$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3D13C6FB9DB22CE134706325357C20E1DC9A1269.cer File: 3D13C6FB9DB22CE134706325357C20E1DC9A1269.cer (raw, json) Hash identifier: RTGXuxUv7xa4R8chUdiVpVvp8NmdVrTtZ9a1WIXdyCc= Subject key identifier: 3D:13:C6:FB:9D:B2:2C:E1:34:70:63:25:35:7C:20:E1:DC:9A:12:69 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1856D62EB564AD4273E2EDE52F0CE4FE40457D40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3D13C6FB9DB22CE134706325357C20E1DC9A1269.mft caRepository: rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 26 Sep 2024 16:44:25 +0000 Certificate not after: Thu 25 Sep 2025 16:49:25 +0000 Subordinate resources: IP: 103.24.56.0/22 IP: 202.9.85.0/24 IP: 2001:df0:a8::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:56:d6:2e:b5:64:ad:42:73:e2:ed:e5:2f:0c:e4:fe:40:45:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 26 16:44:25 2024 GMT Not After : Sep 25 16:49:25 2025 GMT Subject: CN=3D13C6FB9DB22CE134706325357C20E1DC9A1269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:17:5a:7a:fa:00:b3:03:3c:ef:b5:8b:0d:81: fb:4d:26:12:43:6d:84:31:cf:c3:a7:c0:be:1d:3b: d8:a3:94:56:f6:45:69:06:32:b3:15:3d:42:76:b8: 47:6a:62:d6:52:6d:c3:de:cf:5e:c2:8e:c0:e3:ad: ba:e0:2a:75:c4:d7:bc:63:cf:11:80:cf:f9:92:38: c4:28:db:5b:f3:d4:4a:56:86:2d:da:f2:14:af:72: f5:83:4e:dc:e3:8b:cc:b5:ef:09:93:47:18:16:2e: 12:4a:ad:2d:38:33:c9:84:16:25:0a:63:5f:a1:04: 73:67:1b:1e:81:ff:34:cc:c5:a1:c8:7f:51:6e:7b: fc:51:fe:71:66:e3:ec:e2:ea:34:49:8c:84:01:49: 17:fc:f2:81:0d:33:4f:08:8f:fb:22:be:14:96:ca: 5c:49:8c:10:0f:40:e8:e3:0a:d7:e0:eb:1e:5f:53: 76:95:07:72:45:1a:8d:c8:ed:5b:6f:c0:47:08:0d: 6c:db:6b:c8:46:12:a1:72:e6:9a:f6:39:a5:06:2a: 40:06:d1:8a:71:10:7f:73:0a:23:ee:9d:2f:fe:7d: 8f:c6:80:d0:7b:ff:52:4f:0c:ef:ff:f8:fa:2a:0a: cd:77:cb:ad:aa:d7:1d:cd:1a:b8:1e:cb:71:1f:43: 15:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:13:C6:FB:9D:B2:2C:E1:34:70:63:25:35:7C:20:E1:DC:9A:12:69 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3D13C6FB9DB22CE134706325357C20E1DC9A1269.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.24.56.0/22 202.9.85.0/24 IPv6: 2001:df0:a8::/48 Signature Algorithm: sha256WithRSAEncryption 4d:40:74:82:fa:34:7c:37:51:d4:e2:00:42:45:1a:25:d2:34: a9:91:54:1c:b6:8b:31:53:d2:80:6c:2c:d6:52:40:31:5c:3b: a4:ac:6a:67:8b:cc:1c:08:81:5b:28:69:2d:98:01:b8:c6:64: d5:f0:8f:46:98:6a:65:5d:07:93:0a:dc:9a:13:05:83:68:b3: eb:6b:42:3c:0d:7d:58:1d:32:1c:f4:ec:73:9e:2a:5b:76:ed: 65:23:1c:33:47:fa:ad:c3:5d:d0:e8:54:46:a1:ba:0d:ef:ee: 01:64:8e:68:fb:aa:36:6f:77:c1:c2:bd:3e:80:54:3f:09:8e: 0a:aa:f5:10:82:23:9c:a4:33:14:c3:25:e3:2e:c3:e9:5b:1f: 26:d7:f0:c2:e2:b1:91:01:81:05:b8:0e:05:51:0f:39:78:c1: 49:b7:13:5f:a5:7a:3d:b7:3a:01:10:25:a9:24:37:9e:71:b5: 5f:4e:b6:84:1b:0a:98:af:15:10:d9:56:09:99:db:06:73:1c: d1:fe:87:9c:32:42:1b:46:5c:ed:5c:8e:46:a1:bc:00:25:31: 59:1f:4e:8c:10:01:53:71:20:3e:40:76:df:79:98:db:87:03: 29:45:12:7d:6c:ae:e8:90:c2:74:89:43:c9:95:cc:b6:c6:c1: c9:00:8d:87 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUGFbWLrVkrUJz4u3lLwzk/kBFfUAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkyNjE2NDQyNVoX DTI1MDkyNTE2NDkyNVowMzExMC8GA1UEAxMoM0QxM0M2RkI5REIyMkNFMTM0NzA2 MzI1MzU3QzIwRTFEQzlBMTI2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALsXWnr6ALMDPO+1iw2B+00mEkNthDHPw6fAvh072KOUVvZFaQYysxU9Qna4 R2pi1lJtw97PXsKOwOOtuuAqdcTXvGPPEYDP+ZI4xCjbW/PUSlaGLdryFK9y9YNO 3OOLzLXvCZNHGBYuEkqtLTgzyYQWJQpjX6EEc2cbHoH/NMzFoch/UW57/FH+cWbj 7OLqNEmMhAFJF/zygQ0zTwiP+yK+FJbKXEmMEA9A6OMK1+DrHl9TdpUHckUajcjt W2/ARwgNbNtryEYSoXLmmvY5pQYqQAbRinEQf3MKI+6dL/59j8aA0Hv/Uk8M7//4 +ioKzXfLrarXHc0auB7LcR9DFesCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD0TxvudsizhNHBjJTV8IOHcmhJpMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZDFlZTVlMi0zMzhjLTRkMjAtODA3ZS1lNTBiNzU1ODNkYjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkMWVlNWUy LTMzOGMtNGQyMC04MDdlLWU1MGI3NTU4M2RiOC8wLzNEMTNDNkZCOURCMjJDRTEz NDcwNjMyNTM1N0MyMEUxREM5QTEyNjkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BAJnGDgDBADKCVUwDwQCAAIwCQMHACABDfAAqDANBgkqhkiG9w0BAQsFAAOCAQEA TUB0gvo0fDdR1OIAQkUaJdI0qZFUHLaLMVPSgGws1lJAMVw7pKxqZ4vMHAiBWyhp LZgBuMZk1fCPRphqZV0HkwrcmhMFg2iz62tCPA19WB0yHPTsc54qW3btZSMcM0f6 rcNd0OhURqG6De/uAWSOaPuqNm93wcK9PoBUPwmOCqr1EIIjnKQzFMMl4y7D6Vsf JtfwwuKxkQGBBbgOBVEPOXjBSbcTX6V6Pbc6ARAlqSQ3nnG1X062hBsKmK8VENlW CZnbBnMc0f6HnDJCG0Zc7VyORqG8ACUxWR9OjBABU3EgPkB233mY24cDKUUSfWyu 6JDCdIlDyZXMtsbByQCNhw== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:40 2024 by rpki-client on console-ams.rpki-client.org