$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer File: 3E6F306418455683DBA0AC95B4FD41E1846476AB.cer (raw, json) Hash identifier: 0eku3ynlgap0V+WLqQEzBw3Vb/V5kDSRlXIQIHjmaTY= Subject key identifier: 3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 332842F29C5731ACA1E56DB6468C060CF6DF452D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft caRepository: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 20 Aug 2023 15:39:11 +0000 Certificate not after: Sun 18 Aug 2024 15:44:11 +0000 Subordinate resources: IP: 202.46.144.0/20 IP: 2402:82c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:28:42:f2:9c:57:31:ac:a1:e5:6d:b6:46:8c:06:0c:f6:df:45:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 20 15:39:11 2023 GMT Not After : Aug 18 15:44:11 2024 GMT Subject: CN=3E6F306418455683DBA0AC95B4FD41E1846476AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e8:7b:a9:fb:f4:c8:b8:6c:2f:e0:df:47:b1: af:98:c6:4a:fb:c4:51:52:ab:8d:ce:13:61:ab:2e: a4:7f:8b:96:ac:d5:0f:b3:5a:d3:1b:28:52:f9:d7: 70:d7:97:3b:04:3e:f2:6e:60:43:1b:b0:ac:cf:1e: 91:a9:f7:2f:c1:87:2b:d6:d1:68:6d:1e:22:d6:5e: 30:ed:a1:15:75:1b:2a:3e:72:17:d8:00:65:b0:a0: 4d:89:9a:e4:f8:d9:43:de:85:9d:91:dd:89:cb:e6: 9f:5f:0e:15:85:52:7c:cc:a7:ac:c2:eb:90:fe:dd: 9a:f9:c4:1e:2e:a0:34:19:74:ba:16:33:b0:ac:d1: b7:8d:e0:7e:5d:6f:f0:ab:09:b8:93:f9:58:18:40: 20:5e:90:24:ab:33:b4:da:13:b9:bf:0a:12:3d:09: 09:b5:fd:74:57:ec:f3:71:fd:4e:15:99:81:33:9c: 93:12:62:0b:23:4c:07:66:cf:01:f7:e2:bd:6a:17: 6a:9d:87:f5:c3:6a:df:fa:cc:6c:02:70:4d:3a:a5: 9f:59:56:17:d2:6d:cc:79:9a:1c:6c:c7:9d:85:b5: 65:23:55:b3:0d:a8:d7:ed:87:7d:19:f7:ee:73:82: 45:09:5b:05:c7:89:51:15:e5:e6:18:30:34:90:47: 66:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.46.144.0/20 IPv6: 2402:82c0::/32 Signature Algorithm: sha256WithRSAEncryption 1c:b3:15:b5:e5:ef:ef:33:7c:d3:be:9a:5a:9a:f4:cb:4b:e9: fa:c1:7c:16:dd:24:fb:b2:68:dd:94:69:64:4a:ca:2a:00:55: 85:30:3f:24:36:ef:e0:ef:4a:40:26:7e:b6:f6:0f:93:3a:f5: 9c:e5:bb:31:8c:33:79:5c:4b:8a:69:43:8b:ab:a0:a6:99:d9: 60:36:09:97:31:8c:45:48:92:99:f9:24:ab:8f:98:e3:71:c2: 5a:f8:47:f3:b2:45:8d:20:6d:87:42:9e:df:73:0a:12:05:9d: 1c:83:d6:90:86:ec:3f:c9:a2:55:47:9f:94:47:74:21:12:ae: 19:21:85:bd:be:af:f0:86:2c:34:01:07:9b:f0:d7:cc:a2:bb: 90:6b:d3:65:b8:88:75:1b:8b:64:b5:b5:6e:68:39:b9:2d:6d: 30:c0:45:1a:a6:12:3b:59:0a:2e:e7:fd:6b:44:c7:65:e8:94: 52:5d:e3:83:cf:7f:39:5a:e3:b4:6b:84:36:e3:87:39:e1:e2: 14:96:92:02:32:03:e5:39:f9:83:0e:db:ae:22:39:f1:f8:b8: 08:47:27:8e:a4:3f:25:a3:f8:5b:4a:88:66:a2:dd:c9:42:bb: ce:43:ef:cd:1f:56:1b:45:e6:91:f8:5f:70:98:e3:de:9f:bf: 6f:36:17:15 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUMyhC8pxXMayh5W22RowGDPbfRS0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgyMDE1MzkxMVoX DTI0MDgxODE1NDQxMVowMzExMC8GA1UEAxMoM0U2RjMwNjQxODQ1NTY4M0RCQTBB Qzk1QjRGRDQxRTE4NDY0NzZBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzoe6n79Mi4bC/g30exr5jGSvvEUVKrjc4TYasupH+LlqzVD7Na0xsoUvnX cNeXOwQ+8m5gQxuwrM8ekan3L8GHK9bRaG0eItZeMO2hFXUbKj5yF9gAZbCgTYma 5PjZQ96FnZHdicvmn18OFYVSfMynrMLrkP7dmvnEHi6gNBl0uhYzsKzRt43gfl1v 8KsJuJP5WBhAIF6QJKsztNoTub8KEj0JCbX9dFfs83H9ThWZgTOckxJiCyNMB2bP AffivWoXap2H9cNq3/rMbAJwTTqln1lWF9JtzHmaHGzHnYW1ZSNVsw2o1+2HfRn3 7nOCRQlbBceJURXl5hgwNJBHZlMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD5vMGQYRVaD26CslbT9QeGEZHarMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82NGY3ZWI0Zi03OTI0LTRkYjYtYjZkNi0zOTRkODNiMzkyZmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0ZjdlYjRm LTc5MjQtNGRiNi1iNmQ2LTM5NGQ4M2IzOTJmYy8wLzNFNkYzMDY0MTg0NTU2ODNE QkEwQUM5NUI0RkQ0MUUxODQ2NDc2QUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BATKLpAwDQQCAAIwBwMFACQCgsAwDQYJKoZIhvcNAQELBQADggEBAByzFbXl7+8z fNO+mlqa9MtL6frBfBbdJPuyaN2UaWRKyioAVYUwPyQ27+DvSkAmfrb2D5M69Zzl uzGMM3lcS4ppQ4uroKaZ2WA2CZcxjEVIkpn5JKuPmONxwlr4R/OyRY0gbYdCnt9z ChIFnRyD1pCG7D/JolVHn5RHdCESrhkhhb2+r/CGLDQBB5vw18yiu5Br02W4iHUb i2S1tW5oObktbTDARRqmEjtZCi7n/WtEx2XolFJd44PPfzla47RrhDbjhznh4hSW kgIyA+U5+YMO264iOfH4uAhHJ46kPyWj+FtKiGai3clCu85D780fVhtF5pH4X3CY 496fv282FxU= -----END CERTIFICATE-----Generated at Wed May 8 09:50:28 2024 by rpki-client on console-fra.rpki-client.org