$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer File: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer (raw, json) Hash identifier: gmCD/WQvrL+mkKQ7tH3lN54rrWuBPlZOQF4r53bT4rQ= Subject key identifier: E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 4AA4DA920AB529870F6F84C7EB07A7289531D009 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft caRepository: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 16 May 2024 08:20:51 +0000 Certificate not after: Thu 15 May 2025 08:25:51 +0000 Subordinate resources: IP: 157.15.120.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a4:da:92:0a:b5:29:87:0f:6f:84:c7:eb:07:a7:28:95:31:d0:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 16 08:20:51 2024 GMT Not After : May 15 08:25:51 2025 GMT Subject: CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a2:06:86:81:ad:9e:de:d8:6b:28:b0:15:ee: 57:4e:41:85:b5:63:cc:fe:5b:46:db:0f:96:7f:15: 82:cd:e0:4f:60:aa:8e:26:9d:f8:26:ab:ff:2c:bc: fa:99:bb:ff:2e:6a:53:ed:cb:6b:7e:c4:7e:75:4e: ea:d2:5b:38:ca:ad:a0:af:09:0f:10:e2:e6:39:7d: ea:84:81:d4:75:67:ad:4b:dc:68:5a:53:86:51:3e: aa:e4:a5:a9:73:b1:b8:35:9e:b8:f1:81:26:51:b1: 79:91:05:7b:a2:67:e9:a1:67:04:2b:1e:ca:cf:85: 52:64:f6:c7:01:9e:ad:0c:f2:08:a6:93:b7:31:65: cc:4a:78:d7:9b:c3:ab:86:13:54:4a:64:41:0d:36: e3:b4:aa:e2:62:5c:7d:74:00:a5:fb:d6:cc:7e:e9: 8e:5d:62:5f:de:8d:5a:51:1f:75:7d:08:dd:e4:e2: 23:9c:2c:54:58:ab:61:2d:d3:c9:3c:0a:de:d2:3e: a6:e5:c7:e0:7c:ef:73:43:e0:7f:d7:4a:57:b3:fd: 20:ff:96:55:03:48:dd:53:62:aa:b6:2f:a6:30:d3: c6:7b:db:4f:77:32:a4:b6:6a:a9:ff:17:47:6d:d4: 61:2f:a4:bd:e6:88:bf:ce:1f:37:2e:bf:26:37:94: 1a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.120.0/24 Signature Algorithm: sha256WithRSAEncryption 51:5f:a6:c4:31:03:45:64:a5:f1:7f:04:95:5e:1b:44:2f:63: ad:10:9e:1b:1f:f0:22:e6:a4:01:39:78:7e:18:45:2b:c4:96: 53:c1:5b:ac:d4:91:19:16:75:32:1c:36:c8:47:2e:ea:50:de: a4:c6:c5:ed:9c:09:28:b9:e9:c3:7f:1c:54:76:80:3a:a1:9f: 3a:ce:2d:de:bd:10:eb:3b:fa:2f:67:27:44:6c:fc:98:26:4e: 40:83:29:50:7f:0b:63:11:cd:fe:07:d6:b4:a1:d8:5e:46:9e: 51:b8:6c:bb:ff:45:de:af:3c:83:a0:16:a0:97:5d:cd:15:5d: be:69:00:d3:b1:c8:39:27:bc:3e:43:7b:0d:1e:d1:46:5f:fc: e4:4a:5e:62:51:c4:af:64:fc:a2:34:3d:23:29:b4:1d:38:ed: ee:84:73:55:68:43:eb:03:e8:8a:2e:3f:7b:3a:d5:7b:88:19: 61:a2:3b:ef:d7:67:7d:75:15:ed:22:01:bf:bf:db:22:bb:7a: 47:39:65:43:d3:e1:87:98:8e:18:4c:54:4c:cc:53:d9:23:07: 00:4e:d2:fe:5b:9d:a7:4d:e8:fc:d0:5d:8c:28:38:b3:65:58: 1a:92:48:13:f3:5c:f7:5e:56:6d:2d:2e:89:f0:fb:5a:85:de: f6:5a:52:c5 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUSqTakgq1KYcPb4TH6wenKJUx0AkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDUxNjA4MjA1MVoX DTI1MDUxNTA4MjU1MVowMzExMC8GA1UEAxMoRTkwMkJGNENGQzlEOTk3RTM2QTlF MUEzMkZBQTJFMDhDQzJGNUM3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOiBoaBrZ7e2GsosBXuV05BhbVjzP5bRtsPln8Vgs3gT2Cqjiad+Car/yy8 +pm7/y5qU+3La37EfnVO6tJbOMqtoK8JDxDi5jl96oSB1HVnrUvcaFpThlE+quSl qXOxuDWeuPGBJlGxeZEFe6Jn6aFnBCseys+FUmT2xwGerQzyCKaTtzFlzEp415vD q4YTVEpkQQ0247Sq4mJcfXQApfvWzH7pjl1iX96NWlEfdX0I3eTiI5wsVFirYS3T yTwK3tI+puXH4Hzvc0Pgf9dKV7P9IP+WVQNI3VNiqrYvpjDTxnvbT3cypLZqqf8X R23UYS+kveaIv84fNy6/JjeUGm8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOkCv0z8nZl+Nqnhoy+qLgjML1x/MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZmI0NjZjNi0zNzQzLTQ5NWYtYjFhOC0yNjA3Y2M5OTU3M2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmYjQ2NmM2 LTM3NDMtNDk1Zi1iMWE4LTI2MDdjYzk5NTczZi8wL0U5MDJCRjRDRkM5RDk5N0Uz NkE5RTFBMzJGQUEyRTA4Q0MyRjVDN0YubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdD3gwDQYJKoZIhvcNAQELBQADggEBAFFfpsQxA0VkpfF/BJVeG0QvY60Qnhsf 8CLmpAE5eH4YRSvEllPBW6zUkRkWdTIcNshHLupQ3qTGxe2cCSi56cN/HFR2gDqh nzrOLd69EOs7+i9nJ0Rs/JgmTkCDKVB/C2MRzf4H1rSh2F5GnlG4bLv/Rd6vPIOg FqCXXc0VXb5pANOxyDknvD5Dew0e0UZf/ORKXmJRxK9k/KI0PSMptB047e6Ec1Vo Q+sD6IouP3s61XuIGWGiO+/XZ311Fe0iAb+/2yK7ekc5ZUPT4YeYjhhMVEzMU9kj BwBO0v5bnadN6PzQXYwoOLNlWBqSSBPzXPdeVm0tLonw+1qF3vZaUsU= -----END CERTIFICATE-----Generated at Fri Jun 21 21:25:33 2024 by rpki-client on console-ams.rpki-client.org