$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer File: EAD173629E4F955F44EC781A3739775E738ACCFD.cer (raw, json) Hash identifier: uLZoWINxSar99T0piUSkXzlBlWpeDiKN5bIqmd+fK0k= Subject key identifier: EA:D1:73:62:9E:4F:95:5F:44:EC:78:1A:37:39:77:5E:73:8A:CC:FD Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 16F0EDF62B75743AE35A577415C06A43F85776DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft caRepository: rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 14 May 2024 02:57:00 +0000 Certificate not after: Tue 13 May 2025 03:02:00 +0000 Subordinate resources: IP: 157.66.29.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f0:ed:f6:2b:75:74:3a:e3:5a:57:74:15:c0:6a:43:f8:57:76:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 14 02:57:00 2024 GMT Not After : May 13 03:02:00 2025 GMT Subject: CN=EAD173629E4F955F44EC781A3739775E738ACCFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3d:48:d8:b3:ec:89:bd:a6:1c:03:b0:75:4b: a8:b7:25:84:20:aa:97:71:50:ea:79:07:4c:8e:9c: 4a:0c:a4:b4:09:f7:71:fa:f1:5c:0d:03:bc:1c:c2: dc:c9:f3:d2:26:a6:f8:9b:1f:3e:b5:ba:6d:7a:3e: c7:68:07:04:c3:1f:f9:dd:79:fb:e0:5f:85:0b:47: 7b:e0:9e:13:34:e2:d4:1c:13:c1:7f:eb:6c:bc:99: 92:1a:db:65:97:7e:fa:93:a0:a4:18:18:f4:79:1e: 7f:3d:e0:4d:e9:7f:27:b6:bc:97:fe:9f:51:de:08: d6:34:a0:a3:24:24:3d:34:0f:76:17:65:db:e5:df: 03:71:28:6d:e6:8b:3f:75:44:56:73:d3:04:f3:e8: 14:c7:6b:09:75:88:4c:4d:38:b4:37:5a:72:c4:b8: c8:dc:da:fb:cd:57:8f:5a:96:8f:4a:1d:5d:90:f8: d2:7c:1b:dd:7f:f9:12:6c:87:3f:31:df:2b:03:54: a2:32:2c:cd:72:c1:26:2f:46:48:ef:4c:e0:0f:59: ed:cc:3c:e2:0c:90:be:bd:da:4e:a0:32:34:1b:e3: 9d:96:6e:3e:ab:36:68:34:d9:f9:72:00:2e:c8:93: b6:ce:bc:41:9d:3b:25:2d:27:09:0d:b9:06:fc:6d: fe:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EA:D1:73:62:9E:4F:95:5F:44:EC:78:1A:37:39:77:5E:73:8A:CC:FD X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.29.0/24 Signature Algorithm: sha256WithRSAEncryption 16:bc:9d:b1:64:56:46:a4:13:54:a3:c3:fa:97:91:56:3c:c1: a9:34:eb:1a:f5:44:95:81:1d:f2:25:4c:d4:73:ac:0d:59:8a: 20:dd:26:06:89:3f:4f:88:7a:b1:3f:1f:92:47:6c:1a:53:fc: 47:40:54:0c:f4:80:44:df:c6:8d:b7:ca:09:e8:99:de:24:d1: b4:bb:0c:10:ed:7c:bf:8f:c4:15:f0:dd:78:d3:77:99:e8:5e: 14:5b:89:b1:0b:88:29:3a:be:be:ff:e0:28:53:18:59:9e:a2: a6:fd:23:b2:3d:1d:26:05:64:94:c1:d1:ad:61:5f:e8:cf:cd: d7:d7:72:84:58:af:06:09:4a:32:fc:df:ea:a7:fe:d2:42:5a: e4:78:32:e5:c8:8a:46:f5:9b:c6:6a:0d:3d:f0:7e:1a:61:5e: 7b:a1:8d:88:7f:cb:0a:91:69:71:22:44:7d:6f:44:a3:66:11: 4c:05:80:8f:c0:13:73:e2:a5:90:21:9a:61:04:4c:ed:cb:ae: e2:a6:31:75:52:32:46:ea:05:ec:65:28:7b:c9:be:5d:4b:9b: 22:e8:9d:4f:5a:48:f2:66:31:74:37:85:ef:15:33:67:ff:65: 9d:db:c3:d8:76:89:1d:eb:b9:14:2c:19:a3:f0:0e:43:3f:b0: 2c:0e:a6:73 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUFvDt9it1dDrjWld0FcBqQ/hXdt0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDUxNDAyNTcwMFoX DTI1MDUxMzAzMDIwMFowMzExMC8GA1UEAxMoRUFEMTczNjI5RTRGOTU1RjQ0RUM3 ODFBMzczOTc3NUU3MzhBQ0NGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKQ9SNiz7Im9phwDsHVLqLclhCCql3FQ6nkHTI6cSgyktAn3cfrxXA0DvBzC 3Mnz0iam+JsfPrW6bXo+x2gHBMMf+d15++BfhQtHe+CeEzTi1BwTwX/rbLyZkhrb ZZd++pOgpBgY9Hkefz3gTel/J7a8l/6fUd4I1jSgoyQkPTQPdhdl2+XfA3EobeaL P3VEVnPTBPPoFMdrCXWITE04tDdacsS4yNza+81Xj1qWj0odXZD40nwb3X/5EmyH PzHfKwNUojIszXLBJi9GSO9M4A9Z7cw84gyQvr3aTqAyNBvjnZZuPqs2aDTZ+XIA LsiTts68QZ07JS0nCQ25Bvxt/rcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOrRc2KeT5VfROx4Gjc5d15zisz9MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zMWI0MzNhNS03MmIxLTQ2NTMtOTlkMy05NDY5YzhiOGI3NjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxYjQzM2E1 LTcyYjEtNDY1My05OWQzLTk0NjljOGI4Yjc2Mi8wL0VBRDE3MzYyOUU0Rjk1NUY0 NEVDNzgxQTM3Mzk3NzVFNzM4QUNDRkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdQh0wDQYJKoZIhvcNAQELBQADggEBABa8nbFkVkakE1Sjw/qXkVY8wak06xr1 RJWBHfIlTNRzrA1ZiiDdJgaJP0+IerE/H5JHbBpT/EdAVAz0gETfxo23ygnomd4k 0bS7DBDtfL+PxBXw3XjTd5noXhRbibELiCk6vr7/4ChTGFmeoqb9I7I9HSYFZJTB 0a1hX+jPzdfXcoRYrwYJSjL83+qn/tJCWuR4MuXIikb1m8ZqDT3wfhphXnuhjYh/ ywqRaXEiRH1vRKNmEUwFgI/AE3PipZAhmmEETO3LruKmMXVSMkbqBexlKHvJvl1L myLonU9aSPJmMXQ3he8VM2f/ZZ3bw9h2iR3ruRQsGaPwDkM/sCwOpnM= -----END CERTIFICATE-----Generated at Fri Jun 21 21:25:33 2024 by rpki-client on console-ams.rpki-client.org