$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer File: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer (raw, json) Hash identifier: J9izWlwX39LLENNwL/6d66OylG5EnU8fp02FbSJvEzw= Subject key identifier: FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 13B3AC1E9AEB30C59659A91FB4AED56A16045D04 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft caRepository: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 19 Mar 2024 05:18:10 +0000 Certificate not after: Tue 18 Mar 2025 05:23:10 +0000 Subordinate resources: IP: 157.20.95.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 00:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b3:ac:1e:9a:eb:30:c5:96:59:a9:1f:b4:ae:d5:6a:16:04:5d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 19 05:18:10 2024 GMT Not After : Mar 18 05:23:10 2025 GMT Subject: CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:22:af:8a:55:ed:c7:2b:59:ae:74:47:f3:b1: 78:db:03:f9:e7:87:4d:f2:26:1a:34:e2:46:96:99: 42:c6:6a:72:f1:ef:79:7e:9c:ab:00:c3:71:65:01: f6:73:ac:8c:41:38:0b:a2:83:de:b8:fb:09:7d:a1: 1a:85:38:ac:28:fa:10:93:c5:4f:ee:c8:52:5f:60: 40:6d:c9:2c:dd:0a:1f:c6:6a:4b:38:91:c7:16:d1: c0:92:8d:e5:44:da:dc:ca:d6:55:f0:29:a6:bd:18: 78:44:0c:25:95:a2:3c:76:f0:dc:0f:4d:23:c3:2a: 57:f9:85:15:f8:71:d1:77:db:21:36:d3:bf:11:02: 24:08:2d:37:3e:ee:50:9d:ce:97:c2:26:27:23:6f: 6e:bf:84:68:37:50:cd:b5:36:e9:0e:17:a4:fc:26: c4:a9:e4:ef:75:8e:11:c0:cd:1f:0a:99:78:bb:49: 91:74:36:0f:a7:79:72:40:e5:eb:85:36:0c:dc:35: 80:2b:59:23:aa:b1:36:8d:06:a7:a6:93:ff:7d:ae: 89:16:d1:ac:bc:93:71:c3:a0:f0:39:f9:f5:03:7c: 83:8c:24:6e:e4:2c:76:82:12:94:67:96:f2:f0:c6: 19:ad:04:f0:9a:d3:90:93:9f:97:32:74:cf:0a:4f: 84:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.95.0/24 Signature Algorithm: sha256WithRSAEncryption 84:b8:b0:f1:eb:cc:66:7c:57:20:2b:01:b0:6b:0d:ea:ad:f1: 03:64:71:20:24:0a:af:b3:0a:86:27:f0:ad:07:da:b5:95:62: 09:7d:20:f2:4f:4e:04:f7:2b:68:63:2e:32:93:f1:30:5e:df: e1:14:2b:57:f8:5b:34:db:92:35:9d:6f:5c:16:17:32:b4:b7: ef:84:90:c0:65:e2:84:94:2a:e7:43:45:90:af:15:a9:13:54: 21:22:52:8b:a4:59:bd:a1:c4:70:4f:b8:19:89:8b:3b:5a:c7: 6e:72:cf:7a:b2:28:cd:8b:1f:d7:98:72:3f:83:8d:2b:7f:d7: ba:a0:5f:1c:72:e8:27:ff:c0:01:a3:b2:61:f9:77:e6:16:35: a2:2f:9f:65:92:c5:03:1f:75:5f:aa:cc:9f:b5:c5:b8:7e:3a: dd:2e:7a:5b:ad:64:cd:e6:cb:56:71:a9:87:5e:60:50:08:37: f9:45:d2:0d:cc:9e:9c:00:f1:87:73:db:73:28:aa:b2:5c:0b: 6a:91:5d:a2:e0:43:b1:6a:28:b9:83:b1:e7:ab:30:7d:d8:07: 7a:19:d0:31:9e:08:5e:79:29:ed:5c:c2:07:13:6d:14:ca:14: 0b:01:a2:08:10:04:a7:ff:2c:91:eb:61:c9:93:62:e8:65:a6: fb:c5:2e:c2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUE7OsHprrMMWWWakftK7VahYEXQQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDMxOTA1MTgxMFoX DTI1MDMxODA1MjMxMFowMzExMC8GA1UEAxMoRkQxOEUzRUNCNUYyMjg1QzA3NTFD NDhFQUYyM0VGMjEwQkE4RkRDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKAir4pV7ccrWa50R/OxeNsD+eeHTfImGjTiRpaZQsZqcvHveX6cqwDDcWUB 9nOsjEE4C6KD3rj7CX2hGoU4rCj6EJPFT+7IUl9gQG3JLN0KH8ZqSziRxxbRwJKN 5UTa3MrWVfAppr0YeEQMJZWiPHbw3A9NI8MqV/mFFfhx0XfbITbTvxECJAgtNz7u UJ3Ol8ImJyNvbr+EaDdQzbU26Q4XpPwmxKnk73WOEcDNHwqZeLtJkXQ2D6d5ckDl 64U2DNw1gCtZI6qxNo0Gp6aT/32uiRbRrLyTccOg8Dn59QN8g4wkbuQsdoISlGeW 8vDGGa0E8JrTkJOflzJ0zwpPhP0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP0Y4+y18ihcB1HEjq8j7yELqP3MMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kYWUxM2JhYy05MWMxLTQ2M2ItODMzMy02NGVlYzZkMjc5N2UvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhZTEzYmFj LTkxYzEtNDYzYi04MzMzLTY0ZWVjNmQyNzk3ZS8wL0ZEMThFM0VDQjVGMjI4NUMw NzUxQzQ4RUFGMjNFRjIxMEJBOEZEQ0MubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdFF8wDQYJKoZIhvcNAQELBQADggEBAIS4sPHrzGZ8VyArAbBrDeqt8QNkcSAk Cq+zCoYn8K0H2rWVYgl9IPJPTgT3K2hjLjKT8TBe3+EUK1f4WzTbkjWdb1wWFzK0 t++EkMBl4oSUKudDRZCvFakTVCEiUoukWb2hxHBPuBmJiztax25yz3qyKM2LH9eY cj+DjSt/17qgXxxy6Cf/wAGjsmH5d+YWNaIvn2WSxQMfdV+qzJ+1xbh+Ot0uelut ZM3my1ZxqYdeYFAIN/lF0g3MnpwA8Ydz23MoqrJcC2qRXaLgQ7FqKLmDseerMH3Y B3oZ0DGeCF55Ke1cwgcTbRTKFAsBoggQBKf/LJHrYcmTYuhlpvvFLsI= -----END CERTIFICATE-----Generated at Fri May 17 18:13:31 2024 by rpki-client on console-fra.rpki-client.org