$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer File: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer (raw, json) Hash identifier: cTSTgAuXmm4f4nAU3KkY2gLhGDgGBpR2bIaYwKGQUIg= Subject key identifier: 3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2E5B4902AEAD44287C3AACF397CD29FD5BA190D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft caRepository: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 20 Mar 2024 21:48:12 +0000 Certificate not after: Wed 19 Mar 2025 21:53:12 +0000 Subordinate resources: IP: 120.29.224.0/21 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:5b:49:02:ae:ad:44:28:7c:3a:ac:f3:97:cd:29:fd:5b:a1:90:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 20 21:48:12 2024 GMT Not After : Mar 19 21:53:12 2025 GMT Subject: CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:79:54:dc:07:68:c4:cc:99:6d:85:47:ea:bd: fa:29:f0:30:57:d5:81:14:3e:9f:27:81:be:64:27: aa:7d:45:f4:99:c8:e3:5a:4f:18:71:b4:84:54:b5: a9:5e:7a:12:44:cb:50:5b:93:23:33:10:13:d4:8f: 9c:81:8a:21:8d:6c:aa:52:e9:e8:ea:19:a5:bf:20: b2:07:c2:12:3c:dc:55:f4:75:5c:8b:4f:40:95:62: 59:14:52:2c:80:bb:7f:5b:ad:57:af:75:fd:a8:df: 70:e3:22:dc:c6:08:32:43:ed:36:23:dd:66:ba:0d: 0f:89:94:bc:73:b5:d7:55:a0:1f:7f:ae:94:26:81: 89:80:22:18:a3:45:73:09:3a:4e:ea:c9:c7:25:bf: df:1b:71:48:ae:f9:bc:55:06:8c:c8:ac:47:52:98: e5:ac:c5:85:70:b5:6e:30:51:63:12:95:68:a1:fe: ba:47:ad:03:8e:fd:89:b9:73:7a:4a:c8:d0:a9:22: d6:6a:0b:90:31:94:81:af:52:ce:13:4d:99:c8:b5: dd:72:aa:35:02:29:37:ed:96:72:60:09:43:73:e3: 7a:c5:f3:97:71:a9:c5:5e:85:3c:78:94:fb:9d:f2: fc:4a:29:46:d4:b1:0e:73:9c:42:2c:a6:a6:0a:a9: 27:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.29.224.0/21 Signature Algorithm: sha256WithRSAEncryption 85:f3:9d:7a:4d:b4:d8:12:e8:4d:2d:3c:dc:e5:6d:d6:f9:55: 19:86:60:62:18:f0:72:ae:ac:85:8e:cb:31:a6:b2:d2:38:4f: 99:63:8d:bb:c2:47:3c:91:0a:4e:39:98:3e:36:e0:f0:72:27: 07:8c:b0:e2:5c:11:c6:0e:ff:99:59:ad:11:0c:c6:dc:37:0c: 00:c4:49:b1:ca:97:ee:7c:e4:f3:06:62:54:49:33:18:5b:af: dc:f8:38:77:0c:d5:be:19:81:0d:af:d1:68:41:f0:92:5d:1f: 71:98:18:44:1c:1f:cb:54:bc:45:6c:4c:ce:12:18:c8:cc:e8: 70:64:e5:1b:0a:87:45:56:46:94:9b:59:60:60:fa:f0:f1:b3: c9:45:9b:f0:47:88:5c:c0:83:fe:ec:47:34:57:10:39:b2:f8: f1:df:17:2c:7a:bf:4d:9f:6c:12:04:19:4c:01:59:d2:ce:84: de:02:89:1c:7e:35:6c:c4:32:e9:6b:d7:c2:50:d4:fd:1a:6b: 2b:85:3d:9c:fd:00:29:5a:5f:6b:eb:35:5a:25:96:ad:27:2e: 70:4c:5b:ba:4c:08:01:44:f2:7b:58:19:f8:05:b2:33:fa:66: 11:75:aa:c3:a3:32:b8:75:34:6a:ba:ba:15:c2:34:58:0f:bb: 6a:46:56:e3 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIULltJAq6tRCh8Oqzzl80p/VuhkNQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMyMDIxNDgxMloX DTI1MDMxOTIxNTMxMlowMzExMC8GA1UEAxMoM0U2NjYyOEMwM0NBQjhDNkQ2RkNE RURCRTA3MDA1NTdBMzVCMDI1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANF5VNwHaMTMmW2FR+q9+inwMFfVgRQ+nyeBvmQnqn1F9JnI41pPGHG0hFS1 qV56EkTLUFuTIzMQE9SPnIGKIY1sqlLp6OoZpb8gsgfCEjzcVfR1XItPQJViWRRS LIC7f1utV691/ajfcOMi3MYIMkPtNiPdZroND4mUvHO111WgH3+ulCaBiYAiGKNF cwk6TurJxyW/3xtxSK75vFUGjMisR1KY5azFhXC1bjBRYxKVaKH+uketA479iblz ekrI0Kki1moLkDGUga9SzhNNmci13XKqNQIpN+2WcmAJQ3PjesXzl3GpxV6FPHiU +53y/EopRtSxDnOcQiympgqpJwECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD5mYowDyrjG1vze2+BwBVejWwJRMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yMjFjOWNhZC1jM2I5LTQ1YTAtYmViNi1iY2U0OGUyYjIyNzIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIyMWM5Y2Fk LWMzYjktNDVhMC1iZWI2LWJjZTQ4ZTJiMjI3Mi8wLzNFNjY2MjhDMDNDQUI4QzZE NkZDREVEQkUwNzAwNTU3QTM1QjAyNTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAN4HeAwDQYJKoZIhvcNAQELBQADggEBAIXznXpNtNgS6E0tPNzlbdb5VRmGYGIY 8HKurIWOyzGmstI4T5ljjbvCRzyRCk45mD424PByJweMsOJcEcYO/5lZrREMxtw3 DADESbHKl+585PMGYlRJMxhbr9z4OHcM1b4ZgQ2v0WhB8JJdH3GYGEQcH8tUvEVs TM4SGMjM6HBk5RsKh0VWRpSbWWBg+vDxs8lFm/BHiFzAg/7sRzRXEDmy+PHfFyx6 v02fbBIEGUwBWdLOhN4CiRx+NWzEMulr18JQ1P0aayuFPZz9AClaX2vrNVollq0n LnBMW7pMCAFE8ntYGfgFsjP6ZhF1qsOjMrh1NGq6uhXCNFgPu2pGVuM= -----END CERTIFICATE-----Generated at Wed May 8 09:50:28 2024 by rpki-client on console-fra.rpki-client.org