$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer File: 3FFB3838E6BD431731306308CFEC299A86723365.cer (raw, json) Hash identifier: WgRA3H9tlmXHQbZoEcNYDg1Kvk2vRsb8RgjErXLi88w= Subject key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 69225C507986F808199A1719E09888412E9AF6E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft caRepository: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 12:27:17 +0000 Certificate not after: Wed 04 Feb 2026 12:32:17 +0000 Subordinate resources: IP: 103.96.144.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:22:5c:50:79:86:f8:08:19:9a:17:19:e0:98:88:41:2e:9a:f6:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 5 12:27:17 2025 GMT Not After : Feb 4 12:32:17 2026 GMT Subject: CN=3FFB3838E6BD431731306308CFEC299A86723365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:43:8e:39:f0:9c:56:0c:31:ff:4e:15:59:d9: 95:7d:63:e0:7d:ce:4a:bc:8b:eb:b8:00:a2:9d:72: 19:20:62:18:dd:bc:30:15:52:37:62:05:12:bd:48: 25:cb:43:19:48:0c:e6:8a:95:44:52:b3:69:15:b9: 7a:2d:01:6f:87:21:f0:19:84:53:fd:03:61:03:31: 15:8f:d7:ee:9a:aa:2f:3c:29:ea:40:95:a8:56:4f: fe:d0:d1:58:81:68:a1:a1:85:99:1e:59:b8:ef:75: 41:65:1f:77:d8:44:66:c5:4b:77:67:c9:ec:17:92: f8:2a:b2:b9:cd:1a:46:f1:7d:f6:55:ba:c7:fb:14: 16:31:2f:01:3e:15:c8:5c:da:cc:49:b4:cb:56:2c: 59:17:6c:25:72:06:b2:97:fe:1d:33:02:1b:a9:7a: ec:d7:2c:c1:21:3c:31:52:3f:cd:d5:28:01:25:f7: a8:c8:60:2d:f9:08:3b:df:15:86:fa:40:6d:3b:d1: 9c:f9:dd:29:e8:2e:7c:f0:1e:1d:79:4d:38:a6:10: c1:c3:e0:5d:d0:76:ec:eb:d9:00:24:ca:1e:39:0c: 88:78:64:02:83:1a:67:3c:ce:52:19:4c:56:7e:65: b6:95:2c:4f:c5:4d:a4:51:f6:f1:49:21:08:87:04: c6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.144.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:85:d7:e6:b0:2d:6c:73:07:6e:74:52:ee:9b:91:05:11:ed: 0f:74:d3:97:12:22:76:6e:cc:31:9a:7f:ee:06:9d:15:86:ea: 47:b6:5e:cc:f7:19:6f:de:e1:a0:a4:fe:bc:06:02:f8:b9:e5: bc:20:22:93:03:65:97:8a:8f:ca:4b:fe:e6:8c:d7:f3:2c:41: 4c:3b:42:3c:c0:64:54:2e:1b:72:a4:fe:1a:5b:da:8f:f9:e2: 23:ba:41:0e:ce:d0:08:7a:17:6d:12:2f:35:59:76:99:d1:3b: dd:bf:3d:a6:d6:26:b2:5e:9a:f3:00:f7:39:b4:3a:78:86:c3: a5:63:80:e8:0a:ab:d1:45:bf:63:92:40:95:37:1f:ee:5f:c4: 3c:3e:15:eb:05:f8:eb:7f:20:0e:cd:6a:2d:12:77:d2:22:8c: 0b:ac:20:a3:08:65:48:c0:b0:08:a8:2c:e4:fc:4c:fa:3a:1e: 18:36:9d:4b:e6:a5:d0:f2:17:2c:2d:00:e1:0b:7f:70:17:a5: d0:61:9d:62:84:9d:0d:02:a1:f4:16:ba:68:68:93:3e:5c:3d: 0e:db:22:be:2f:e2:28:0a:6a:78:6a:d0:48:be:c0:86:3e:5e: 9c:51:28:86:77:78:10:25:ac:92:41:55:59:90:a8:62:f1:3a: 04:6e:dc:ab -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUaSJcUHmG+AgZmhcZ4JiIQS6a9uYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIwNTEyMjcxN1oX DTI2MDIwNDEyMzIxN1owMzExMC8GA1UEAxMoM0ZGQjM4MzhFNkJENDMxNzMxMzA2 MzA4Q0ZFQzI5OUE4NjcyMzM2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO5DjjnwnFYMMf9OFVnZlX1j4H3OSryL67gAop1yGSBiGN28MBVSN2IFEr1I JctDGUgM5oqVRFKzaRW5ei0Bb4ch8BmEU/0DYQMxFY/X7pqqLzwp6kCVqFZP/tDR WIFooaGFmR5ZuO91QWUfd9hEZsVLd2fJ7BeS+Cqyuc0aRvF99lW6x/sUFjEvAT4V yFzazEm0y1YsWRdsJXIGspf+HTMCG6l67NcswSE8MVI/zdUoASX3qMhgLfkIO98V hvpAbTvRnPndKegufPAeHXlNOKYQwcPgXdB27OvZACTKHjkMiHhkAoMaZzzOUhlM Vn5ltpUsT8VNpFH28UkhCIcExrkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD/7ODjmvUMXMTBjCM/sKZqGcjNlMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hODI2MWMzNy01OWE1LTQzNjktOTFlNS00YjEzNjYwMTBjNmQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4MjYxYzM3 LTU5YTUtNDM2OS05MWU1LTRiMTM2NjAxMGM2ZC8wLzNGRkIzODM4RTZCRDQzMTcz MTMwNjMwOENGRUMyOTlBODY3MjMzNjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnYJAwDQYJKoZIhvcNAQELBQADggEBAA2F1+awLWxzB250Uu6bkQUR7Q9005cS InZuzDGaf+4GnRWG6ke2Xsz3GW/e4aCk/rwGAvi55bwgIpMDZZeKj8pL/uaM1/Ms QUw7QjzAZFQuG3Kk/hpb2o/54iO6QQ7O0Ah6F20SLzVZdpnRO92/PabWJrJemvMA 9zm0OniGw6VjgOgKq9FFv2OSQJU3H+5fxDw+FesF+Ot/IA7Nai0Sd9IijAusIKMI ZUjAsAioLOT8TPo6Hhg2nUvmpdDyFywtAOELf3AXpdBhnWKEnQ0CofQWumhokz5c PQ7bIr4v4igKanhq0Ei+wIY+XpxRKIZ3eBAlrJJBVVmQqGLxOgRu3Ks= -----END CERTIFICATE-----Generated at Sun Feb 16 20:57:24 2025 by rpki-client