$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer File: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer (raw, json) Hash identifier: I+jUfuUnFrZfQsPrAinddO+mQiCFmFqQr5EgRhQCwVU= Subject key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 67F2AE6C9CC233D1791AA0D754D5FBDFA65DD8F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft caRepository: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 09 Sep 2024 13:53:35 +0000 Certificate not after: Mon 08 Sep 2025 13:58:35 +0000 Subordinate resources: IP: 103.28.80.0/22 IP: 202.1.236.0/24 IP: 218.100.74.0/24 IP: 2403:1a00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f2:ae:6c:9c:c2:33:d1:79:1a:a0:d7:54:d5:fb:df:a6:5d:d8:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 9 13:53:35 2024 GMT Not After : Sep 8 13:58:35 2025 GMT Subject: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4f:91:56:20:aa:83:f4:f4:9a:4b:59:2e:30: 8a:cd:99:16:a5:5f:65:a7:5b:c6:d4:54:fe:53:bd: 9a:50:c2:ae:f8:3f:8c:9c:18:f0:de:2a:eb:d8:e1: aa:cd:80:ac:4d:fa:d8:d4:39:0f:e3:64:bf:2c:38: ac:0c:34:c3:65:68:59:7d:9a:7b:58:c1:07:e1:21: 35:ca:3d:37:77:87:d3:8e:c2:f5:47:05:a1:06:c9: c6:d7:cf:26:e4:b8:5a:f7:c9:dc:b9:09:12:cc:75: dd:be:77:21:d1:af:e3:c0:ac:24:a6:a3:c2:10:04: c2:3f:1e:e0:b4:e8:37:aa:fb:67:db:77:1d:2e:88: 57:d0:9e:65:37:59:67:59:bf:aa:40:d2:2d:27:9c: a4:9e:a0:b2:44:72:7f:38:b5:6b:35:66:99:1b:38: ed:de:77:86:c9:6c:a7:29:4a:b1:45:85:36:39:7f: d9:a7:c5:41:e8:96:cb:4f:14:3f:7e:b3:6a:93:0d: 22:6d:1b:74:9f:57:2e:94:e6:af:28:1a:4d:13:41: bf:c8:c5:dd:d5:1b:63:c5:71:00:e1:b2:7f:e8:dc: 3e:2f:ce:a4:3d:d3:72:ab:d9:fe:0b:a7:08:60:09: a8:7e:cd:93:ed:2a:7e:0a:6e:07:17:c1:87:29:15: 77:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.28.80.0/22 202.1.236.0/24 218.100.74.0/24 IPv6: 2403:1a00::/32 Signature Algorithm: sha256WithRSAEncryption 5a:ac:c6:2c:d2:c3:01:8f:12:cf:f3:e6:4c:f9:37:49:ae:bd: e6:65:85:ff:27:e3:96:49:02:6d:e5:d0:d8:83:27:c5:32:d5: b6:60:40:56:a0:e8:f6:45:97:83:c9:11:c7:29:89:af:a1:2d: 13:8e:c5:dd:aa:82:ca:bf:b9:1f:d8:73:60:20:97:f8:5a:f6: f9:57:f0:54:52:e5:bd:d6:71:fd:90:8a:5b:96:a9:62:8d:dd: b0:13:75:f4:54:41:2b:f7:7a:bb:af:b6:5a:06:f9:b7:7d:2a: 95:3f:d9:c5:cc:e3:8b:b8:54:f7:d6:d0:55:d2:92:22:05:4e: 7a:52:ea:07:92:3c:5e:45:3e:6b:50:61:b3:16:ce:50:77:16: 13:0b:62:80:47:5d:d8:1a:62:ec:ea:70:1c:bb:0b:00:ed:c4: 9b:2f:10:c0:67:5f:86:77:11:37:98:d8:5a:0e:b5:cc:ab:24: 7b:36:0d:f2:6f:eb:2a:ab:ee:0f:8a:1b:25:87:ee:d4:c3:e5: e7:1d:dc:9b:69:81:e0:9d:06:76:94:58:24:42:ce:50:d3:7c: f0:3a:62:a6:04:10:08:11:ea:d8:7b:57:3c:18:2f:3e:1c:5a: f9:ea:2d:0a:57:29:16:c4:a4:89:be:75:a7:14:b6:58:78:74: d6:b6:5f:b1 -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUZ/KubJzCM9F5GqDXVNX736Zd2PMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkwOTEzNTMzNVoX DTI1MDkwODEzNTgzNVowMzExMC8GA1UEAxMoM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2 MzZFN0RFMDZGREQ2NDg5MkMyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJPkVYgqoP09JpLWS4wis2ZFqVfZadbxtRU/lO9mlDCrvg/jJwY8N4q69jh qs2ArE362NQ5D+Nkvyw4rAw0w2VoWX2ae1jBB+EhNco9N3eH047C9UcFoQbJxtfP JuS4WvfJ3LkJEsx13b53IdGv48CsJKajwhAEwj8e4LToN6r7Z9t3HS6IV9CeZTdZ Z1m/qkDSLSecpJ6gskRyfzi1azVmmRs47d53hslspylKsUWFNjl/2afFQeiWy08U P36zapMNIm0bdJ9XLpTmrygaTRNBv8jF3dUbY8VxAOGyf+jcPi/OpD3TcqvZ/gun CGAJqH7Nk+0qfgpuBxfBhykVd+MCAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD9um8Xxbxw6tf1jbn3gb91kiSwlMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80MWRiMzczMC1mNDk5LTQ0OWYtYjZmMi03YTVkZWI1MzJiMGMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQxZGIzNzMw LWY0OTktNDQ5Zi1iNmYyLTdhNWRlYjUzMmIwYy8wLzNGNkU5QkM1RjE2RjFDM0FC NUZENjM2RTdERTA2RkRENjQ4OTJDMjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BAJnHFADBADKAewDBADaZEowDQQCAAIwBwMFACQDGgAwDQYJKoZIhvcNAQELBQAD ggEBAFqsxizSwwGPEs/z5kz5N0muveZlhf8n45ZJAm3l0NiDJ8Uy1bZgQFag6PZF l4PJEccpia+hLROOxd2qgsq/uR/Yc2Agl/ha9vlX8FRS5b3Wcf2QiluWqWKN3bAT dfRUQSv3eruvtloG+bd9KpU/2cXM44u4VPfW0FXSkiIFTnpS6geSPF5FPmtQYbMW zlB3FhMLYoBHXdgaYuzqcBy7CwDtxJsvEMBnX4Z3ETeY2FoOtcyrJHs2DfJv6yqr 7g+KGyWH7tTD5ecd3JtpgeCdBnaUWCRCzlDTfPA6YqYEEAgR6th7VzwYLz4cWvnq LQpXKRbEpIm+dacUtlh4dNa2X7E= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:47 2024 by rpki-client on console-fra.rpki-client.org