$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer File: FC4AE05C1547B778063F91C4687D12E8D6978309.cer (raw, json) Hash identifier: aKIVvpYeUDziZHzSnauDKzvbDV2WPep+usvd2uuxct0= Subject key identifier: FC:4A:E0:5C:15:47:B7:78:06:3F:91:C4:68:7D:12:E8:D6:97:83:09 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 7398E6C1A05AF0FBF4EEFC1CD3BE57DAD7DCAF37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft caRepository: rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Mar 2025 20:20:55 +0000 Certificate not after: Mon 30 Mar 2026 20:25:55 +0000 Subordinate resources: IP: 157.20.230.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:98:e6:c1:a0:5a:f0:fb:f4:ee:fc:1c:d3:be:57:da:d7:dc:af:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Mar 31 20:20:55 2025 GMT Not After : Mar 30 20:25:55 2026 GMT Subject: CN=FC4AE05C1547B778063F91C4687D12E8D6978309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:91:e7:ef:db:2b:6b:98:1d:d6:b7:eb:c3: 38:af:92:a1:98:ea:5a:8f:27:13:94:06:45:36:f7: d1:98:ce:ce:68:1c:49:47:f3:79:7b:f7:91:a9:f2: 64:8e:ae:a0:27:61:a6:d0:b1:bd:4f:6b:33:15:2d: 4a:c4:b1:a5:c9:c7:89:39:c2:ee:58:3e:b7:1c:02: 10:07:bb:57:63:bd:3c:2d:b4:21:2a:5c:76:aa:3d: ef:d8:a5:93:3d:aa:31:39:96:bb:4d:02:67:e7:9b: 67:d0:78:41:d3:8d:a0:ef:68:4f:80:2c:8b:a7:92: 0a:c9:cd:21:63:57:c5:f0:85:d6:14:68:bb:ef:67: 32:e5:88:11:46:95:39:54:24:01:40:1a:52:76:db: 49:b2:a9:b0:b1:a8:8c:b5:1a:3a:3a:62:5c:f8:ea: 21:0e:1f:c5:de:05:61:c9:86:0d:6d:4b:bf:25:98: 95:02:cf:b3:7c:d7:31:4b:f7:68:3c:2a:8b:f7:91: 8d:f6:f9:5c:78:e3:0a:09:ef:6c:b1:e2:b2:88:59: 63:fe:d2:09:e9:f7:8e:46:5c:c9:10:d3:e5:7d:52: ee:84:87:df:a0:88:18:66:f9:b5:29:f1:45:69:c5: c1:c1:7b:5c:44:8a:b1:2e:6c:23:25:6d:5c:1b:e0: 5d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FC:4A:E0:5C:15:47:B7:78:06:3F:91:C4:68:7D:12:E8:D6:97:83:09 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.230.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:e3:d0:3f:20:3d:3b:34:3f:06:5a:60:0c:81:c7:8a:6c:86: dd:c8:4a:ad:4a:a0:aa:b5:7f:ec:95:77:41:14:b7:1b:e4:60: 57:9f:d4:03:14:c5:d7:c3:43:58:51:ee:78:70:03:93:b0:22: 1b:ae:1d:39:ed:95:d0:90:d1:4c:41:97:11:ae:4b:70:bc:15: 68:65:dd:c3:b0:36:94:a5:40:0b:85:95:4a:6e:3e:5b:12:34: f9:af:96:29:0b:20:c5:6f:f6:75:a4:aa:f1:a5:85:6c:57:89: f1:2b:60:d9:82:f6:de:76:94:1f:f2:04:5a:76:70:1a:5d:e6: 22:50:80:1b:9a:eb:a5:3e:be:5e:27:e1:c5:33:f3:08:7c:64: 8d:32:3e:ea:44:65:b7:1e:14:1b:14:a3:e6:d3:de:1a:72:40: db:b5:ed:8a:1f:28:ba:3f:d8:4b:92:36:47:62:07:11:65:4f: 67:e8:fe:d2:0a:88:09:1e:20:85:25:d7:3f:ec:ee:49:9c:6f: 88:6e:25:99:6c:04:7c:04:b9:ee:4b:7b:79:be:18:d3:e8:b1: c0:64:b9:ed:43:15:f5:1d:65:e5:ca:17:e7:68:cb:07:79:88: f4:cd:d0:3a:18:42:4f:fc:3d:8e:9b:c6:61:64:99:11:a3:66: e6:44:17:78 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUc5jmwaBa8Pv07vwc075X2tfcrzcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDMzMTIwMjA1NVoX DTI2MDMzMDIwMjU1NVowMzExMC8GA1UEAxMoRkM0QUUwNUMxNTQ3Qjc3ODA2M0Y5 MUM0Njg3RDEyRThENjk3ODMwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALeCkefv2ytrmB3Wt+vDOK+SoZjqWo8nE5QGRTb30ZjOzmgcSUfzeXv3kany ZI6uoCdhptCxvU9rMxUtSsSxpcnHiTnC7lg+txwCEAe7V2O9PC20ISpcdqo979il kz2qMTmWu00CZ+ebZ9B4QdONoO9oT4Asi6eSCsnNIWNXxfCF1hRou+9nMuWIEUaV OVQkAUAaUnbbSbKpsLGojLUaOjpiXPjqIQ4fxd4FYcmGDW1LvyWYlQLPs3zXMUv3 aDwqi/eRjfb5XHjjCgnvbLHisohZY/7SCen3jkZcyRDT5X1S7oSH36CIGGb5tSnx RWnFwcF7XESKsS5sIyVtXBvgXeUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPxK4FwVR7d4Bj+RxGh9EujWl4MJMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zY2YwYTc3Yy0zOTI4LTQxMzAtYTA5OC1iNDM3NTcyZDcyMmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNjZjBhNzdj LTM5MjgtNDEzMC1hMDk4LWI0Mzc1NzJkNzIyYy8wL0ZDNEFFMDVDMTU0N0I3Nzgw NjNGOTFDNDY4N0QxMkU4RDY5NzgzMDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFOYwDQYJKoZIhvcNAQELBQADggEBACrj0D8gPTs0PwZaYAyBx4psht3ISq1K oKq1f+yVd0EUtxvkYFef1AMUxdfDQ1hR7nhwA5OwIhuuHTntldCQ0UxBlxGuS3C8 FWhl3cOwNpSlQAuFlUpuPlsSNPmvlikLIMVv9nWkqvGlhWxXifErYNmC9t52lB/y BFp2cBpd5iJQgBua66U+vl4n4cUz8wh8ZI0yPupEZbceFBsUo+bT3hpyQNu17Yof KLo/2EuSNkdiBxFlT2fo/tIKiAkeIIUl1z/s7kmcb4huJZlsBHwEue5Le3m+GNPo scBkue1DFfUdZeXKF+doywd5iPTN0DoYQk/8PY6bxmFkmRGjZuZEF3g= -----END CERTIFICATE-----Generated at Mon Apr 7 03:58:21 2025 by rpki-client