$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer File: 3E6F306418455683DBA0AC95B4FD41E1846476AB.cer (raw, json) Hash identifier: 3MGPtTcwvfUdHzOndskpia5hUKMi63nz1nZnLNz2GY0= Subject key identifier: 3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 48F983C3FF279C77F4205C8D236F0314AAFF2B00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft caRepository: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 22 Jul 2024 04:21:37 +0000 Certificate not after: Mon 21 Jul 2025 04:26:37 +0000 Subordinate resources: IP: 202.46.144.0/20 IP: 2402:82c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f9:83:c3:ff:27:9c:77:f4:20:5c:8d:23:6f:03:14:aa:ff:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 22 04:21:37 2024 GMT Not After : Jul 21 04:26:37 2025 GMT Subject: CN=3E6F306418455683DBA0AC95B4FD41E1846476AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e8:7b:a9:fb:f4:c8:b8:6c:2f:e0:df:47:b1: af:98:c6:4a:fb:c4:51:52:ab:8d:ce:13:61:ab:2e: a4:7f:8b:96:ac:d5:0f:b3:5a:d3:1b:28:52:f9:d7: 70:d7:97:3b:04:3e:f2:6e:60:43:1b:b0:ac:cf:1e: 91:a9:f7:2f:c1:87:2b:d6:d1:68:6d:1e:22:d6:5e: 30:ed:a1:15:75:1b:2a:3e:72:17:d8:00:65:b0:a0: 4d:89:9a:e4:f8:d9:43:de:85:9d:91:dd:89:cb:e6: 9f:5f:0e:15:85:52:7c:cc:a7:ac:c2:eb:90:fe:dd: 9a:f9:c4:1e:2e:a0:34:19:74:ba:16:33:b0:ac:d1: b7:8d:e0:7e:5d:6f:f0:ab:09:b8:93:f9:58:18:40: 20:5e:90:24:ab:33:b4:da:13:b9:bf:0a:12:3d:09: 09:b5:fd:74:57:ec:f3:71:fd:4e:15:99:81:33:9c: 93:12:62:0b:23:4c:07:66:cf:01:f7:e2:bd:6a:17: 6a:9d:87:f5:c3:6a:df:fa:cc:6c:02:70:4d:3a:a5: 9f:59:56:17:d2:6d:cc:79:9a:1c:6c:c7:9d:85:b5: 65:23:55:b3:0d:a8:d7:ed:87:7d:19:f7:ee:73:82: 45:09:5b:05:c7:89:51:15:e5:e6:18:30:34:90:47: 66:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.46.144.0/20 IPv6: 2402:82c0::/32 Signature Algorithm: sha256WithRSAEncryption 2f:f2:dc:00:ee:00:29:11:d7:a3:85:cd:ce:ea:10:df:b7:78: e5:76:0d:8f:30:b9:3f:d8:a2:05:3e:5b:b9:d6:c0:30:25:63: 42:20:67:40:da:c0:4f:bf:a2:08:75:78:78:46:8a:77:76:7c: cc:39:f6:fa:44:33:33:7f:bc:7b:b4:f9:44:c6:39:c7:3f:a9: 7f:d4:9c:b5:bf:83:de:5b:43:08:9c:3a:8e:4d:db:e2:6a:9d: 3c:c4:84:6e:ff:8f:97:8b:24:3a:58:dc:71:0c:90:69:cd:47: 1c:05:29:e5:25:c3:16:c1:31:43:4b:f4:b7:f0:b3:5a:c1:cf: eb:9e:37:df:8e:3a:12:d8:e3:81:fa:8a:ea:7c:51:93:dc:25: 4f:33:92:2f:5c:b1:e3:ed:30:05:bc:f3:55:d0:bb:88:a1:c8: ca:d9:5b:cf:33:81:00:ac:70:f8:3d:ba:56:18:8f:d2:2f:5b: e4:34:57:eb:ad:c7:85:bd:b5:8e:3f:8d:e6:bf:b6:5c:9e:22: e6:57:6f:80:bb:6e:b5:8a:5d:f7:19:11:8d:50:11:c1:66:55: e1:1c:f9:61:8a:9b:2e:75:39:1d:be:38:d0:e1:d9:c0:d3:6a: af:64:d6:71:86:9c:35:b8:ce:67:1e:82:a4:bc:c9:57:a0:8b: ae:b8:53:82 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUSPmDw/8nnHf0IFyNI28DFKr/KwAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcyMjA0MjEzN1oX DTI1MDcyMTA0MjYzN1owMzExMC8GA1UEAxMoM0U2RjMwNjQxODQ1NTY4M0RCQTBB Qzk1QjRGRDQxRTE4NDY0NzZBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzoe6n79Mi4bC/g30exr5jGSvvEUVKrjc4TYasupH+LlqzVD7Na0xsoUvnX cNeXOwQ+8m5gQxuwrM8ekan3L8GHK9bRaG0eItZeMO2hFXUbKj5yF9gAZbCgTYma 5PjZQ96FnZHdicvmn18OFYVSfMynrMLrkP7dmvnEHi6gNBl0uhYzsKzRt43gfl1v 8KsJuJP5WBhAIF6QJKsztNoTub8KEj0JCbX9dFfs83H9ThWZgTOckxJiCyNMB2bP AffivWoXap2H9cNq3/rMbAJwTTqln1lWF9JtzHmaHGzHnYW1ZSNVsw2o1+2HfRn3 7nOCRQlbBceJURXl5hgwNJBHZlMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD5vMGQYRVaD26CslbT9QeGEZHarMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82NGY3ZWI0Zi03OTI0LTRkYjYtYjZkNi0zOTRkODNiMzkyZmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0ZjdlYjRm LTc5MjQtNGRiNi1iNmQ2LTM5NGQ4M2IzOTJmYy8wLzNFNkYzMDY0MTg0NTU2ODNE QkEwQUM5NUI0RkQ0MUUxODQ2NDc2QUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BATKLpAwDQQCAAIwBwMFACQCgsAwDQYJKoZIhvcNAQELBQADggEBAC/y3ADuACkR 16OFzc7qEN+3eOV2DY8wuT/YogU+W7nWwDAlY0IgZ0DawE+/ogh1eHhGind2fMw5 9vpEMzN/vHu0+UTGOcc/qX/UnLW/g95bQwicOo5N2+JqnTzEhG7/j5eLJDpY3HEM kGnNRxwFKeUlwxbBMUNL9Lfws1rBz+ueN9+OOhLY44H6iup8UZPcJU8zki9csePt MAW881XQu4ihyMrZW88zgQCscPg9ulYYj9IvW+Q0V+utx4W9tY4/jea/tlyeIuZX b4C7brWKXfcZEY1QEcFmVeEc+WGKmy51OR2+ONDh2cDTaq9k1nGGnDW4zmcegqS8 yVegi664U4I= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:47 2024 by rpki-client on console-fra.rpki-client.org