$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer File: FC4AE05C1547B778063F91C4687D12E8D6978309.cer (raw, json) Hash identifier: mT7mfPtg8k32f7ckUn+ylC2muAQYLJwK3RCZotXimMk= Subject key identifier: FC:4A:E0:5C:15:47:B7:78:06:3F:91:C4:68:7D:12:E8:D6:97:83:09 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 5301A030DC3280F780CA66F18C5E5DCDFBA2D8B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft caRepository: rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 29 Apr 2024 08:28:24 +0000 Certificate not after: Mon 28 Apr 2025 08:33:24 +0000 Subordinate resources: IP: 157.20.230.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 00:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:01:a0:30:dc:32:80:f7:80:ca:66:f1:8c:5e:5d:cd:fb:a2:d8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 29 08:28:24 2024 GMT Not After : Apr 28 08:33:24 2025 GMT Subject: CN=FC4AE05C1547B778063F91C4687D12E8D6978309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:91:e7:ef:db:2b:6b:98:1d:d6:b7:eb:c3: 38:af:92:a1:98:ea:5a:8f:27:13:94:06:45:36:f7: d1:98:ce:ce:68:1c:49:47:f3:79:7b:f7:91:a9:f2: 64:8e:ae:a0:27:61:a6:d0:b1:bd:4f:6b:33:15:2d: 4a:c4:b1:a5:c9:c7:89:39:c2:ee:58:3e:b7:1c:02: 10:07:bb:57:63:bd:3c:2d:b4:21:2a:5c:76:aa:3d: ef:d8:a5:93:3d:aa:31:39:96:bb:4d:02:67:e7:9b: 67:d0:78:41:d3:8d:a0:ef:68:4f:80:2c:8b:a7:92: 0a:c9:cd:21:63:57:c5:f0:85:d6:14:68:bb:ef:67: 32:e5:88:11:46:95:39:54:24:01:40:1a:52:76:db: 49:b2:a9:b0:b1:a8:8c:b5:1a:3a:3a:62:5c:f8:ea: 21:0e:1f:c5:de:05:61:c9:86:0d:6d:4b:bf:25:98: 95:02:cf:b3:7c:d7:31:4b:f7:68:3c:2a:8b:f7:91: 8d:f6:f9:5c:78:e3:0a:09:ef:6c:b1:e2:b2:88:59: 63:fe:d2:09:e9:f7:8e:46:5c:c9:10:d3:e5:7d:52: ee:84:87:df:a0:88:18:66:f9:b5:29:f1:45:69:c5: c1:c1:7b:5c:44:8a:b1:2e:6c:23:25:6d:5c:1b:e0: 5d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FC:4A:E0:5C:15:47:B7:78:06:3F:91:C4:68:7D:12:E8:D6:97:83:09 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.230.0/23 Signature Algorithm: sha256WithRSAEncryption 28:b2:8d:ca:40:0a:b9:cb:37:c9:0d:d4:21:4b:0c:eb:84:cf: fb:d7:a0:31:ff:f0:e6:38:96:55:ac:6a:b5:2f:6c:71:4f:09: a8:3e:39:ad:cb:d0:bb:e0:cb:e3:60:b7:af:06:2e:bd:fe:a1: 53:b4:29:40:d1:6b:a5:9a:fd:6f:68:fa:35:4b:5c:f4:3c:43: 57:17:87:61:bc:6b:d7:fe:73:98:14:5f:4a:b0:57:9e:ff:dd: 74:01:08:53:65:29:9a:75:02:c2:0c:f7:a2:37:e6:2f:29:aa: 58:70:bc:06:89:73:b8:1d:40:fa:6f:4b:45:9b:e0:36:e5:6b: 6c:f3:58:81:aa:49:86:6c:89:ef:82:17:2f:53:ce:64:18:b9: d2:5e:a8:65:e5:95:20:2b:65:71:77:22:b9:62:b5:40:33:0a: 0c:ab:e9:05:58:1d:a8:d6:ce:21:4c:1c:a2:c3:e2:5a:10:0d: 1f:46:98:ad:46:8f:a4:e7:bd:8a:3e:7b:7e:6e:6e:da:23:e9: 71:1e:6d:e3:19:c5:df:59:88:a1:3a:e6:76:cf:e0:45:7a:37: 10:4e:1f:22:72:13:b9:b4:d6:8b:48:3d:a8:7e:7d:bc:22:3a: 13:20:66:81:73:d1:2d:89:04:d1:50:8a:27:ec:e7:64:06:9a: b7:3b:4a:94 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUUwGgMNwygPeAymbxjF5dzfui2LAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDQyOTA4MjgyNFoX DTI1MDQyODA4MzMyNFowMzExMC8GA1UEAxMoRkM0QUUwNUMxNTQ3Qjc3ODA2M0Y5 MUM0Njg3RDEyRThENjk3ODMwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALeCkefv2ytrmB3Wt+vDOK+SoZjqWo8nE5QGRTb30ZjOzmgcSUfzeXv3kany ZI6uoCdhptCxvU9rMxUtSsSxpcnHiTnC7lg+txwCEAe7V2O9PC20ISpcdqo979il kz2qMTmWu00CZ+ebZ9B4QdONoO9oT4Asi6eSCsnNIWNXxfCF1hRou+9nMuWIEUaV OVQkAUAaUnbbSbKpsLGojLUaOjpiXPjqIQ4fxd4FYcmGDW1LvyWYlQLPs3zXMUv3 aDwqi/eRjfb5XHjjCgnvbLHisohZY/7SCen3jkZcyRDT5X1S7oSH36CIGGb5tSnx RWnFwcF7XESKsS5sIyVtXBvgXeUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPxK4FwVR7d4Bj+RxGh9EujWl4MJMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zY2YwYTc3Yy0zOTI4LTQxMzAtYTA5OC1iNDM3NTcyZDcyMmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNjZjBhNzdj LTM5MjgtNDEzMC1hMDk4LWI0Mzc1NzJkNzIyYy8wL0ZDNEFFMDVDMTU0N0I3Nzgw NjNGOTFDNDY4N0QxMkU4RDY5NzgzMDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFOYwDQYJKoZIhvcNAQELBQADggEBACiyjcpACrnLN8kN1CFLDOuEz/vXoDH/ 8OY4llWsarUvbHFPCag+Oa3L0Lvgy+Ngt68GLr3+oVO0KUDRa6Wa/W9o+jVLXPQ8 Q1cXh2G8a9f+c5gUX0qwV57/3XQBCFNlKZp1AsIM96I35i8pqlhwvAaJc7gdQPpv S0Wb4Dbla2zzWIGqSYZsie+CFy9TzmQYudJeqGXllSArZXF3IrlitUAzCgyr6QVY HajWziFMHKLD4loQDR9GmK1Gj6TnvYo+e35ubtoj6XEebeMZxd9ZiKE65nbP4EV6 NxBOHyJyE7m01otIPah+fbwiOhMgZoFz0S2JBNFQiifs52QGmrc7SpQ= -----END CERTIFICATE-----Generated at Fri May 17 18:13:31 2024 by rpki-client on console-fra.rpki-client.org