$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer File: 99A17325620A243689E32E6074D5CFCA91D915EB.cer (raw, json) Hash identifier: 0iPcbmVOtqg8TQwtWoJPGyKDexNou3NfcZ5grAkQNhk= Subject key identifier: 99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6FA27752CC450441ABC54C7149B974F3ECB513C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft caRepository: rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 27 Feb 2025 16:32:17 +0000 Certificate not after: Thu 26 Feb 2026 16:37:17 +0000 Subordinate resources: IP: 157.20.156.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:a2:77:52:cc:45:04:41:ab:c5:4c:71:49:b9:74:f3:ec:b5:13:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 27 16:32:17 2025 GMT Not After : Feb 26 16:37:17 2026 GMT Subject: CN=99A17325620A243689E32E6074D5CFCA91D915EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fd:ca:0b:09:dc:6e:f2:b0:16:5c:93:24:ea: a0:70:cd:71:62:35:4d:6f:e9:e0:eb:e0:f8:b7:0b: 9f:d4:89:de:03:e4:e9:7b:0c:8f:48:66:91:35:d5: d0:6f:45:0c:0c:17:6e:5d:89:eb:b8:f4:4b:29:6e: 26:05:4f:5c:8c:6e:1e:1a:63:76:b5:ae:57:4f:70: 1a:e0:d1:fe:ff:d3:9f:a2:55:26:b4:79:ab:bd:0f: 3d:dd:9f:54:2b:1b:bf:a2:95:ed:68:ea:33:72:c8: 0b:6f:97:7d:56:ae:c1:0d:87:1a:63:e5:08:32:08: 36:f4:ff:fc:e3:89:de:a3:87:dc:b5:24:b5:31:59: d3:ee:f8:29:3c:91:38:c4:55:b4:9f:6a:18:90:3a: f3:1b:d8:cb:c4:d0:c6:ef:19:b6:59:6f:bc:3a:fd: a3:29:f9:bf:72:cd:5b:fe:97:bf:6a:46:dd:8b:44: ea:7c:12:0f:23:19:74:fd:10:ae:b3:2d:13:e3:86: 37:66:b8:97:1a:b7:32:48:06:5b:14:ab:b4:62:8c: 7e:48:ad:32:ee:92:98:5e:25:ef:22:e5:2e:15:80: f6:bd:44:72:6d:dc:af:59:d1:fc:ef:d8:e0:c8:5c: a0:70:48:2c:22:0d:74:6c:9d:6f:26:20:71:c8:d5: 3a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.156.0/23 Signature Algorithm: sha256WithRSAEncryption 28:69:66:9f:41:64:c7:b3:12:87:eb:42:97:a5:65:3b:02:ad: 89:60:54:07:f2:56:77:4f:b7:db:55:93:7c:26:46:9e:1a:94: 0d:14:8e:02:5e:aa:10:cf:14:57:26:24:81:99:20:f1:b2:20: 57:91:c4:70:a7:22:83:72:ac:cc:fa:d4:52:88:8d:8f:f7:0e: 29:b7:38:47:3b:b1:c8:cc:fd:28:93:a0:17:a4:2d:ec:77:16: 92:7b:9f:58:60:16:68:5a:57:9f:07:0b:e1:ca:4a:75:c6:76: 4d:cb:f8:1f:0e:5e:65:4d:ee:a9:87:a9:e9:10:0e:53:16:93: 18:6c:76:bc:86:4d:78:75:c5:1f:19:e2:03:b7:5d:28:11:9e: f4:d5:7d:78:59:ec:34:9d:d0:29:24:0c:11:a7:25:a3:67:95: a6:ef:f4:88:8c:7f:f1:38:48:7c:1d:10:f7:9b:a4:50:e1:d6: 25:80:00:fb:40:e3:c2:af:04:7a:45:d5:46:c6:a8:f7:55:7c: ee:b3:14:ba:6c:d0:fe:93:53:4d:0a:da:ab:13:0b:ef:d4:c2: 8d:8c:0f:60:bc:86:d2:e9:ab:99:ed:40:c8:54:79:66:0f:1c: 2b:65:0b:bc:7e:c5:59:8f:f7:53:3b:44:a4:f0:cc:d3:85:0e: f4:7a:a4:17 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUb6J3UsxFBEGrxUxxSbl08+y1E8EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDIyNzE2MzIxN1oX DTI2MDIyNjE2MzcxN1owMzExMC8GA1UEAxMoOTlBMTczMjU2MjBBMjQzNjg5RTMy RTYwNzRENUNGQ0E5MUQ5MTVFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOD9ygsJ3G7ysBZckyTqoHDNcWI1TW/p4Ovg+LcLn9SJ3gPk6XsMj0hmkTXV 0G9FDAwXbl2J67j0SyluJgVPXIxuHhpjdrWuV09wGuDR/v/Tn6JVJrR5q70PPd2f VCsbv6KV7WjqM3LIC2+XfVauwQ2HGmPlCDIINvT//OOJ3qOH3LUktTFZ0+74KTyR OMRVtJ9qGJA68xvYy8TQxu8ZtllvvDr9oyn5v3LNW/6Xv2pG3YtE6nwSDyMZdP0Q rrMtE+OGN2a4lxq3MkgGWxSrtGKMfkitMu6SmF4l7yLlLhWA9r1Ecm3cr1nR/O/Y 4MhcoHBILCINdGydbyYgccjVOjcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJmhcyViCiQ2ieMuYHTVz8qR2RXrMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ZDU5YjgyMi01YzA4LTQ2ZjEtYjI1ZS03NThkYzE4ZTk5MDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkNTliODIy LTVjMDgtNDZmMS1iMjVlLTc1OGRjMThlOTkwNS8wLzk5QTE3MzI1NjIwQTI0MzY4 OUUzMkU2MDc0RDVDRkNBOTFEOTE1RUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFJwwDQYJKoZIhvcNAQELBQADggEBAChpZp9BZMezEofrQpelZTsCrYlgVAfy VndPt9tVk3wmRp4alA0UjgJeqhDPFFcmJIGZIPGyIFeRxHCnIoNyrMz61FKIjY/3 Dim3OEc7scjM/SiToBekLex3FpJ7n1hgFmhaV58HC+HKSnXGdk3L+B8OXmVN7qmH qekQDlMWkxhsdryGTXh1xR8Z4gO3XSgRnvTVfXhZ7DSd0CkkDBGnJaNnlabv9IiM f/E4SHwdEPebpFDh1iWAAPtA48KvBHpF1UbGqPdVfO6zFLps0P6TU00K2qsTC+/U wo2MD2C8htLpq5ntQMhUeWYPHCtlC7x+xVmP91M7RKTwzNOFDvR6pBc= -----END CERTIFICATE-----Generated at Sat Apr 26 23:07:27 2025 by rpki-client