$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.cer File: E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.cer (raw, json) Hash identifier: tqcU6My/GWMSCJgEETFznlt5QaTr/mM2nsmQceIA0VU= Subject key identifier: E6:E7:10:DA:CC:1F:6D:6D:D9:D7:8F:A6:11:7E:43:62:66:42:E6:F6 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 4C0D5D30465427DFA2313395A8F66D2612AB32E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft caRepository: rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 20 Mar 2024 02:02:41 +0000 Certificate not after: Wed 19 Mar 2025 02:07:41 +0000 Subordinate resources: IP: 157.15.118.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 00:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:0d:5d:30:46:54:27:df:a2:31:33:95:a8:f6:6d:26:12:ab:32:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 20 02:02:41 2024 GMT Not After : Mar 19 02:07:41 2025 GMT Subject: CN=E6E710DACC1F6D6DD9D78FA6117E43626642E6F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a8:10:e2:e3:1e:03:4f:d7:e3:5f:42:2b:4e: 8c:76:3d:75:25:1a:ca:e0:b7:e1:56:b4:a1:bd:31: d0:63:e4:c8:0e:4a:52:59:6a:55:c4:ea:45:a7:85: ed:18:c7:5d:8b:b2:b2:12:b3:80:ff:59:4d:51:d5: 7a:1f:d9:fc:04:67:49:83:56:f0:29:fd:72:8e:26: bc:df:d7:1b:bb:8d:5e:52:12:0d:6e:f6:62:88:35: 01:70:09:e3:c8:62:ff:69:03:6f:52:03:f8:b3:79: 0d:b3:41:e6:fd:2b:ba:dc:11:9e:24:e3:ff:67:31: d7:9e:2f:2d:c1:21:62:20:29:c1:2d:1b:68:b8:4d: d6:94:c3:8b:46:ad:97:c3:38:68:8f:5b:7f:3b:67: 0d:ca:bb:56:0c:4a:3d:33:8b:36:ab:66:ce:32:a6: 9e:8c:d2:8d:07:7c:57:9e:93:ee:bd:ca:53:93:a5: be:37:d9:5a:f8:8f:13:49:20:40:3c:6f:f3:2b:f0: dd:db:72:59:06:59:d4:fe:fc:07:5c:9e:8d:98:b9: c9:d0:dd:fd:d8:b5:56:e6:dc:2a:a5:6d:c5:c8:43: 5b:7d:7d:5b:19:39:08:3e:d8:bf:53:87:fd:25:ea: 2b:22:3f:7f:5f:2f:d8:6e:63:ef:90:2a:7f:87:01: d0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E6:E7:10:DA:CC:1F:6D:6D:D9:D7:8F:A6:11:7E:43:62:66:42:E6:F6 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.118.0/24 Signature Algorithm: sha256WithRSAEncryption 69:39:d6:06:67:c2:34:36:35:a0:67:3c:65:03:32:2b:86:57: df:4f:55:9f:a7:25:72:f6:d2:ac:16:7b:a5:46:99:e0:19:86: 7f:24:b3:32:2d:0a:b4:99:ce:83:01:c2:cd:43:5b:af:e2:6a: a0:8f:c9:94:eb:e0:3c:87:e6:c8:f2:0e:d8:48:fa:0a:83:ad: 65:ac:c3:65:ae:ac:60:ad:1e:58:b8:c8:f9:45:d4:d7:6c:79: 69:e6:b9:51:e1:41:69:46:35:98:59:e3:b0:66:ba:b7:d1:04: 84:3d:68:92:fd:eb:44:a7:45:07:77:33:96:20:87:bf:f0:c4: 3a:fa:90:98:b6:db:37:d4:f9:fe:1b:74:c8:62:9c:19:84:2a: 80:41:1b:7e:b4:bf:17:1d:23:d8:9e:e1:13:98:1b:bf:c5:81: 9a:ab:6a:df:60:fe:70:31:9f:31:ac:19:f5:17:1d:71:ec:1d: ec:77:f5:c0:9c:2f:1c:ff:79:66:35:a0:74:8e:74:0b:a0:48: ff:7f:30:50:2d:27:06:84:df:3e:8c:90:8e:0d:ff:80:12:a2: ef:44:d2:15:2b:4e:54:69:a5:ba:10:dd:92:83:ef:68:0e:48: 0a:30:e9:fd:01:2a:b6:66:4e:12:cd:df:f8:36:8b:db:4d:a4: d9:22:75:72 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUTA1dMEZUJ9+iMTOVqPZtJhKrMuEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDMyMDAyMDI0MVoX DTI1MDMxOTAyMDc0MVowMzExMC8GA1UEAxMoRTZFNzEwREFDQzFGNkQ2REQ5RDc4 RkE2MTE3RTQzNjI2NjQyRTZGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMWoEOLjHgNP1+NfQitOjHY9dSUayuC34Va0ob0x0GPkyA5KUllqVcTqRaeF 7RjHXYuyshKzgP9ZTVHVeh/Z/ARnSYNW8Cn9co4mvN/XG7uNXlISDW72Yog1AXAJ 48hi/2kDb1ID+LN5DbNB5v0rutwRniTj/2cx154vLcEhYiApwS0baLhN1pTDi0at l8M4aI9bfztnDcq7VgxKPTOLNqtmzjKmnozSjQd8V56T7r3KU5OlvjfZWviPE0kg QDxv8yvw3dtyWQZZ1P78B1yejZi5ydDd/di1VubcKqVtxchDW319Wxk5CD7Yv1OH /SXqKyI/f18v2G5j75Aqf4cB0A0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFObnENrMH21t2dePphF+Q2JmQub2MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZWQ3MzZkYy1lNWRiLTQzODEtOTcxZi02MjQzNjc0MTg1NGIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlZDczNmRj LWU1ZGItNDM4MS05NzFmLTYyNDM2NzQxODU0Yi8wL0U2RTcxMERBQ0MxRjZENkRE OUQ3OEZBNjExN0U0MzYyNjY0MkU2RjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdD3YwDQYJKoZIhvcNAQELBQADggEBAGk51gZnwjQ2NaBnPGUDMiuGV99PVZ+n JXL20qwWe6VGmeAZhn8kszItCrSZzoMBws1DW6/iaqCPyZTr4DyH5sjyDthI+gqD rWWsw2WurGCtHli4yPlF1NdseWnmuVHhQWlGNZhZ47BmurfRBIQ9aJL960SnRQd3 M5Ygh7/wxDr6kJi22zfU+f4bdMhinBmEKoBBG360vxcdI9ie4ROYG7/FgZqrat9g /nAxnzGsGfUXHXHsHex39cCcLxz/eWY1oHSOdAugSP9/MFAtJwaE3z6MkI4N/4AS ou9E0hUrTlRppboQ3ZKD72gOSAow6f0BKrZmThLN3/g2i9tNpNkidXI= -----END CERTIFICATE-----Generated at Fri May 17 18:13:31 2024 by rpki-client on console-fra.rpki-client.org