$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer File: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer (raw, json) Hash identifier: t4+XY7QM8ZsDjczX9JWbsk1DdmqCLJcj4ReVM+HNR5g= Subject key identifier: 3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7C3F1308DB1F58F2A9FB9F1A8273F15E1F218CF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft caRepository: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 12 Feb 2025 10:38:07 +0000 Certificate not after: Wed 11 Feb 2026 10:43:07 +0000 Subordinate resources: IP: 203.153.96.0 -- 203.153.119.255 IP: 222.165.192.0/18 IP: 2404:f600::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:3f:13:08:db:1f:58:f2:a9:fb:9f:1a:82:73:f1:5e:1f:21:8c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 12 10:38:07 2025 GMT Not After : Feb 11 10:43:07 2026 GMT Subject: CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d1:2c:bd:18:90:02:4b:19:d3:11:19:8e:29: 1f:30:bf:69:b3:83:55:a6:58:c7:77:5f:a6:93:ee: cb:e6:8c:a9:d2:b5:a9:6c:68:f9:74:9f:8a:a8:90: 60:85:c3:c5:1a:95:ee:2c:d8:fb:b3:e3:2b:66:b1: ca:a3:7c:22:dd:74:83:f9:55:29:40:62:35:13:79: e7:86:80:85:4b:f9:f4:29:f7:39:1e:58:5f:b9:78: 89:34:3e:8f:c8:36:aa:b3:ca:c5:a9:5a:8d:d4:19: f5:8e:28:b6:df:ec:b3:0b:6b:5b:43:a9:7b:01:bf: d8:1b:f3:db:1f:51:c9:8b:d6:8d:52:4e:73:44:e1: 58:4b:58:04:13:ad:5b:a2:86:62:cd:fb:5a:27:25: 2a:c9:65:ae:76:a8:2f:22:13:fd:70:ea:27:ea:ba: 5e:70:b2:14:84:a6:5c:5e:1c:ee:64:db:82:42:74: 8b:13:57:c9:e1:eb:ad:47:c3:02:fe:9c:80:45:c6: 92:a1:bf:e7:de:9d:3a:ad:ad:ea:8e:bb:90:36:50: 38:3d:de:99:53:14:33:f3:cc:df:4d:15:ad:53:78: 38:76:9f:00:69:eb:73:11:80:5f:5c:3c:25:45:2b: 04:3b:76:b3:23:b7:67:e9:98:f3:26:eb:7f:c2:2d: b0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.153.96.0-203.153.119.255 222.165.192.0/18 IPv6: 2404:f600::/32 Signature Algorithm: sha256WithRSAEncryption 8c:b3:94:16:b7:96:58:79:fb:cb:f8:33:ae:9c:b7:74:ea:81: 27:e3:be:01:2c:87:40:93:9f:7d:c3:9e:c0:ac:09:db:51:bd: e0:c1:05:15:0a:97:dd:c4:b2:41:bd:d1:c3:2b:fd:25:46:ff: 91:39:19:94:74:ff:d1:e7:73:c8:77:3d:7b:ae:06:20:75:fd: 13:7c:85:c0:27:fe:3d:36:6c:87:82:0d:3a:2b:41:1e:97:d4: 8d:a3:bc:4d:a2:fd:0a:fa:4d:ba:61:96:1a:ae:a7:38:fd:2a: c2:ed:eb:84:f4:20:74:a4:c6:cc:17:d7:11:fc:cb:59:45:64: aa:76:52:1f:9e:3e:7a:0c:34:a4:99:72:ad:d1:6a:8e:25:bb: 88:96:c2:08:76:3c:16:3e:05:0d:df:dc:51:9a:c4:f4:fa:17: e4:24:f4:ac:b9:e6:e3:a9:bb:85:cb:9b:58:e9:71:70:1d:1e: 1c:9b:c7:d1:3e:2d:25:90:7a:38:30:19:07:93:c2:8b:11:01: d9:7d:00:a3:48:c5:84:64:8f:07:5a:b4:6b:ed:64:7a:7e:1c: e7:20:ac:dc:79:ff:f9:3f:ed:ae:c2:34:5a:fa:38:f2:39:c7: 94:aa:df:a6:4e:a8:9e:89:1d:ec:32:4f:59:67:fd:c1:1b:12: a6:72:32:49 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUfD8TCNsfWPKp+58agnPxXh8hjPQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIxMjEwMzgwN1oX DTI2MDIxMTEwNDMwN1owMzExMC8GA1UEAxMoM0M3OTBGRTRBQjgyQTJDMTUwMTdE MjY1NzE0QjEyNDVCRjBBRkIwRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMLRLL0YkAJLGdMRGY4pHzC/abODVaZYx3dfppPuy+aMqdK1qWxo+XSfiqiQ YIXDxRqV7izY+7PjK2axyqN8It10g/lVKUBiNRN554aAhUv59Cn3OR5YX7l4iTQ+ j8g2qrPKxalajdQZ9Y4ott/sswtrW0OpewG/2Bvz2x9RyYvWjVJOc0ThWEtYBBOt W6KGYs37WiclKsllrnaoLyIT/XDqJ+q6XnCyFISmXF4c7mTbgkJ0ixNXyeHrrUfD Av6cgEXGkqG/596dOq2t6o67kDZQOD3emVMUM/PM300VrVN4OHafAGnrcxGAX1w8 JUUrBDt2syO3Z+mY8ybrf8ItsKECAwEAAaOCAtUwggLRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDx5D+SrgqLBUBfSZXFLEkW/CvsPMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mYzdlODA4MS02M2FmLTQ5ZTctOTY0Ni03NmMyNWE1ZTk3Y2EvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZjN2U4MDgx LTYzYWYtNDllNy05NjQ2LTc2YzI1YTVlOTdjYS8wLzNDNzkwRkU0QUI4MkEyQzE1 MDE3RDI2NTcxNEIxMjQ1QkYwQUZCMEYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBoEAgABMBQw DAMEBcuZYAMEA8uZcAMEBt6lwDANBAIAAjAHAwUAJAT2ADANBgkqhkiG9w0BAQsF AAOCAQEAjLOUFreWWHn7y/gzrpy3dOqBJ+O+ASyHQJOffcOewKwJ21G94MEFFQqX 3cSyQb3Rwyv9JUb/kTkZlHT/0edzyHc9e64GIHX9E3yFwCf+PTZsh4INOitBHpfU jaO8TaL9CvpNumGWGq6nOP0qwu3rhPQgdKTGzBfXEfzLWUVkqnZSH54+egw0pJly rdFqjiW7iJbCCHY8Fj4FDd/cUZrE9PoX5CT0rLnm46m7hcubWOlxcB0eHJvH0T4t JZB6ODAZB5PCixEB2X0Ao0jFhGSPB1q0a+1ken4c5yCs3Hn/+T/trsI0Wvo48jnH lKrfpk6onokd7DJPWWf9wRsSpnIySQ== -----END CERTIFICATE-----Generated at Sat Apr 5 10:07:52 2025 by rpki-client