$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer File: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer (raw, json) Hash identifier: BQikMbQBwAo+1zZ9Al3F5tGvzke91fgm8GENX7SmoL4= Subject key identifier: D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 4FA3323E227287616EDAFE2BEB9C4566C325CB81 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft caRepository: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 01 Mar 2025 19:42:25 +0000 Certificate not after: Sat 28 Feb 2026 19:47:25 +0000 Subordinate resources: IP: 157.66.7.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a3:32:3e:22:72:87:61:6e:da:fe:2b:eb:9c:45:66:c3:25:cb:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Mar 1 19:42:25 2025 GMT Not After : Feb 28 19:47:25 2026 GMT Subject: CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b1:ae:7d:51:ed:95:66:ec:61:11:40:00:25: 21:91:5d:22:98:c7:79:2d:8b:79:06:04:fd:58:aa: 90:79:ff:3c:24:3e:c9:f9:3a:24:38:a0:09:37:28: 35:25:a0:52:48:27:bb:27:af:1f:1e:45:df:aa:7a: dc:c2:92:1f:6f:5f:a3:95:ea:c0:bc:ca:46:df:a5: b1:e1:0c:c6:27:f9:ec:47:15:72:6e:88:76:60:a0: 5c:b0:6c:bd:c9:c2:ad:80:8c:b5:32:1b:e2:26:a3: 77:27:ee:25:96:ef:97:76:fb:36:cc:9d:66:8c:21: 82:25:92:13:48:bc:5f:30:bc:d6:9e:13:a8:75:0a: 87:5f:d9:e3:ff:0d:39:b6:e3:2d:38:53:d1:2d:74: 9e:f0:d5:9e:6d:83:e3:37:18:ee:fc:3c:2a:29:dc: e8:94:22:e7:95:cb:10:c8:26:d8:d6:56:b3:c8:a3: 48:34:2f:f7:8e:50:c6:66:d0:4b:d1:8c:df:d5:d9: 00:dd:46:63:0c:a3:fa:0f:6a:12:e9:b8:d5:94:36: dc:30:bb:5a:0b:49:8b:3a:28:cc:b4:85:fa:bc:b8: 81:cb:89:39:6e:1a:5c:dd:a4:58:2b:9e:ba:0e:24: b9:65:55:56:69:f3:02:fe:2d:5f:b1:63:a9:7e:37: b1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.7.0/24 Signature Algorithm: sha256WithRSAEncryption 28:56:00:4d:61:9d:6c:81:ec:29:2d:5c:79:0a:6f:db:8a:f5: dd:59:9c:ef:31:07:27:b5:41:cd:cb:91:d2:3c:74:9f:b1:0c: 94:0b:b0:fe:92:2c:14:e6:6f:46:0d:a5:1d:a7:90:e1:8d:52: 50:e2:ef:63:27:a0:2b:13:e1:65:08:c7:5d:fb:65:0d:e5:6e: 13:a6:4d:b7:81:60:83:47:e7:c5:b1:54:a6:54:8b:b7:87:bd: 86:fc:31:e9:c9:2b:75:ed:87:da:f7:48:21:aa:29:7d:c4:22: 62:73:cb:db:a1:1d:1a:d2:22:d7:39:1b:44:19:fd:9c:ed:85: ab:f6:4d:66:56:0f:4f:93:2b:2f:92:85:3f:a1:9a:65:a3:db: 6f:4c:c8:13:58:32:78:f3:d5:5c:d9:8d:c3:0d:3e:ca:1c:32: ef:57:ec:df:16:8f:ee:8a:2b:00:52:ad:b0:e0:26:81:05:55: 8a:9f:2d:13:7d:5c:9f:77:34:5a:0f:4c:14:88:4f:a2:2c:81: 9e:80:62:fa:87:8b:13:9c:89:6e:64:d2:3e:3b:e8:8b:98:11: 5b:ed:5c:24:a0:2f:52:23:27:6f:77:ff:3d:af:5a:0a:6f:68: 12:65:be:48:3f:8a:af:46:30:c9:e7:bb:c4:ba:85:4a:1c:45: 4c:07:ce:ea -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUT6MyPiJyh2Fu2v4r65xFZsMly4EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDMwMTE5NDIyNVoX DTI2MDIyODE5NDcyNVowMzExMC8GA1UEAxMoRDkwQzcwNDJCNURDMTgzNDFEQ0M3 N0NBNUNGOEY0Q0EyMTBEODg2QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqxrn1R7ZVm7GERQAAlIZFdIpjHeS2LeQYE/ViqkHn/PCQ+yfk6JDigCTco NSWgUkgnuyevHx5F36p63MKSH29fo5XqwLzKRt+lseEMxif57EcVcm6IdmCgXLBs vcnCrYCMtTIb4iajdyfuJZbvl3b7NsydZowhgiWSE0i8XzC81p4TqHUKh1/Z4/8N ObbjLThT0S10nvDVnm2D4zcY7vw8Kinc6JQi55XLEMgm2NZWs8ijSDQv945QxmbQ S9GM39XZAN1GYwyj+g9qEum41ZQ23DC7WgtJizoozLSF+ry4gcuJOW4aXN2kWCue ug4kuWVVVmnzAv4tX7FjqX43sVkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNkMcEK13Bg0Hcx3ylz49MohDYhrMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wMGE2ZmVhYS02YjRmLTQ3Y2YtOWUzYy0wMGFlYWM2N2EzMmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwYTZmZWFh LTZiNGYtNDdjZi05ZTNjLTAwYWVhYzY3YTMyYS8wL0Q5MEM3MDQyQjVEQzE4MzQx RENDNzdDQTVDRjhGNENBMjEwRDg4NkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdQgcwDQYJKoZIhvcNAQELBQADggEBAChWAE1hnWyB7CktXHkKb9uK9d1ZnO8x Bye1Qc3LkdI8dJ+xDJQLsP6SLBTmb0YNpR2nkOGNUlDi72MnoCsT4WUIx137ZQ3l bhOmTbeBYINH58WxVKZUi7eHvYb8MenJK3Xth9r3SCGqKX3EImJzy9uhHRrSItc5 G0QZ/Zzthav2TWZWD0+TKy+ShT+hmmWj229MyBNYMnjz1VzZjcMNPsocMu9X7N8W j+6KKwBSrbDgJoEFVYqfLRN9XJ93NFoPTBSIT6IsgZ6AYvqHixOciW5k0j476IuY EVvtXCSgL1IjJ293/z2vWgpvaBJlvkg/iq9GMMnnu8S6hUocRUwHzuo= -----END CERTIFICATE-----Generated at Mon Apr 7 03:41:11 2025 by rpki-client