$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer File: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer (raw, json) Hash identifier: gcClAuWbKM5kL2O28/epCg3dTau6Y6gSesJQnV6iFX0= Subject key identifier: D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 2461036D43622EF508F6ADA1B7C545A193858B36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft caRepository: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 30 Mar 2024 11:13:23 +0000 Certificate not after: Sat 29 Mar 2025 11:18:23 +0000 Subordinate resources: IP: 157.66.7.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 00:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:61:03:6d:43:62:2e:f5:08:f6:ad:a1:b7:c5:45:a1:93:85:8b:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 30 11:13:23 2024 GMT Not After : Mar 29 11:18:23 2025 GMT Subject: CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b1:ae:7d:51:ed:95:66:ec:61:11:40:00:25: 21:91:5d:22:98:c7:79:2d:8b:79:06:04:fd:58:aa: 90:79:ff:3c:24:3e:c9:f9:3a:24:38:a0:09:37:28: 35:25:a0:52:48:27:bb:27:af:1f:1e:45:df:aa:7a: dc:c2:92:1f:6f:5f:a3:95:ea:c0:bc:ca:46:df:a5: b1:e1:0c:c6:27:f9:ec:47:15:72:6e:88:76:60:a0: 5c:b0:6c:bd:c9:c2:ad:80:8c:b5:32:1b:e2:26:a3: 77:27:ee:25:96:ef:97:76:fb:36:cc:9d:66:8c:21: 82:25:92:13:48:bc:5f:30:bc:d6:9e:13:a8:75:0a: 87:5f:d9:e3:ff:0d:39:b6:e3:2d:38:53:d1:2d:74: 9e:f0:d5:9e:6d:83:e3:37:18:ee:fc:3c:2a:29:dc: e8:94:22:e7:95:cb:10:c8:26:d8:d6:56:b3:c8:a3: 48:34:2f:f7:8e:50:c6:66:d0:4b:d1:8c:df:d5:d9: 00:dd:46:63:0c:a3:fa:0f:6a:12:e9:b8:d5:94:36: dc:30:bb:5a:0b:49:8b:3a:28:cc:b4:85:fa:bc:b8: 81:cb:89:39:6e:1a:5c:dd:a4:58:2b:9e:ba:0e:24: b9:65:55:56:69:f3:02:fe:2d:5f:b1:63:a9:7e:37: b1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.7.0/24 Signature Algorithm: sha256WithRSAEncryption 71:2b:9a:17:4e:b5:21:9d:e9:99:c3:8d:2c:1f:9e:f5:f7:fb: 7a:68:74:03:b3:1a:5f:9e:c3:28:36:75:d1:e3:bd:12:5c:19: be:a0:ea:8a:88:92:02:fd:1b:81:7a:53:a0:14:dd:d9:42:b9: c4:8b:d3:63:a0:32:59:f5:ff:ef:e0:a1:7b:17:09:83:78:67: b1:da:eb:21:46:03:88:3b:c5:12:e6:d5:79:14:58:fa:60:5a: 55:54:f8:ca:41:95:6a:80:8e:d5:03:6e:4e:ff:87:bd:b6:af: 97:ae:96:6a:b0:63:21:ad:68:32:7d:de:cc:51:b4:59:1b:16: 7e:e6:88:d9:9d:da:53:db:2c:4a:de:ad:4d:93:ea:72:2b:83: c4:32:16:0a:39:75:fc:9a:ba:df:3f:11:99:7b:80:0a:8c:8b: 21:3a:a6:c3:ff:a4:cf:1a:a5:7a:be:e4:f5:13:40:3b:96:68: dc:e6:4b:68:8c:40:82:6e:0c:02:98:18:1e:8e:71:3b:e1:58: b1:f9:c7:21:ba:bf:48:1b:05:96:bc:6b:13:c9:2c:34:ff:52: 44:82:07:2c:78:0e:ca:81:cc:e3:b2:c3:dc:12:69:27:d0:74: c6:e9:50:70:ae:78:75:8b:80:23:27:a3:8b:9c:c0:69:62:fb: 4e:c2:1d:fa -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJGEDbUNiLvUI9q2ht8VFoZOFizYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDMzMDExMTMyM1oX DTI1MDMyOTExMTgyM1owMzExMC8GA1UEAxMoRDkwQzcwNDJCNURDMTgzNDFEQ0M3 N0NBNUNGOEY0Q0EyMTBEODg2QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqxrn1R7ZVm7GERQAAlIZFdIpjHeS2LeQYE/ViqkHn/PCQ+yfk6JDigCTco NSWgUkgnuyevHx5F36p63MKSH29fo5XqwLzKRt+lseEMxif57EcVcm6IdmCgXLBs vcnCrYCMtTIb4iajdyfuJZbvl3b7NsydZowhgiWSE0i8XzC81p4TqHUKh1/Z4/8N ObbjLThT0S10nvDVnm2D4zcY7vw8Kinc6JQi55XLEMgm2NZWs8ijSDQv945QxmbQ S9GM39XZAN1GYwyj+g9qEum41ZQ23DC7WgtJizoozLSF+ry4gcuJOW4aXN2kWCue ug4kuWVVVmnzAv4tX7FjqX43sVkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNkMcEK13Bg0Hcx3ylz49MohDYhrMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wMGE2ZmVhYS02YjRmLTQ3Y2YtOWUzYy0wMGFlYWM2N2EzMmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwYTZmZWFh LTZiNGYtNDdjZi05ZTNjLTAwYWVhYzY3YTMyYS8wL0Q5MEM3MDQyQjVEQzE4MzQx RENDNzdDQTVDRjhGNENBMjEwRDg4NkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdQgcwDQYJKoZIhvcNAQELBQADggEBAHErmhdOtSGd6ZnDjSwfnvX3+3podAOz Gl+ewyg2ddHjvRJcGb6g6oqIkgL9G4F6U6AU3dlCucSL02OgMln1/+/goXsXCYN4 Z7Ha6yFGA4g7xRLm1XkUWPpgWlVU+MpBlWqAjtUDbk7/h722r5eulmqwYyGtaDJ9 3sxRtFkbFn7miNmd2lPbLErerU2T6nIrg8QyFgo5dfyaut8/EZl7gAqMiyE6psP/ pM8apXq+5PUTQDuWaNzmS2iMQIJuDAKYGB6OcTvhWLH5xyG6v0gbBZa8axPJLDT/ UkSCByx4DsqBzOOyw9wSaSfQdMbpUHCueHWLgCMno4ucwGli+07CHfo= -----END CERTIFICATE-----Generated at Fri May 17 18:13:31 2024 by rpki-client on console-fra.rpki-client.org