$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer File: 3BB7346C991B689223BADC6F82DD19BE3B017704.cer (raw, json) Hash identifier: Fi2UBCzfNLYFhHuTLipt7fVlCuW7GVvy1lF0GQUnPF0= Subject key identifier: 3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2468488B3D0374078156DD2CCCC5A3A5CEEE2D91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft caRepository: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 26 Jan 2025 05:31:17 +0000 Certificate not after: Sun 25 Jan 2026 05:36:17 +0000 Subordinate resources: IP: 103.207.96.0/22 IP: 2404:2c80::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:68:48:8b:3d:03:74:07:81:56:dd:2c:cc:c5:a3:a5:ce:ee:2d:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jan 26 05:31:17 2025 GMT Not After : Jan 25 05:36:17 2026 GMT Subject: CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b6:56:59:b0:e3:e6:b0:cd:ce:e6:ae:12:aa: 77:70:4f:3a:c2:c4:18:41:56:cf:99:87:df:5b:f9: 1f:a1:fd:65:0e:7f:b7:bc:43:1d:b0:d3:d1:13:02: 0c:9c:09:38:eb:12:3b:09:bb:62:99:42:36:1b:53: f0:a8:cf:b1:d2:f4:2c:7f:2a:70:d7:0a:67:de:ae: c8:0c:48:58:1f:f9:13:99:70:0b:7b:7e:27:73:f0: cd:3b:f9:29:58:f3:b0:88:b3:1d:9c:cc:81:48:db: 99:8d:4d:5e:bc:7e:5c:91:54:e1:28:17:0e:dd:22: b1:50:41:53:55:eb:b7:b1:c1:22:6e:17:e0:a1:c3: 47:a8:76:f2:3c:32:61:8e:df:c5:ff:ee:3c:72:69: e8:67:95:6b:e6:17:7c:92:43:64:45:5f:ec:4a:54: ea:76:96:5f:62:68:9f:19:1c:61:e7:c0:0a:db:aa: 78:d6:4c:bc:cf:d6:2e:d4:98:dc:50:ba:52:95:cd: 95:98:87:d4:d7:da:50:09:5c:0b:89:47:17:60:8f: 3a:22:16:a1:2c:39:99:93:53:9e:d6:f2:5b:5b:a7: dd:9c:b5:e6:be:81:2e:58:4c:70:05:17:25:07:ce: 16:54:47:08:2c:67:aa:9c:b2:fe:1b:73:0e:36:a6: 69:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.207.96.0/22 IPv6: 2404:2c80::/32 Signature Algorithm: sha256WithRSAEncryption 95:e3:e2:59:60:04:3c:da:7b:13:7b:bf:14:85:a3:a7:69:9d: 89:09:a6:00:b0:ed:3f:1b:32:c0:49:5f:9e:2b:79:8c:1d:22: d8:63:e4:30:ea:8d:56:87:f3:5a:99:4e:c6:51:82:ca:5d:de: 2e:7a:61:6b:3a:cc:d9:c3:53:49:66:7b:51:fe:89:62:4a:c7: 76:3e:f8:26:6e:58:f1:3d:b6:ed:a8:c0:f5:b8:9e:77:1e:bb: cc:f8:6f:e0:f0:d6:94:86:1c:94:ba:82:b0:c5:e3:4f:f6:24: 71:5f:63:b1:fb:c7:f2:33:32:e7:0c:58:5b:ce:81:4b:77:e0: 06:fb:b1:2d:2d:6a:59:ad:40:8f:a1:1a:3b:c9:56:16:ab:a9: 5b:b0:01:41:f0:4b:44:c3:79:05:7c:ba:3e:5e:c7:8d:bc:eb: 72:d8:81:94:bb:26:a9:42:c4:ec:8b:54:8c:ae:3b:20:90:6d: f3:ab:b8:1a:68:b0:8b:e5:36:62:a4:ab:42:f8:37:38:fb:ee: 15:c1:47:70:14:d0:5b:25:dd:bf:26:23:16:b9:5c:16:9e:5d: c8:15:a3:1a:56:af:76:17:5f:d7:65:5e:df:14:da:5d:30:0a: 27:2b:54:df:f6:54:4a:16:2b:fe:8c:63:fb:68:e9:bd:65:75: f5:29:36:4b -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUJGhIiz0DdAeBVt0szMWjpc7uLZEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEyNjA1MzExN1oX DTI2MDEyNTA1MzYxN1owMzExMC8GA1UEAxMoM0JCNzM0NkM5OTFCNjg5MjIzQkFE QzZGODJERDE5QkUzQjAxNzcwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANK2Vlmw4+awzc7mrhKqd3BPOsLEGEFWz5mH31v5H6H9ZQ5/t7xDHbDT0RMC DJwJOOsSOwm7YplCNhtT8KjPsdL0LH8qcNcKZ96uyAxIWB/5E5lwC3t+J3PwzTv5 KVjzsIizHZzMgUjbmY1NXrx+XJFU4SgXDt0isVBBU1Xrt7HBIm4X4KHDR6h28jwy YY7fxf/uPHJp6GeVa+YXfJJDZEVf7EpU6naWX2JonxkcYefACtuqeNZMvM/WLtSY 3FC6UpXNlZiH1NfaUAlcC4lHF2CPOiIWoSw5mZNTntbyW1un3Zy15r6BLlhMcAUX JQfOFlRHCCxnqpyy/htzDjamac0CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDu3NGyZG2iSI7rcb4LdGb47AXcEMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMjZlNDU2NC00OGYyLTQzYjUtODUwNS05M2I0OThlN2Q4YWIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyNmU0NTY0 LTQ4ZjItNDNiNS04NTA1LTkzYjQ5OGU3ZDhhYi8wLzNCQjczNDZDOTkxQjY4OTIy M0JBREM2RjgyREQxOUJFM0IwMTc3MDQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnz2AwDQQCAAIwBwMFACQELIAwDQYJKoZIhvcNAQELBQADggEBAJXj4llgBDza exN7vxSFo6dpnYkJpgCw7T8bMsBJX54reYwdIthj5DDqjVaH81qZTsZRgspd3i56 YWs6zNnDU0lme1H+iWJKx3Y++CZuWPE9tu2owPW4nnceu8z4b+Dw1pSGHJS6grDF 40/2JHFfY7H7x/IzMucMWFvOgUt34Ab7sS0talmtQI+hGjvJVharqVuwAUHwS0TD eQV8uj5ex42863LYgZS7JqlCxOyLVIyuOyCQbfOruBposIvlNmKkq0L4Nzj77hXB R3AU0Fsl3b8mIxa5XBaeXcgVoxpWr3YXX9dlXt8U2l0wCicrVN/2VEoWK/6MY/to 6b1ldfUpNks= -----END CERTIFICATE-----Generated at Sat Apr 5 10:23:14 2025 by rpki-client