$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer File: 3BB7346C991B689223BADC6F82DD19BE3B017704.cer (raw, json) Hash identifier: 55djIHvAqpFb9rzWYVaa0CXbWShxHol5w9vd5A03ec8= Subject key identifier: 3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1DD62AAE08865EB2B3E3C5439504D07262B88688 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft caRepository: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 25 Feb 2024 01:16:45 +0000 Certificate not after: Sun 23 Feb 2025 01:21:45 +0000 Subordinate resources: IP: 103.207.96.0/22 IP: 2404:2c80::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d6:2a:ae:08:86:5e:b2:b3:e3:c5:43:95:04:d0:72:62:b8:86:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 25 01:16:45 2024 GMT Not After : Feb 23 01:21:45 2025 GMT Subject: CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b6:56:59:b0:e3:e6:b0:cd:ce:e6:ae:12:aa: 77:70:4f:3a:c2:c4:18:41:56:cf:99:87:df:5b:f9: 1f:a1:fd:65:0e:7f:b7:bc:43:1d:b0:d3:d1:13:02: 0c:9c:09:38:eb:12:3b:09:bb:62:99:42:36:1b:53: f0:a8:cf:b1:d2:f4:2c:7f:2a:70:d7:0a:67:de:ae: c8:0c:48:58:1f:f9:13:99:70:0b:7b:7e:27:73:f0: cd:3b:f9:29:58:f3:b0:88:b3:1d:9c:cc:81:48:db: 99:8d:4d:5e:bc:7e:5c:91:54:e1:28:17:0e:dd:22: b1:50:41:53:55:eb:b7:b1:c1:22:6e:17:e0:a1:c3: 47:a8:76:f2:3c:32:61:8e:df:c5:ff:ee:3c:72:69: e8:67:95:6b:e6:17:7c:92:43:64:45:5f:ec:4a:54: ea:76:96:5f:62:68:9f:19:1c:61:e7:c0:0a:db:aa: 78:d6:4c:bc:cf:d6:2e:d4:98:dc:50:ba:52:95:cd: 95:98:87:d4:d7:da:50:09:5c:0b:89:47:17:60:8f: 3a:22:16:a1:2c:39:99:93:53:9e:d6:f2:5b:5b:a7: dd:9c:b5:e6:be:81:2e:58:4c:70:05:17:25:07:ce: 16:54:47:08:2c:67:aa:9c:b2:fe:1b:73:0e:36:a6: 69:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.207.96.0/22 IPv6: 2404:2c80::/32 Signature Algorithm: sha256WithRSAEncryption 12:34:cb:dd:ee:f5:65:e7:66:33:a3:c5:e9:04:68:ac:00:d4: 97:25:fa:d4:06:d4:b8:82:bd:cf:61:18:e4:df:67:bd:4e:98: ef:8f:27:61:76:2f:89:82:17:7d:e2:29:10:85:bb:19:13:96: 56:a4:48:5a:86:90:fb:2c:a4:68:83:01:69:19:34:28:6e:6f: 12:66:ab:47:e2:83:72:1b:3a:23:6a:97:82:15:b6:52:ca:f9: f5:aa:83:6e:89:6c:d5:97:22:37:52:14:26:ad:79:0d:3d:0e: 33:8b:c4:d9:4a:b1:96:73:f6:f3:ec:96:0f:e8:3b:cd:38:d3: 93:7f:94:a4:28:9a:e5:ac:09:94:c6:88:de:6a:9c:95:80:3e: 76:b5:9e:03:bf:cd:ad:a1:11:e8:f7:76:fa:58:c0:62:32:8f: be:3d:b9:f5:2d:c6:6e:e3:7b:97:51:3d:4f:69:44:74:9e:57: 97:e2:95:e5:32:62:20:34:69:b5:c0:59:cf:6d:22:b4:c1:54: f7:44:b8:4f:b9:3f:a0:bb:3a:90:a7:7e:a6:28:40:47:1d:70: 0c:c2:cc:05:05:ab:8a:93:bc:06:92:6a:42:8f:86:e3:42:92: 80:5e:18:68:40:b4:aa:39:9b:13:ba:e1:ab:da:47:e0:08:40: db:b1:7d:4f -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUHdYqrgiGXrKz48VDlQTQcmK4hogwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIyNTAxMTY0NVoX DTI1MDIyMzAxMjE0NVowMzExMC8GA1UEAxMoM0JCNzM0NkM5OTFCNjg5MjIzQkFE QzZGODJERDE5QkUzQjAxNzcwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANK2Vlmw4+awzc7mrhKqd3BPOsLEGEFWz5mH31v5H6H9ZQ5/t7xDHbDT0RMC DJwJOOsSOwm7YplCNhtT8KjPsdL0LH8qcNcKZ96uyAxIWB/5E5lwC3t+J3PwzTv5 KVjzsIizHZzMgUjbmY1NXrx+XJFU4SgXDt0isVBBU1Xrt7HBIm4X4KHDR6h28jwy YY7fxf/uPHJp6GeVa+YXfJJDZEVf7EpU6naWX2JonxkcYefACtuqeNZMvM/WLtSY 3FC6UpXNlZiH1NfaUAlcC4lHF2CPOiIWoSw5mZNTntbyW1un3Zy15r6BLlhMcAUX JQfOFlRHCCxnqpyy/htzDjamac0CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDu3NGyZG2iSI7rcb4LdGb47AXcEMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMjZlNDU2NC00OGYyLTQzYjUtODUwNS05M2I0OThlN2Q4YWIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyNmU0NTY0 LTQ4ZjItNDNiNS04NTA1LTkzYjQ5OGU3ZDhhYi8wLzNCQjczNDZDOTkxQjY4OTIy M0JBREM2RjgyREQxOUJFM0IwMTc3MDQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnz2AwDQQCAAIwBwMFACQELIAwDQYJKoZIhvcNAQELBQADggEBABI0y93u9WXn ZjOjxekEaKwA1Jcl+tQG1LiCvc9hGOTfZ71OmO+PJ2F2L4mCF33iKRCFuxkTllak SFqGkPsspGiDAWkZNChubxJmq0fig3IbOiNql4IVtlLK+fWqg26JbNWXIjdSFCat eQ09DjOLxNlKsZZz9vPslg/oO80405N/lKQomuWsCZTGiN5qnJWAPna1ngO/za2h Eej3dvpYwGIyj749ufUtxm7je5dRPU9pRHSeV5fileUyYiA0abXAWc9tIrTBVPdE uE+5P6C7OpCnfqYoQEcdcAzCzAUFq4qTvAaSakKPhuNCkoBeGGhAtKo5mxO64ava R+AIQNuxfU8= -----END CERTIFICATE-----Generated at Wed May 8 15:17:35 2024 by rpki-client on console-fra.rpki-client.org