$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer File: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer (raw, json) Hash identifier: W8kisRdGiNM4fsU2peIKT+NTEMO9l4NvPeO5wIJjwf8= Subject key identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 175232E1B10D7EE0BB8A27D7005C3E7D6639F0DC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft caRepository: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 30 Apr 2025 21:40:11 +0000 Certificate not after: Wed 29 Apr 2026 21:45:11 +0000 Subordinate resources: IP: 157.66.56.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:52:32:e1:b1:0d:7e:e0:bb:8a:27:d7:00:5c:3e:7d:66:39:f0:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 30 21:40:11 2025 GMT Not After : Apr 29 21:45:11 2026 GMT Subject: CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:13:2b:81:42:64:86:52:c5:8c:84:6e:46:06: ce:9b:d4:68:89:75:99:35:a4:dc:98:9e:2e:42:f0: 92:e0:ea:af:18:4d:4b:5b:9f:cc:4b:1b:22:6e:8b: ea:2e:0a:f5:40:27:49:d9:2c:00:6c:37:47:92:16: 23:2b:7e:d3:38:10:74:58:b1:c8:ca:a1:c3:b2:1f: 85:0d:87:90:ef:08:f2:f9:10:1f:3a:fa:f7:4c:47: ae:d3:42:78:ca:3a:5c:f7:69:e6:b4:f0:d1:9f:d3: 79:fe:0e:35:cd:01:fc:15:1b:c6:be:6e:de:51:4a: 52:4b:88:06:20:17:c1:f6:43:66:d6:db:17:fe:13: 0e:44:70:fa:d3:5c:e9:76:8d:b3:b2:52:69:76:b4: 5a:c8:66:e1:5e:56:f6:6c:9f:ef:cf:b9:20:29:9b: 22:e5:11:7d:2f:19:fb:f9:e5:4b:48:e1:d2:a3:fe: 87:43:15:d0:83:16:da:d8:94:5b:90:ea:d6:97:e3: a0:30:9c:44:27:25:c4:d5:a1:17:9e:e0:bd:3b:06: 66:ad:72:c6:89:72:1d:55:c4:83:c9:7a:5d:20:de: aa:1b:8e:f6:2a:d6:f4:29:64:d1:02:3c:30:cb:0b: 3b:ce:93:6b:d9:cf:22:71:95:95:64:99:31:05:95: be:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.56.0/24 Signature Algorithm: sha256WithRSAEncryption 14:c9:16:e1:e5:5f:f7:57:8a:e0:9d:a6:75:12:2d:6e:15:1f: 1f:f2:b0:70:48:4a:2d:4f:cf:ab:05:f4:6e:bf:2d:ee:25:96: 93:81:c7:5b:d7:b6:14:b4:f6:64:e9:6c:23:ec:b4:0d:5f:6a: f2:eb:c2:0c:6c:1e:30:41:e5:3b:63:29:81:4b:a0:c3:49:04: 2c:17:f1:36:0c:63:b3:01:23:e7:e6:41:48:bb:86:7e:46:4d: 33:2f:37:64:d8:b5:8c:4b:c7:b1:c9:ae:df:64:df:d8:32:85: 36:50:e4:0c:28:b7:3e:88:db:a9:6b:f9:93:f7:d3:95:81:6a: e5:58:fa:13:5e:a6:26:47:49:a4:11:76:2f:9d:f8:06:c3:ad: 89:00:fa:e7:05:51:bc:04:f3:2f:c7:84:9e:17:76:9a:60:04: 9a:df:f1:97:33:de:d9:2d:60:92:43:63:2d:d9:9a:0c:a2:5b: cf:6a:a2:7e:8d:9f:37:33:de:40:1c:c2:d0:fa:83:db:1c:a8: ee:b3:9a:3e:c3:68:cb:d7:5e:ae:b3:bb:b2:35:7b:f8:cc:e2: ef:53:dc:52:41:f2:09:14:54:92:b0:2e:18:3b:9a:f8:01:86: 78:f6:b3:a2:71:f5:40:2d:d6:a9:bf:85:39:5d:84:71:b6:11: c8:2a:8a:92 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUF1Iy4bENfuC7iifXAFw+fWY58NwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDQzMDIxNDAxMVoX DTI2MDQyOTIxNDUxMVowMzExMC8GA1UEAxMoNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2 MUIwQkRDMTg4NEMxMDIxQjQ3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM0TK4FCZIZSxYyEbkYGzpvUaIl1mTWk3JieLkLwkuDqrxhNS1ufzEsbIm6L 6i4K9UAnSdksAGw3R5IWIyt+0zgQdFixyMqhw7IfhQ2HkO8I8vkQHzr690xHrtNC eMo6XPdp5rTw0Z/Tef4ONc0B/BUbxr5u3lFKUkuIBiAXwfZDZtbbF/4TDkRw+tNc 6XaNs7JSaXa0Wshm4V5W9myf78+5ICmbIuURfS8Z+/nlS0jh0qP+h0MV0IMW2tiU W5Dq1pfjoDCcRCclxNWhF57gvTsGZq1yxolyHVXEg8l6XSDeqhuO9irW9Clk0QI8 MMsLO86Ta9nPInGVlWSZMQWVvo0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFExdD9elbsK1a5hsL3BiEwQIbR2MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xZDc1NTM0Ny02YjFjLTQyYzEtOWY1NC1kN2VhYjIyZTE4MmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkNzU1MzQ3 LTZiMWMtNDJjMS05ZjU0LWQ3ZWFiMjJlMTgyYy8wLzUxMzE3NDNGNUU5NUJCMEFE NUFFNjFCMEJEQzE4ODRDMTAyMUI0NzYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdQjgwDQYJKoZIhvcNAQELBQADggEBABTJFuHlX/dXiuCdpnUSLW4VHx/ysHBI Si1Pz6sF9G6/Le4llpOBx1vXthS09mTpbCPstA1favLrwgxsHjBB5TtjKYFLoMNJ BCwX8TYMY7MBI+fmQUi7hn5GTTMvN2TYtYxLx7HJrt9k39gyhTZQ5Awotz6I26lr +ZP305WBauVY+hNepiZHSaQRdi+d+AbDrYkA+ucFUbwE8y/HhJ4XdppgBJrf8Zcz 3tktYJJDYy3ZmgyiW89qon6Nnzcz3kAcwtD6g9scqO6zmj7DaMvXXq6zu7I1e/jM 4u9T3FJB8gkUVJKwLhg7mvgBhnj2s6Jx9UAt1qm/hTldhHG2EcgqipI= -----END CERTIFICATE-----Generated at Wed May 14 15:44:36 2025 by rpki-client