$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer File: 3E08DEC2AE0EB41653597023376671331769A43E.cer (raw, json) Hash identifier: XIGFuFNHg8MdVJz2HTRebxxMpjEqqGwWJPDSh4zYkik= Subject key identifier: 3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 2133E73A76937284AFD90A313D07A9573770F12B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft caRepository: rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 26 Nov 2024 02:23:30 +0000 Certificate not after: Tue 25 Nov 2025 02:28:30 +0000 Subordinate resources: IP: 160.22.91.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:33:e7:3a:76:93:72:84:af:d9:0a:31:3d:07:a9:57:37:70:f1:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Nov 26 02:23:30 2024 GMT Not After : Nov 25 02:28:30 2025 GMT Subject: CN=3E08DEC2AE0EB41653597023376671331769A43E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ed:58:0c:61:4c:ed:7f:9b:7f:a7:ed:64:2e: 02:a4:1f:30:f2:31:34:45:40:a3:1f:8f:19:f3:ac: 22:a1:fa:29:49:9c:57:6d:30:75:01:15:00:7a:92: 7c:5c:ce:78:f9:bb:de:d7:d6:a6:40:e4:80:37:8f: c2:83:15:12:ef:eb:fc:44:a0:bc:e2:b2:9c:34:f7: 09:1c:cf:13:5a:26:01:d4:20:a6:fa:4f:c5:05:98: 57:39:25:1b:e0:78:4a:34:fb:ea:b0:4e:23:27:b1: 74:d8:96:20:ab:17:9c:8f:f9:60:89:f7:3e:81:00: 0a:85:e5:84:71:05:34:52:d8:72:93:98:a7:d1:76: 96:53:a1:44:4e:e4:c9:db:39:3b:b4:72:16:10:10: b3:0f:c2:99:dc:a5:83:45:5e:2b:ea:c1:2e:5a:ad: 5b:4f:01:cd:eb:17:8e:20:59:3d:24:45:86:7c:99: 56:4a:70:0b:ba:13:e5:4a:2e:37:a1:bf:ef:9d:1e: dd:ac:a4:b2:c9:6e:77:a3:a4:41:ea:15:a9:d1:16: a5:e3:cf:1f:46:13:52:85:c6:dd:33:9b:6c:6a:f9: 61:15:bd:8c:2f:fa:e4:b7:ee:f3:83:10:49:b6:24: 19:ef:c3:5b:0d:da:bf:af:d1:e8:64:55:46:7d:3e: bf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.91.0/24 Signature Algorithm: sha256WithRSAEncryption 62:41:20:14:ef:ff:24:e9:bd:bf:67:c8:e8:85:11:cf:d4:a8: b1:5c:17:0e:26:b3:e1:bc:0b:a1:99:4a:3f:5d:0a:cc:12:5a: d4:67:61:c5:0c:a7:79:74:85:a3:a5:12:4e:b2:f2:52:0a:ec: 6e:1f:5d:d2:9f:33:b3:c1:35:cb:dd:cc:df:19:2b:48:01:cc: 4f:d5:f3:dc:3c:c9:71:5c:ac:6d:fb:be:f2:79:99:0d:81:ab: 39:99:46:34:89:cb:d0:53:70:fa:0e:c5:fb:dd:86:01:62:40: ff:e9:92:be:fa:d5:da:6a:46:d0:7f:6e:ca:cc:4b:c6:53:80: 49:9a:d9:c0:75:d0:1f:81:14:e3:78:74:96:14:ae:f3:8e:ca: 27:d5:08:42:f3:6b:46:72:96:c3:d4:6a:b8:e8:2e:7a:3e:c9: a4:63:a3:e3:bb:a4:d7:98:e1:09:c2:33:1a:67:1f:d9:d0:8d: 5b:e9:5d:d4:c2:4a:f6:89:23:1f:6c:3b:10:3e:7b:47:72:01: b4:f1:0a:5d:57:2e:3f:50:b9:c5:cd:a9:7b:99:61:f4:63:4e: a1:dc:70:c7:93:69:53:06:9e:d0:e2:14:32:1b:14:47:87:76: 1d:3c:85:a5:7f:a3:2a:de:8b:52:d3:4f:26:44:2c:5a:b2:4e: ef:f9:ba:4b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUITPnOnaTcoSv2QoxPQepVzdw8SswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTEyNjAyMjMzMFoX DTI1MTEyNTAyMjgzMFowMzExMC8GA1UEAxMoM0UwOERFQzJBRTBFQjQxNjUzNTk3 MDIzMzc2NjcxMzMxNzY5QTQzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM3tWAxhTO1/m3+n7WQuAqQfMPIxNEVAox+PGfOsIqH6KUmcV20wdQEVAHqS fFzOePm73tfWpkDkgDePwoMVEu/r/ESgvOKynDT3CRzPE1omAdQgpvpPxQWYVzkl G+B4SjT76rBOIyexdNiWIKsXnI/5YIn3PoEACoXlhHEFNFLYcpOYp9F2llOhRE7k yds5O7RyFhAQsw/Cmdylg0VeK+rBLlqtW08BzesXjiBZPSRFhnyZVkpwC7oT5Uou N6G/750e3ayksslud6OkQeoVqdEWpePPH0YTUoXG3TObbGr5YRW9jC/65Lfu84MQ SbYkGe/DWw3av6/R6GRVRn0+v1UCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD4I3sKuDrQWU1lwIzdmcTMXaaQ+MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lMjgxOWJhOS01ZjQ0LTQxMjUtOGI4Yy1mYzE2NGI1NGQ3M2EvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UyODE5YmE5 LTVmNDQtNDEyNS04YjhjLWZjMTY0YjU0ZDczYS8wLzNFMDhERUMyQUUwRUI0MTY1 MzU5NzAyMzM3NjY3MTMzMTc2OUE0M0UubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgFlswDQYJKoZIhvcNAQELBQADggEBAGJBIBTv/yTpvb9nyOiFEc/UqLFcFw4m s+G8C6GZSj9dCswSWtRnYcUMp3l0haOlEk6y8lIK7G4fXdKfM7PBNcvdzN8ZK0gB zE/V89w8yXFcrG37vvJ5mQ2BqzmZRjSJy9BTcPoOxfvdhgFiQP/pkr761dpqRtB/ bsrMS8ZTgEma2cB10B+BFON4dJYUrvOOyifVCELza0ZylsPUarjoLno+yaRjo+O7 pNeY4QnCMxpnH9nQjVvpXdTCSvaJIx9sOxA+e0dyAbTxCl1XLj9QucXNqXuZYfRj TqHccMeTaVMGntDiFDIbFEeHdh08haV/oyrei1LTTyZELFqyTu/5uks= -----END CERTIFICATE-----Generated at Mon Apr 7 03:51:15 2025 by rpki-client