$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer File: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer (raw, json) Hash identifier: JknE89ie6MJYTeP6KikYEXY7RkVzQLZLmnJ0uFQt1eo= Subject key identifier: FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 19D0045971394203802720C3D7BC5DBB8DA670F1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft caRepository: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 27 Jun 2024 05:51:29 +0000 Certificate not after: Thu 26 Jun 2025 05:56:29 +0000 Subordinate resources: IP: 157.66.37.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d0:04:59:71:39:42:03:80:27:20:c3:d7:bc:5d:bb:8d:a6:70:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 27 05:51:29 2024 GMT Not After : Jun 26 05:56:29 2025 GMT Subject: CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:02:d8:36:e7:fd:65:c4:50:4c:92:c5:95:dc: 40:89:79:04:8f:f2:e8:a4:c0:e1:a4:13:ea:37:38: af:c8:f1:a4:1e:0b:18:ee:cc:3f:30:4b:7c:7e:6c: b7:b9:4c:de:24:8d:e4:da:4a:98:8c:cb:ff:d0:32: a8:1d:c1:b3:4b:16:35:55:4b:8f:a3:73:6e:6b:9d: 25:02:c8:d7:23:86:e5:70:e5:d3:dc:2e:b1:23:fd: a2:7d:88:cc:e1:0e:14:6a:34:e6:8f:8a:74:48:79: 19:3b:0e:88:e4:1b:65:59:94:ea:99:51:1f:1f:35: 11:16:cd:b7:dd:09:da:d3:84:b2:d5:1b:e5:59:5d: 24:12:60:3e:cc:8b:bb:58:da:83:de:d7:5f:e3:f7: 3f:70:d2:37:a3:9a:47:fa:df:d4:06:fb:a3:eb:a7: c9:81:2c:59:b3:db:0b:4e:7b:8b:c7:31:04:7f:34: a0:b4:3f:8b:95:56:55:48:2b:94:41:1b:d4:6d:bd: fb:9b:86:ba:46:67:be:39:4c:d7:22:fd:1c:79:93: d4:0f:05:21:9e:8a:ee:53:ff:73:4a:22:5a:ea:f8: ef:38:87:1c:18:f7:03:82:23:e8:a8:4c:09:a3:bf: 61:2c:10:86:0f:21:e7:d2:a1:39:36:5d:df:78:5d: 5e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.37.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:98:97:dc:3c:0a:c6:87:71:93:a8:0b:1a:e3:9c:26:8b:d4: c0:2d:98:07:3e:a0:3e:ff:e9:2b:5e:c2:72:4a:80:b9:4a:4b: d9:60:d9:a3:3d:c0:44:9d:1b:8f:89:94:d1:b2:31:34:6c:e6: 77:61:b2:ff:d7:d4:f2:a9:bb:56:6c:d8:fb:4b:d1:12:37:08: 19:6a:80:86:95:de:d6:40:70:08:8f:43:97:6a:94:d6:9c:e9: 05:c2:c7:58:42:f5:09:46:d3:f3:f4:63:be:07:64:5e:ef:91: 2f:dc:8e:bc:cb:c8:9b:86:2b:37:cc:36:35:86:05:2a:b0:10: 38:a1:b2:54:17:83:5c:9a:be:2d:0f:b4:a0:21:a7:a5:7f:17: 63:8b:b0:a3:4a:44:38:69:99:4e:ba:98:37:c0:50:ea:8d:be: b2:38:0e:bd:89:07:0c:11:c5:9f:48:6f:6c:4e:e6:88:98:94: 78:ca:b6:77:af:82:3f:20:0a:81:68:5e:2c:0a:70:ff:2f:cb: e2:73:10:1f:62:26:d0:4e:c2:06:27:51:22:50:40:b9:af:59: d4:44:83:74:88:f5:a8:a0:49:be:16:c9:13:15:ac:8c:75:c4: a3:df:d6:c8:6e:04:68:1d:fe:40:69:cc:50:06:55:35:79:99: 31:45:ab:f9 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUGdAEWXE5QgOAJyDD17xdu42mcPEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDYyNzA1NTEyOVoX DTI1MDYyNjA1NTYyOVowMzExMC8GA1UEAxMoRkE2MkQ4Mjg1NDRGNzBCRUFEOEIz QzA0QTg2MTc1RTRGQjA3QzRCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOMC2Dbn/WXEUEySxZXcQIl5BI/y6KTA4aQT6jc4r8jxpB4LGO7MPzBLfH5s t7lM3iSN5NpKmIzL/9AyqB3Bs0sWNVVLj6NzbmudJQLI1yOG5XDl09wusSP9on2I zOEOFGo05o+KdEh5GTsOiOQbZVmU6plRHx81ERbNt90J2tOEstUb5VldJBJgPsyL u1jag97XX+P3P3DSN6OaR/rf1Ab7o+unyYEsWbPbC057i8cxBH80oLQ/i5VWVUgr lEEb1G29+5uGukZnvjlM1yL9HHmT1A8FIZ6K7lP/c0oiWur47ziHHBj3A4Ij6KhM CaO/YSwQhg8h59KhOTZd33hdXlcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPpi2ChUT3C+rYs8BKhhdeT7B8S2MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xYzA0ZGVkOC1iMGY1LTQ1OTQtOGUwZS05MTFlY2I3N2VlNzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFjMDRkZWQ4 LWIwZjUtNDU5NC04ZTBlLTkxMWVjYjc3ZWU3My8wL0ZBNjJEODI4NTQ0RjcwQkVB RDhCM0MwNEE4NjE3NUU0RkIwN0M0QjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdQiUwDQYJKoZIhvcNAQELBQADggEBAC+Yl9w8CsaHcZOoCxrjnCaL1MAtmAc+ oD7/6StewnJKgLlKS9lg2aM9wESdG4+JlNGyMTRs5ndhsv/X1PKpu1Zs2PtL0RI3 CBlqgIaV3tZAcAiPQ5dqlNac6QXCx1hC9QlG0/P0Y74HZF7vkS/cjrzLyJuGKzfM NjWGBSqwEDihslQXg1yavi0PtKAhp6V/F2OLsKNKRDhpmU66mDfAUOqNvrI4Dr2J BwwRxZ9Ib2xO5oiYlHjKtnevgj8gCoFoXiwKcP8vy+JzEB9iJtBOwgYnUSJQQLmv WdREg3SI9aigSb4WyRMVrIx1xKPf1shuBGgd/kBpzFAGVTV5mTFFq/k= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org