$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer File: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer (raw, json) Hash identifier: ADW2atgeZ9yjs4Ebxj4iU5zKG1IUO8PfEqRp3Xa0iew= Subject key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5F803657417585A120B0862F73B5F9A8AC976A40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft caRepository: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 18 Jun 2024 08:18:13 +0000 Certificate not after: Tue 17 Jun 2025 08:23:13 +0000 Subordinate resources: IP: 202.169.240.0/20 IP: 2403:aa00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:80:36:57:41:75:85:a1:20:b0:86:2f:73:b5:f9:a8:ac:97:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jun 18 08:18:13 2024 GMT Not After : Jun 17 08:23:13 2025 GMT Subject: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:04:07:67:eb:57:23:6b:b4:d6:df:ca:47:9a: 2a:3e:e2:ca:30:52:9f:49:8b:10:be:3c:fa:e8:6b: 12:b2:cb:c2:f8:5a:22:6c:d5:27:c5:e8:d6:cc:4c: 3a:6e:2d:0b:1a:a7:de:2f:00:18:0e:a4:5b:42:17: 79:d4:72:b6:9c:a8:4c:0d:e8:64:1d:85:51:be:96: b2:87:bf:27:84:26:4e:d2:50:53:8b:20:e8:17:60: b7:09:f3:91:f9:8c:d8:0a:75:9f:ca:ab:76:75:c3: 96:ae:50:d5:9f:6c:a8:7c:22:0d:75:d2:8b:a0:b6: a5:07:ca:ab:1e:b8:41:04:66:78:95:74:fd:9b:e0: b5:ae:98:ef:28:30:ad:2c:ba:9e:4a:9f:5b:d3:97: 60:0a:a2:4b:f3:64:a2:00:38:8b:49:7c:34:56:c7: 4c:1b:09:a3:2b:40:3f:bb:b8:bc:15:60:6b:b1:93: a5:bb:28:2a:22:e8:93:25:5a:d0:93:87:83:90:25: 85:f0:f6:d9:84:62:f2:bc:6d:0b:97:4b:19:d9:b3: a6:1e:46:56:09:9f:5d:4e:63:28:18:90:95:13:ca: b4:90:40:25:db:50:32:f3:b2:86:39:61:d5:e5:4c: 79:5b:27:7b:1e:92:08:3f:00:a3:20:fe:a8:4f:6a: 0d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.169.240.0/20 IPv6: 2403:aa00::/32 Signature Algorithm: sha256WithRSAEncryption 71:41:9e:be:72:37:36:8c:75:7a:74:2a:71:c3:9d:53:c7:33: e7:ba:33:24:0a:2e:22:73:15:0d:4f:05:69:0a:86:25:11:96: e9:05:05:80:2d:13:49:22:ec:b1:3e:f5:88:df:22:0b:76:74: d6:9e:4a:bc:af:dc:7c:cb:11:41:86:f8:3b:08:59:21:72:4a: ee:1b:04:b2:32:8b:d2:4c:0c:23:dd:44:9d:d4:76:3d:12:5c: f5:4a:4b:e0:89:b9:c2:06:46:9f:7c:85:ef:94:e4:7e:19:b9: 1e:e2:d8:46:9d:fd:36:26:c7:07:fd:7d:d9:13:86:9b:00:b8: 52:7a:e8:5b:a5:94:b9:2b:54:93:a1:cd:1a:b7:59:9c:69:62: f5:92:b4:84:5f:6a:90:d1:cf:fe:f9:c5:1d:34:e6:d1:5f:8b: c4:d9:f9:b3:77:1e:b1:1a:69:a8:00:10:e2:0e:38:ae:b2:8f: 6d:61:8d:83:1c:6f:19:c8:f7:4a:87:3d:ec:a8:98:d8:28:3d: 15:23:58:16:54:e3:91:f2:4e:76:b5:97:e6:56:53:89:c4:35: d9:02:15:88:62:91:8c:24:cc:23:8f:99:c2:92:40:d2:35:51: 75:40:b5:dc:43:ec:c6:36:2b:19:fd:08:78:37:5d:f5:9a:fa: 66:cd:a1:7a -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUX4A2V0F1haEgsIYvc7X5qKyXakAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDYxODA4MTgxM1oX DTI1MDYxNzA4MjMxM1owMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTEx RjM4QjBBMERDQkFCMUNFMDMyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcEB2frVyNrtNbfykeaKj7iyjBSn0mLEL48+uhrErLLwvhaImzVJ8Xo1sxM Om4tCxqn3i8AGA6kW0IXedRytpyoTA3oZB2FUb6Wsoe/J4QmTtJQU4sg6Bdgtwnz kfmM2Ap1n8qrdnXDlq5Q1Z9sqHwiDXXSi6C2pQfKqx64QQRmeJV0/Zvgta6Y7ygw rSy6nkqfW9OXYAqiS/NkogA4i0l8NFbHTBsJoytAP7u4vBVga7GTpbsoKiLokyVa 0JOHg5AlhfD22YRi8rxtC5dLGdmzph5GVgmfXU5jKBiQlRPKtJBAJdtQMvOyhjlh 1eVMeVsnex6SCD8AoyD+qE9qDScCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDQgYbl/+X5RgFEfOLCg3LqxzgMlMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hY2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjYjlhNGI5 LTRhZTMtNDY3YS1iOTE5LTQxMGUxNDJiNjc5Zi8wLzM0MjA2MUI5N0ZGOTdFNTE4 MDUxMUYzOEIwQTBEQ0JBQjFDRTAzMjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BATKqfAwDQQCAAIwBwMFACQDqgAwDQYJKoZIhvcNAQELBQADggEBAHFBnr5yNzaM dXp0KnHDnVPHM+e6MyQKLiJzFQ1PBWkKhiURlukFBYAtE0ki7LE+9YjfIgt2dNae Sryv3HzLEUGG+DsIWSFySu4bBLIyi9JMDCPdRJ3Udj0SXPVKS+CJucIGRp98he+U 5H4ZuR7i2Ead/TYmxwf9fdkThpsAuFJ66FullLkrVJOhzRq3WZxpYvWStIRfapDR z/75xR005tFfi8TZ+bN3HrEaaagAEOIOOK6yj21hjYMcbxnI90qHPeyomNgoPRUj WBZU45HyTna1l+ZWU4nENdkCFYhikYwkzCOPmcKSQNI1UXVAtdxD7MY2Kxn9CHg3 XfWa+mbNoXo= -----END CERTIFICATE-----Generated at Sun Feb 16 20:54:20 2025 by rpki-client