTyPLcLTmsOQoOsp8Sayv3T92ee TQ7shO84dbuhTukXY2IsRdCIxrBqNDWsOv6qeVs0mUJXguzt6ofdxqgNIhLiq9xp dGHBPedfdciu7jGputbI3QnanICDr/bLjScoqs2r4E2mC4TQ2lGx16dOS3XFu0kU v5uG/dYPzH7nTN2xkMZkpm44LR0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNAPSLyHeRD90Lf/Ip/X2lFnackLMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hYWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FhYjRlMTRk LTAyMWQtNDBkYy05MjNhLWMxMmQxYWY0NDNiNS8wL0QwMEY0OEJDODc3OTEwRkRE MEI3RkYyMjlGRDdEQTUxNjc2OUM5MEIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdQrAwDQYJKoZIhvcNAQELBQADggEBAD1TpRRegzY3Hd7mQY0k86m45DxWqv6Z 18UubHMZ7N/CrqNTUj1sR+Ewhn8QXgQQaVn7COqYBQqv0fFdo/J4nBn1ArUu615T ApaXtCREMB/Eyqtncs6QIk4QxPQuZNiJmE9NBJmdYp1aeKLbZj//kRWsuLh7JKEA duzfHw5MUP4kh7sMh4bZK6BgVRVwWGUIIadYOL5AzMPx7A0c8VJTpP6k4N8IZI5v 7adMpiu3JLMEDHfyzuFSkGNk/rcGRYkQvlg1QNdDfzL8r0p+kxxk8Lej0kmy36rg LEUmkqO7zQB7IRUUm+zIMqLWQ9AYr8xMqWG/Fx8F84IcDa06+o0c3q8= -----END CERTIFICATE-----Generated at Fri Jun 21 22:04:32 2024 by rpki-client on console-fra.rpki-client.org