$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer File: 065943D1744CF4841A6D3D50944D2A4DB537A128.cer (raw, json) Hash identifier: 2uc1Lm1o8w6Q5Z/z5+BH5GIeHrTafBBQPutdkQ37KSk= Subject key identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1D7D8155535B78A777E7EA14F0212D494BADBFBD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft caRepository: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 20 Jan 2025 13:16:33 +0000 Certificate not after: Mon 19 Jan 2026 13:21:33 +0000 Subordinate resources: IP: 157.15.77.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:7d:81:55:53:5b:78:a7:77:e7:ea:14:f0:21:2d:49:4b:ad:bf:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 20 13:16:33 2025 GMT Not After : Jan 19 13:21:33 2026 GMT Subject: CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f1:00:03:2e:c8:b4:2b:07:69:63:4b:02:cf: 68:09:bc:59:1e:6b:57:78:5e:c2:0d:52:f5:8a:ee: d8:e9:45:94:73:68:42:f8:ca:15:be:af:3c:1a:ff: 39:60:de:f3:3f:ea:1d:cd:d7:46:80:e5:70:03:9d: 65:ca:10:77:10:a8:ec:a1:ac:29:2f:f9:80:9a:93: 34:f6:eb:c3:45:e8:38:48:53:e4:9a:ec:dc:8d:94: 5e:6b:41:91:69:ac:31:1a:0f:b9:28:64:42:b6:3f: 65:a8:8b:36:ee:f1:18:9a:13:ad:5e:70:20:01:6e: 9f:6e:a6:5b:ac:ce:3b:b5:9e:a7:e4:9d:3f:d2:65: 37:b6:a7:e6:c6:63:0c:b8:e1:27:a0:74:e7:23:e5: 79:67:d9:01:be:04:c0:d7:a1:eb:9d:59:e8:9d:9b: 9c:ed:c5:4a:d9:ba:bf:65:8a:e4:c4:81:04:f7:45: f3:95:28:47:96:f6:03:18:a5:0e:8c:98:38:a7:87: 22:c4:98:3c:1a:ff:a4:c1:41:d2:41:9e:4a:de:d5: d8:bb:a6:9b:d4:68:38:a6:29:d3:21:c8:aa:ab:ac: f5:71:62:dc:97:77:e6:d5:ce:c3:a7:b0:95:74:5c: fc:b5:1f:61:4f:ba:d0:4c:0b:ac:9c:80:85:9d:97: fc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.77.0/24 Signature Algorithm: sha256WithRSAEncryption 53:16:4d:de:3f:05:55:7a:f5:21:8c:02:fe:62:97:f5:ec:09: 76:0e:08:9c:bb:65:53:e1:bd:d5:0b:29:a5:46:e3:8d:61:59: e8:a9:05:25:cc:b0:47:37:d5:74:cb:3a:f1:98:f9:19:fd:3a: 76:db:15:0e:76:59:11:41:03:64:87:98:68:44:25:f4:20:aa: 3e:4f:7a:b7:76:84:55:7b:72:f1:ae:a2:93:61:e7:21:28:ef: a4:0e:69:f5:d7:f6:4b:43:50:28:ac:2d:a6:05:e2:d3:5e:f6: 88:69:aa:b6:72:5e:d6:31:eb:b1:d5:80:d9:74:2c:b6:81:c5: 12:a3:24:bf:d9:1e:70:fa:8a:db:89:12:ad:56:6d:84:32:01: 52:4b:9b:90:73:39:47:3d:bb:57:e4:02:6c:d0:04:df:88:04: 3e:55:fa:3f:03:97:63:2e:07:00:b8:61:b6:bd:5b:78:db:34: af:6b:98:7d:ed:a9:90:e7:f6:08:42:a8:67:78:77:c1:ea:d1: 98:ff:55:ee:9c:24:f4:c3:64:3e:85:87:1f:33:7a:23:35:c0: 24:45:a8:fb:a3:95:38:33:a9:3c:84:7a:c9:ce:85:91:80:6b: c9:8a:91:6d:37:a1:54:4e:00:9e:e3:cb:59:d8:57:16:c5:61: df:a8:ba:6f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHX2BVVNbeKd35+oU8CEtSUutv70wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDEyMDEzMTYzM1oX DTI2MDExOTEzMjEzM1owMzExMC8GA1UEAxMoMDY1OTQzRDE3NDRDRjQ4NDFBNkQz RDUwOTQ0RDJBNERCNTM3QTEyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7xAAMuyLQrB2ljSwLPaAm8WR5rV3hewg1S9Yru2OlFlHNoQvjKFb6vPBr/ OWDe8z/qHc3XRoDlcAOdZcoQdxCo7KGsKS/5gJqTNPbrw0XoOEhT5Jrs3I2UXmtB kWmsMRoPuShkQrY/ZaiLNu7xGJoTrV5wIAFun26mW6zOO7Wep+SdP9JlN7an5sZj DLjhJ6B05yPleWfZAb4EwNeh651Z6J2bnO3FStm6v2WK5MSBBPdF85UoR5b2Axil DoyYOKeHIsSYPBr/pMFB0kGeSt7V2Lumm9RoOKYp0yHIqqus9XFi3Jd35tXOw6ew lXRc/LUfYU+60EwLrJyAhZ2X/DkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAZZQ9F0TPSEGm09UJRNKk21N6EoMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83NTdlMTFkYy1mZjcxLTRlZDctYTY5NS04MzQ5MjJlMGUzNjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc1N2UxMWRj LWZmNzEtNGVkNy1hNjk1LTgzNDkyMmUwZTM2MS8wLzA2NTk0M0QxNzQ0Q0Y0ODQx QTZEM0Q1MDk0NEQyQTREQjUzN0ExMjgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdD00wDQYJKoZIhvcNAQELBQADggEBAFMWTd4/BVV69SGMAv5il/XsCXYOCJy7 ZVPhvdULKaVG441hWeipBSXMsEc31XTLOvGY+Rn9OnbbFQ52WRFBA2SHmGhEJfQg qj5Perd2hFV7cvGuopNh5yEo76QOafXX9ktDUCisLaYF4tNe9ohpqrZyXtYx67HV gNl0LLaBxRKjJL/ZHnD6ituJEq1WbYQyAVJLm5BzOUc9u1fkAmzQBN+IBD5V+j8D l2MuBwC4Yba9W3jbNK9rmH3tqZDn9ghCqGd4d8Hq0Zj/Ve6cJPTDZD6Fhx8zeiM1 wCRFqPujlTgzqTyEesnOhZGAa8mKkW03oVROAJ7jy1nYVxbFYd+oum8= -----END CERTIFICATE-----Generated at Sun Apr 27 04:33:06 2025 by rpki-client