$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer File: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer (raw, json) Hash identifier: O4Da1sBJy5QhyPvugxxJWdJmdwEt15bId8TK0b+yR+A= Subject key identifier: F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1E60A5E46F15D86B724868BFB801455539F18302 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft caRepository: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 30 May 2024 06:53:50 +0000 Certificate not after: Thu 29 May 2025 06:58:50 +0000 Subordinate resources: IP: 157.66.9.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:60:a5:e4:6f:15:d8:6b:72:48:68:bf:b8:01:45:55:39:f1:83:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 30 06:53:50 2024 GMT Not After : May 29 06:58:50 2025 GMT Subject: CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:db:12:f7:39:3b:f1:d8:36:1b:c5:ed:7a: 04:dd:9c:83:e2:37:01:82:26:a8:b8:22:4a:01:db: 39:d0:74:9f:f4:9e:5c:76:ac:2e:38:05:57:91:ef: b2:45:f4:19:92:fa:c0:cd:55:50:3c:17:fe:f1:ec: fc:51:9a:9f:18:4c:29:46:46:e1:7e:91:af:a1:31: 18:29:c4:8a:9f:65:95:d7:12:14:56:e6:e3:a1:dc: 01:a3:7e:9d:a0:9b:9c:ab:73:52:94:da:11:80:c1: f0:36:c6:c2:85:80:83:e8:e8:56:c2:15:25:dd:f1: 4e:70:63:80:33:96:00:14:3d:96:85:f0:8f:a4:14: b2:e9:a2:e1:00:95:db:89:6c:49:b6:ec:a7:e3:06: aa:53:16:82:24:2a:c3:68:98:ae:43:a3:e1:25:4c: 01:81:07:2b:e8:88:84:6d:6d:f7:cf:da:23:34:26: 99:44:cd:73:91:31:05:d0:82:48:47:e5:34:f0:81: eb:a9:25:ab:71:8d:e5:28:f6:06:d2:53:b3:50:c5: e6:a1:45:81:c9:3d:24:78:e9:16:f9:01:20:c0:0a: bc:aa:b9:a3:30:75:e9:ef:c3:23:38:1c:ae:24:5b: 44:37:3c:27:d0:28:1a:22:dc:39:90:cc:ad:01:94: a4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.9.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:84:32:d3:ba:20:7b:9d:50:a9:b3:7e:56:74:ff:4e:d6:6a: 26:c6:ad:54:2e:fe:3b:6c:0b:ad:e3:bb:14:44:e5:30:ab:8f: 0e:40:58:58:51:74:38:c7:d0:c2:1e:d4:c3:47:83:8d:a2:97: b8:05:93:69:c3:73:23:68:3e:4e:47:7b:35:bd:8c:3f:e3:44: a5:4e:a6:44:06:86:f1:0f:b1:7c:1e:87:c5:32:14:64:ae:37: 9b:46:30:d9:a3:05:6d:9c:ad:42:d9:e5:47:76:71:b6:51:41: ad:13:7b:2b:00:85:0d:2d:dd:24:43:d8:64:ae:5b:69:02:f9: be:37:ca:92:45:d1:26:6f:a5:76:75:b8:e4:f8:10:b1:00:3b: fa:c8:88:2d:63:62:45:e9:4e:22:56:c6:ab:44:91:08:fb:4c: 03:6b:22:4c:84:11:c8:c9:13:45:c2:e8:75:bf:c7:d6:de:cc: e7:94:dc:0d:bd:42:58:9e:5c:59:03:fd:a8:df:71:bb:24:a8: 68:ca:95:74:b1:d1:7e:9b:86:9d:e0:9a:42:8d:41:c3:ff:36: 65:d0:59:9e:47:5b:c4:10:bc:e8:24:9f:c0:fc:42:a1:db:c0: 36:f0:03:be:32:b0:eb:e0:6d:e3:36:0e:fa:48:02:bb:2b:6c: 73:25:12:95 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHmCl5G8V2GtySGi/uAFFVTnxgwIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDUzMDA2NTM1MFoX DTI1MDUyOTA2NTg1MFowMzExMC8GA1UEAxMoRjk5MzBFMzA4RDMwQjNFMTVDRkZG N0VCMEQzNDM3QTBCN0VDRTdCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/u2xL3OTvx2DYbxe16BN2cg+I3AYImqLgiSgHbOdB0n/SeXHasLjgFV5Hv skX0GZL6wM1VUDwX/vHs/FGanxhMKUZG4X6Rr6ExGCnEip9lldcSFFbm46HcAaN+ naCbnKtzUpTaEYDB8DbGwoWAg+joVsIVJd3xTnBjgDOWABQ9loXwj6QUsumi4QCV 24lsSbbsp+MGqlMWgiQqw2iYrkOj4SVMAYEHK+iIhG1t98/aIzQmmUTNc5ExBdCC SEflNPCB66klq3GN5Sj2BtJTs1DF5qFFgck9JHjpFvkBIMAKvKq5ozB16e/DIzgc riRbRDc8J9AoGiLcOZDMrQGUpPUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPmTDjCNMLPhXP/36w00N6C37Oe9MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZWJmNTVjYS1kNzgzLTRhM2ItOTVjYy03M2NjMzQ2ZGI0NmUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlYmY1NWNh LWQ3ODMtNGEzYi05NWNjLTczY2MzNDZkYjQ2ZS8wL0Y5OTMwRTMwOEQzMEIzRTE1 Q0ZGRjdFQjBEMzQzN0EwQjdFQ0U3QkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdQgkwDQYJKoZIhvcNAQELBQADggEBAIyEMtO6IHudUKmzflZ0/07WaibGrVQu /jtsC63juxRE5TCrjw5AWFhRdDjH0MIe1MNHg42il7gFk2nDcyNoPk5HezW9jD/j RKVOpkQGhvEPsXweh8UyFGSuN5tGMNmjBW2crULZ5Ud2cbZRQa0TeysAhQ0t3SRD 2GSuW2kC+b43ypJF0SZvpXZ1uOT4ELEAO/rIiC1jYkXpTiJWxqtEkQj7TANrIkyE EcjJE0XC6HW/x9bezOeU3A29QlieXFkD/ajfcbskqGjKlXSx0X6bhp3gmkKNQcP/ NmXQWZ5HW8QQvOgkn8D8QqHbwDbwA74ysOvgbeM2DvpIArsrbHMlEpU= -----END CERTIFICATE-----Generated at Fri Jun 21 21:25:33 2024 by rpki-client on console-ams.rpki-client.org