$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer File: F5BC050A20C516FEBC061A1B70E488BB426444BC.cer (raw, json) Hash identifier: TIPseSC4g2v3MF9nlftcpAIix4jTq+cKs8duvQvDDI4= Subject key identifier: F5:BC:05:0A:20:C5:16:FE:BC:06:1A:1B:70:E4:88:BB:42:64:44:BC Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 34E1BD9548DF5D0C39A593434BB796354ADACF54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft caRepository: rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 15 Nov 2024 07:09:06 +0000 Certificate not after: Fri 14 Nov 2025 07:14:06 +0000 Subordinate resources: IP: 157.66.172.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:e1:bd:95:48:df:5d:0c:39:a5:93:43:4b:b7:96:35:4a:da:cf:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 15 07:09:06 2024 GMT Not After : Nov 14 07:14:06 2025 GMT Subject: CN=F5BC050A20C516FEBC061A1B70E488BB426444BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d2:34:7c:c9:d3:65:a5:95:c4:8f:29:b6:06: 54:f1:1c:84:b4:07:cf:5a:4b:fa:1a:7e:f4:da:51: dd:ea:47:9d:7b:5b:85:a4:0b:bd:44:9b:b6:57:8f: 3e:3d:df:76:61:6a:a0:e3:6a:c7:26:70:1a:94:30: 62:bd:48:94:08:f0:10:48:b8:9a:89:42:61:89:f8: 6c:ca:fc:29:54:22:3f:d6:81:5e:a2:9b:75:75:16: 9b:28:64:4c:ce:00:08:20:f9:52:b8:90:45:0d:26: 47:a4:e2:7d:89:d1:d9:21:41:32:a4:c1:60:f4:32: 31:26:f1:ee:dd:a9:33:ff:70:92:7d:ad:4e:02:91: 1f:fa:af:07:59:2b:a3:c8:4a:5e:68:3d:4f:ff:4e: ff:bd:03:57:d4:f4:57:c1:fc:9c:5d:5d:2f:18:cd: e1:98:30:9e:1b:5a:ee:22:94:97:ac:36:10:ce:cc: 97:c7:09:21:75:77:50:75:f0:2e:38:02:91:44:14: 36:5c:1b:3d:56:a4:d0:5d:51:16:1a:01:aa:e2:e6: 39:db:10:c9:c6:33:f2:34:ae:76:de:97:50:d3:de: a8:ab:1e:d6:73:13:2e:8a:73:38:40:07:6c:bb:64: 00:6f:bd:9f:89:7d:1d:2a:1d:8c:b4:c5:94:38:cb: 06:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F5:BC:05:0A:20:C5:16:FE:BC:06:1A:1B:70:E4:88:BB:42:64:44:BC X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.172.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:10:a8:6e:48:79:23:dc:27:10:46:9a:5a:6f:1d:3e:29:ff: 01:bd:6f:4f:50:f5:5a:8e:ae:8a:4a:96:aa:46:77:dd:c6:9c: 9b:21:ae:4b:37:c7:db:b5:9a:72:4c:78:59:55:4c:2d:36:b2: 1e:cd:ef:97:a1:b3:fd:b4:5b:70:7b:cb:76:5a:a8:8c:7b:3f: c1:b7:ca:d4:f0:01:d8:88:2d:4f:95:db:99:60:bc:6a:5a:44: c0:05:38:2a:e2:39:85:c2:c5:10:ba:4b:d3:29:70:21:34:a8: 37:2e:bc:04:d7:5a:fc:20:e1:64:4a:b4:a8:5c:bd:42:60:59: 7b:4f:74:4c:4b:88:8f:4b:28:3f:c4:2c:83:b5:3e:e8:33:8e: 60:b7:43:14:b9:17:33:ad:29:c1:5e:af:2d:81:8f:07:a5:73: fa:ce:3e:1f:85:ad:c8:ed:7f:33:2c:c2:cb:64:8f:5b:b8:35: 6a:0e:9e:0c:6f:9c:39:14:c5:04:ba:28:37:6c:b2:92:c5:f2: 9d:5d:01:55:23:f9:f3:bb:39:02:a9:f2:57:f4:0d:d6:fa:c4: 3f:c7:65:9b:9f:4f:26:64:97:48:5b:c7:1c:a1:6f:e3:db:7f: bf:bc:16:b2:57:ed:cf:db:72:d6:c7:c3:6d:8c:a0:9d:76:87: 2f:59:0e:d6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUNOG9lUjfXQw5pZNDS7eWNUraz1QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTExNTA3MDkwNloX DTI1MTExNDA3MTQwNlowMzExMC8GA1UEAxMoRjVCQzA1MEEyMEM1MTZGRUJDMDYx QTFCNzBFNDg4QkI0MjY0NDRCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANrSNHzJ02WllcSPKbYGVPEchLQHz1pL+hp+9NpR3epHnXtbhaQLvUSbtleP Pj3fdmFqoONqxyZwGpQwYr1IlAjwEEi4molCYYn4bMr8KVQiP9aBXqKbdXUWmyhk TM4ACCD5UriQRQ0mR6TifYnR2SFBMqTBYPQyMSbx7t2pM/9wkn2tTgKRH/qvB1kr o8hKXmg9T/9O/70DV9T0V8H8nF1dLxjN4Zgwnhta7iKUl6w2EM7Ml8cJIXV3UHXw LjgCkUQUNlwbPVak0F1RFhoBquLmOdsQycYz8jSudt6XUNPeqKse1nMTLopzOEAH bLtkAG+9n4l9HSodjLTFlDjLBu8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPW8BQogxRb+vAYaG3DkiLtCZES8MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wMzJmOThhMC0wOTQ3LTRmN2EtYmVlNy1mZmMzZDA1Yjk0MGUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAzMmY5OGEw LTA5NDctNGY3YS1iZWU3LWZmYzNkMDViOTQwZS8wL0Y1QkMwNTBBMjBDNTE2RkVC QzA2MUExQjcwRTQ4OEJCNDI2NDQ0QkMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdQqwwDQYJKoZIhvcNAQELBQADggEBAB0QqG5IeSPcJxBGmlpvHT4p/wG9b09Q 9VqOropKlqpGd93GnJshrks3x9u1mnJMeFlVTC02sh7N75ehs/20W3B7y3ZaqIx7 P8G3ytTwAdiILU+V25lgvGpaRMAFOCriOYXCxRC6S9MpcCE0qDcuvATXWvwg4WRK tKhcvUJgWXtPdExLiI9LKD/ELIO1PugzjmC3QxS5FzOtKcFery2Bjwelc/rOPh+F rcjtfzMswstkj1u4NWoOngxvnDkUxQS6KDdsspLF8p1dAVUj+fO7OQKp8lf0Ddb6 xD/HZZufTyZkl0hbxxyhb+Pbf7+8FrJX7c/bctbHw22MoJ12hy9ZDtY= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org