$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer File: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer (raw, json) Hash identifier: qHSJ5JetUAxIGKwV7E1Ad7/JyOyqvUiB6Zcv50zdHu4= Subject key identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4111C62E2E9F629177142434A90E06825533D913 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft caRepository: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 24 Jan 2024 05:30:59 +0000 Certificate not after: Wed 22 Jan 2025 05:35:59 +0000 Subordinate resources: IP: 121.50.128.0/20 IP: 202.50.200.0/22 IP: 203.190.184.0/21 IP: 2400:c900::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:11:c6:2e:2e:9f:62:91:77:14:24:34:a9:0e:06:82:55:33:d9:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 24 05:30:59 2024 GMT Not After : Jan 22 05:35:59 2025 GMT Subject: CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3c:ac:84:81:b0:86:c4:c1:84:b7:9e:30:b4: 5a:4c:b2:64:8d:a3:fc:40:19:da:89:d5:e0:a6:44: 23:84:86:0d:29:e5:94:81:ca:99:d0:79:93:04:de: ed:5c:21:9c:16:ea:b7:2a:be:b8:31:4f:0e:05:82: 12:8e:e7:15:e4:06:b4:3c:85:5a:96:f2:b6:a6:70: 66:f3:d5:e1:6b:c4:42:4c:65:9d:8d:53:52:9f:fb: 05:f5:43:21:de:bb:ae:17:86:b4:25:2f:6d:6d:64: 71:32:a1:09:b4:e0:8a:09:c5:d3:fa:ed:92:57:7f: 62:70:31:ef:7e:04:07:93:04:01:1e:be:a8:69:24: 88:1c:c5:c7:30:5b:23:39:e9:89:f3:25:59:86:f9: f9:4a:06:c2:ac:6f:25:03:e7:a8:a1:5e:88:f2:0c: 2e:d1:f6:6a:d0:8c:a3:fc:d6:72:f2:78:95:f6:f2: 32:5e:4c:3b:35:44:e5:62:0f:e3:2b:0e:33:7b:6c: f9:1b:3f:14:e6:99:55:26:26:73:b1:1f:5d:e7:51: 16:ec:ae:92:3e:f4:2e:b2:02:fc:b1:bf:83:b3:5b: 5a:84:55:d3:59:48:05:bc:75:dd:f7:68:dc:80:f3: a4:b1:9e:86:75:a5:b0:73:4d:16:46:19:11:2f:d8: 8b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.50.128.0/20 202.50.200.0/22 203.190.184.0/21 IPv6: 2400:c900::/32 Signature Algorithm: sha256WithRSAEncryption 70:e2:e3:f4:39:3d:8d:28:e8:e2:3c:e3:f7:4e:aa:e3:77:2e: c7:3c:f5:8e:65:63:2f:1e:7c:3f:32:ba:bd:5a:16:f0:33:67: ff:5f:0a:87:21:8d:6f:45:18:ec:8f:04:d1:14:b0:98:81:49: d7:7f:5e:c7:6c:4d:8b:c6:6a:d6:a4:15:f3:df:25:5f:42:ea: b8:13:40:bd:83:81:73:f7:26:9e:e8:a4:2e:4f:f9:23:ac:77: 2b:75:3d:cd:0c:95:fa:dd:48:2b:b6:10:81:f8:5b:f2:6f:1a: d7:45:4c:e0:fd:89:90:85:6d:7a:8d:1b:23:c3:fd:1f:2b:af: b5:52:ca:5a:f3:cb:80:e4:9b:48:99:d5:d9:3f:31:b9:16:1f: 2e:67:e5:27:dc:33:0e:dc:fe:23:ef:47:de:fe:75:79:05:6f: 7d:db:40:c3:50:ef:c8:e8:5c:0e:bd:12:67:3b:a1:ca:38:cd: 6e:86:e2:ea:99:f2:8a:8e:87:55:ef:38:9b:bc:14:7f:99:db: 8f:e0:dd:60:e5:25:b8:3b:18:5b:0c:14:9a:da:04:10:33:c7: 2e:e3:54:90:97:45:16:4c:0e:0f:cd:dc:a6:39:88:73:ec:d6: 61:cd:cc:dc:6e:0e:ad:d3:e8:d5:41:b1:ad:9a:43:17:2c:b0: 14:5c:a1:dc -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUQRHGLi6fYpF3FCQ0qQ4GglUz2RMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEyNDA1MzA1OVoX DTI1MDEyMjA1MzU1OVowMzExMC8GA1UEAxMoQjNGMURBQTY3NzA5QTA2NTYxREM5 RUFDNUE4NzIxMDM1RUVBQUI1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ08rISBsIbEwYS3njC0WkyyZI2j/EAZ2onV4KZEI4SGDSnllIHKmdB5kwTe 7VwhnBbqtyq+uDFPDgWCEo7nFeQGtDyFWpbytqZwZvPV4WvEQkxlnY1TUp/7BfVD Id67rheGtCUvbW1kcTKhCbTgignF0/rtkld/YnAx734EB5MEAR6+qGkkiBzFxzBb IznpifMlWYb5+UoGwqxvJQPnqKFeiPIMLtH2atCMo/zWcvJ4lfbyMl5MOzVE5WIP 4ysOM3ts+Rs/FOaZVSYmc7EfXedRFuyukj70LrIC/LG/g7NbWoRV01lIBbx13fdo 3IDzpLGehnWlsHNNFkYZES/Yi00CAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLPx2qZ3CaBlYdyerFqHIQNe6qtbMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81Mjg4MGRlZS03YWEyLTRiZTQtYmYzNS1jZGJkMTFkNzk1MDcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyODgwZGVl LTdhYTItNGJlNC1iZjM1LWNkYmQxMWQ3OTUwNy8wL0IzRjFEQUE2NzcwOUEwNjU2 MURDOUVBQzVBODcyMTAzNUVFQUFCNUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BAR5MoADBALKMsgDBAPLvrgwDQQCAAIwBwMFACQAyQAwDQYJKoZIhvcNAQELBQAD ggEBAHDi4/Q5PY0o6OI84/dOquN3Lsc89Y5lYy8efD8yur1aFvAzZ/9fCochjW9F GOyPBNEUsJiBSdd/XsdsTYvGatakFfPfJV9C6rgTQL2DgXP3Jp7opC5P+SOsdyt1 Pc0MlfrdSCu2EIH4W/JvGtdFTOD9iZCFbXqNGyPD/R8rr7VSylrzy4Dkm0iZ1dk/ MbkWHy5n5SfcMw7c/iPvR97+dXkFb33bQMNQ78joXA69Emc7oco4zW6G4uqZ8oqO h1XvOJu8FH+Z24/g3WDlJbg7GFsMFJraBBAzxy7jVJCXRRZMDg/N3KY5iHPs1mHN zNxuDq3T6NVBsa2aQxcssBRcodw= -----END CERTIFICATE-----Generated at Wed May 8 18:12:19 2024 by rpki-client on console-fra.rpki-client.org