$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer File: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer (raw, json) Hash identifier: AU14+en75Xxh7acFmCZEWtZxjA1BofTSMsbByMbCqAw= Subject key identifier: 3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 033FA9A23C08B1F0173D16659498952DEC52F3F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft caRepository: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 13 Mar 2024 03:20:16 +0000 Certificate not after: Wed 12 Mar 2025 03:25:16 +0000 Subordinate resources: IP: 203.153.96.0 -- 203.153.119.255 IP: 222.165.192.0/18 IP: 2404:f600::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:3f:a9:a2:3c:08:b1:f0:17:3d:16:65:94:98:95:2d:ec:52:f3:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 13 03:20:16 2024 GMT Not After : Mar 12 03:25:16 2025 GMT Subject: CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d1:2c:bd:18:90:02:4b:19:d3:11:19:8e:29: 1f:30:bf:69:b3:83:55:a6:58:c7:77:5f:a6:93:ee: cb:e6:8c:a9:d2:b5:a9:6c:68:f9:74:9f:8a:a8:90: 60:85:c3:c5:1a:95:ee:2c:d8:fb:b3:e3:2b:66:b1: ca:a3:7c:22:dd:74:83:f9:55:29:40:62:35:13:79: e7:86:80:85:4b:f9:f4:29:f7:39:1e:58:5f:b9:78: 89:34:3e:8f:c8:36:aa:b3:ca:c5:a9:5a:8d:d4:19: f5:8e:28:b6:df:ec:b3:0b:6b:5b:43:a9:7b:01:bf: d8:1b:f3:db:1f:51:c9:8b:d6:8d:52:4e:73:44:e1: 58:4b:58:04:13:ad:5b:a2:86:62:cd:fb:5a:27:25: 2a:c9:65:ae:76:a8:2f:22:13:fd:70:ea:27:ea:ba: 5e:70:b2:14:84:a6:5c:5e:1c:ee:64:db:82:42:74: 8b:13:57:c9:e1:eb:ad:47:c3:02:fe:9c:80:45:c6: 92:a1:bf:e7:de:9d:3a:ad:ad:ea:8e:bb:90:36:50: 38:3d:de:99:53:14:33:f3:cc:df:4d:15:ad:53:78: 38:76:9f:00:69:eb:73:11:80:5f:5c:3c:25:45:2b: 04:3b:76:b3:23:b7:67:e9:98:f3:26:eb:7f:c2:2d: b0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.153.96.0-203.153.119.255 222.165.192.0/18 IPv6: 2404:f600::/32 Signature Algorithm: sha256WithRSAEncryption 68:4f:d9:45:55:3a:be:f9:a8:0e:7b:08:46:65:ed:b4:62:fa: c5:72:cb:9e:e2:52:86:d6:55:15:dc:b6:ec:b0:ae:4a:cc:9e: 77:65:e1:30:84:c1:dc:94:9a:fd:c4:b2:7f:ad:55:06:9d:91: 97:97:d8:60:2d:3e:de:db:d9:f5:24:f5:b7:d2:b3:1e:f8:7b: 9c:f2:16:19:3f:c8:d3:41:17:de:3b:15:a1:95:4e:38:32:15: d8:ba:88:60:14:b5:9b:3d:dd:70:dc:45:f7:f3:9f:0c:ef:73: e1:30:f5:1d:57:46:1c:c0:93:48:53:0f:6e:93:2a:01:0b:27: ab:2a:8a:58:d8:c8:75:ed:c6:be:b2:43:af:c0:8c:18:8a:04: 8a:c9:b7:06:4b:d9:38:5f:a4:df:d8:6e:eb:ce:d5:9e:8e:f7: b4:1e:dc:bc:98:c3:e3:43:fd:08:66:8a:97:81:9b:a7:7b:3a: bd:b1:6e:70:15:bb:1e:43:91:32:c3:04:b7:dc:b1:07:89:48: 36:ea:46:78:a2:41:6e:2b:b9:7b:22:ae:2d:42:14:c3:ad:f4: 48:eb:37:9b:c7:3c:e6:88:2a:16:2e:ae:fe:cb:6a:f5:9c:9a: b4:ae:0d:57:46:be:6f:90:ee:f9:b4:91:8d:72:e2:0d:f2:8a: a5:7d:ba:9d -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUAz+pojwIsfAXPRZllJiVLexS8/MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMxMzAzMjAxNloX DTI1MDMxMjAzMjUxNlowMzExMC8GA1UEAxMoM0M3OTBGRTRBQjgyQTJDMTUwMTdE MjY1NzE0QjEyNDVCRjBBRkIwRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMLRLL0YkAJLGdMRGY4pHzC/abODVaZYx3dfppPuy+aMqdK1qWxo+XSfiqiQ YIXDxRqV7izY+7PjK2axyqN8It10g/lVKUBiNRN554aAhUv59Cn3OR5YX7l4iTQ+ j8g2qrPKxalajdQZ9Y4ott/sswtrW0OpewG/2Bvz2x9RyYvWjVJOc0ThWEtYBBOt W6KGYs37WiclKsllrnaoLyIT/XDqJ+q6XnCyFISmXF4c7mTbgkJ0ixNXyeHrrUfD Av6cgEXGkqG/596dOq2t6o67kDZQOD3emVMUM/PM300VrVN4OHafAGnrcxGAX1w8 JUUrBDt2syO3Z+mY8ybrf8ItsKECAwEAAaOCAtUwggLRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDx5D+SrgqLBUBfSZXFLEkW/CvsPMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mYzdlODA4MS02M2FmLTQ5ZTctOTY0Ni03NmMyNWE1ZTk3Y2EvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZjN2U4MDgx LTYzYWYtNDllNy05NjQ2LTc2YzI1YTVlOTdjYS8wLzNDNzkwRkU0QUI4MkEyQzE1 MDE3RDI2NTcxNEIxMjQ1QkYwQUZCMEYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBoEAgABMBQw DAMEBcuZYAMEA8uZcAMEBt6lwDANBAIAAjAHAwUAJAT2ADANBgkqhkiG9w0BAQsF AAOCAQEAaE/ZRVU6vvmoDnsIRmXttGL6xXLLnuJShtZVFdy27LCuSsyed2XhMITB 3JSa/cSyf61VBp2Rl5fYYC0+3tvZ9ST1t9KzHvh7nPIWGT/I00EX3jsVoZVOODIV 2LqIYBS1mz3dcNxF9/OfDO9z4TD1HVdGHMCTSFMPbpMqAQsnqyqKWNjIde3GvrJD r8CMGIoEism3BkvZOF+k39hu687Vno73tB7cvJjD40P9CGaKl4Gbp3s6vbFucBW7 HkORMsMEt9yxB4lINupGeKJBbiu5eyKuLUIUw630SOs3m8c85ogqFi6u/stq9Zya tK4NV0a+b5Du+bSRjXLiDfKKpX26nQ== -----END CERTIFICATE-----Generated at Wed May 8 21:02:12 2024 by rpki-client on console-fra.rpki-client.org