$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer File: 348D53D52081AB75C21BE292C2A5077DF4B75308.cer (raw, json) Hash identifier: N9f7PTc66ncen8HQDZS/yLS2MCbhcZC+1xf2gH+04Xo= Subject key identifier: 34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 05CE2E73354CACF036C34CA69505FA6B41FC502D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft caRepository: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 17:57:53 +0000 Certificate not after: Mon 30 Jun 2025 18:02:53 +0000 Subordinate resources: IP: 175.111.88.0/22 IP: 202.43.92.0/22 IP: 2405:2c40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ce:2e:73:35:4c:ac:f0:36:c3:4c:a6:95:05:fa:6b:41:fc:50:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 17:57:53 2024 GMT Not After : Jun 30 18:02:53 2025 GMT Subject: CN=348D53D52081AB75C21BE292C2A5077DF4B75308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d5:a0:cf:66:6f:63:60:ce:8e:26:1f:9f:0e: 59:70:04:b8:98:db:01:43:fd:02:61:a9:66:38:9b: ec:68:3f:03:52:0b:22:89:56:75:f5:91:df:7d:6d: f5:40:e1:4c:c5:be:5d:3d:a6:68:b8:3f:f3:7a:0e: 7f:0d:54:53:c4:38:b2:ef:2c:6b:b1:12:ee:f5:1f: 9e:36:6e:d9:60:86:a9:3b:3e:8c:0d:d4:71:1b:45: fd:78:ff:09:d3:87:c0:dc:67:5f:73:f3:fb:ae:f2: f1:4f:01:9b:12:ce:72:f6:96:e6:cc:c2:2a:c0:1d: 6b:fc:57:fb:83:a7:57:af:12:14:6b:55:84:a6:2e: 1b:11:33:60:ee:db:74:ff:8f:70:f2:01:57:8c:17: 7a:db:33:cd:78:f9:0e:97:3f:a3:a7:8d:59:cf:c9: 1d:e4:d9:3a:e3:43:bc:cb:89:92:41:6a:f1:fd:76: e6:4e:a6:e5:57:79:28:a7:bd:f4:63:28:1f:55:b3: ed:c4:67:80:7f:4d:90:a1:d4:f3:d0:58:ba:49:4c: 9f:fc:2a:b4:74:bc:a6:70:a4:16:04:31:b4:bf:c8: 4b:d1:c9:90:55:0e:8c:c1:ee:8e:1f:74:07:27:ae: 55:59:13:70:17:e5:20:cb:70:ba:69:58:45:34:c6: 16:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.111.88.0/22 202.43.92.0/22 IPv6: 2405:2c40::/32 Signature Algorithm: sha256WithRSAEncryption 3e:62:c4:d0:00:e7:d4:90:8c:ec:48:79:a9:9b:49:a1:7c:50: a4:28:49:f0:2f:34:4e:af:44:19:a1:b8:9c:2f:22:08:85:06: ae:3e:97:8a:b2:87:6d:26:85:b6:c0:81:bb:39:c3:ef:b6:56: bf:17:30:89:0d:61:03:bb:89:bc:63:ca:3c:5d:7b:4a:b5:4b: a1:23:90:3a:e6:dc:e1:55:77:3a:47:cf:d2:a3:29:1b:c6:26: d9:fd:69:73:13:26:c8:a0:61:a6:83:23:7d:9f:2b:c2:9b:6b: e4:81:d3:19:26:ae:34:f7:e5:32:24:f1:72:86:89:f0:4e:3b: ed:df:06:9a:9e:e4:d8:5d:66:fb:80:8c:6e:35:7a:5e:da:cd: 75:e8:32:b8:a5:f8:49:74:42:b9:4e:13:3b:8e:b1:3f:ac:e5: 36:43:9e:2d:2f:0a:3e:1f:e0:6b:97:08:ca:c3:e6:4e:98:a9: 92:5b:41:74:23:0c:33:20:ec:f4:00:4d:38:a8:fc:39:8c:ce: 8d:fe:a6:4b:16:75:a5:32:2f:5a:e2:b5:41:af:c0:a3:82:6f: dd:67:de:c0:79:78:82:e8:57:1e:08:34:b5:b3:3c:ca:87:b7: c4:73:51:9f:c9:67:8c:e9:3c:7b:94:0b:fa:45:16:18:8b:b8: bd:bc:9c:16 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUBc4uczVMrPA2w0ymlQX6a0H8UC0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE3NTc1M1oX DTI1MDYzMDE4MDI1M1owMzExMC8GA1UEAxMoMzQ4RDUzRDUyMDgxQUI3NUMyMUJF MjkyQzJBNTA3N0RGNEI3NTMwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANLVoM9mb2Ngzo4mH58OWXAEuJjbAUP9AmGpZjib7Gg/A1ILIolWdfWR331t 9UDhTMW+XT2maLg/83oOfw1UU8Q4su8sa7ES7vUfnjZu2WCGqTs+jA3UcRtF/Xj/ CdOHwNxnX3Pz+67y8U8BmxLOcvaW5szCKsAda/xX+4OnV68SFGtVhKYuGxEzYO7b dP+PcPIBV4wXetszzXj5Dpc/o6eNWc/JHeTZOuNDvMuJkkFq8f125k6m5Vd5KKe9 9GMoH1Wz7cRngH9NkKHU89BYuklMn/wqtHS8pnCkFgQxtL/IS9HJkFUOjMHujh90 ByeuVVkTcBflIMtwumlYRTTGFssCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDSNU9Uggat1whviksKlB330t1MIMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zMzc1MDZjNS01ZWYxLTQyOTQtODkwMi1hNDExNGZkZjNiMDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzNzUwNmM1 LTVlZjEtNDI5NC04OTAyLWE0MTE0ZmRmM2IwMC8wLzM0OEQ1M0Q1MjA4MUFCNzVD MjFCRTI5MkMyQTUwNzdERjRCNzUzMDgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAKvb1gDBALKK1wwDQQCAAIwBwMFACQFLEAwDQYJKoZIhvcNAQELBQADggEBAD5i xNAA59SQjOxIeambSaF8UKQoSfAvNE6vRBmhuJwvIgiFBq4+l4qyh20mhbbAgbs5 w++2Vr8XMIkNYQO7ibxjyjxde0q1S6EjkDrm3OFVdzpHz9KjKRvGJtn9aXMTJsig YaaDI32fK8Kba+SB0xkmrjT35TIk8XKGifBOO+3fBpqe5NhdZvuAjG41el7azXXo Mril+El0QrlOEzuOsT+s5TZDni0vCj4f4GuXCMrD5k6YqZJbQXQjDDMg7PQATTio /DmMzo3+pksWdaUyL1ritUGvwKOCb91n3sB5eILoVx4INLWzPMqHt8RzUZ/JZ4zp PHuUC/pFFhiLuL28nBY= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:46 2024 by rpki-client on console-fra.rpki-client.org