$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer File: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer (raw, json) Hash identifier: RhnSWmLueLw5y/MOqpjtOaiBOBL+IBH66wrOXstRd0Q= Subject key identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 78C6EF4E3D083AFD69D3A1DA5389E2D846F9F637 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft caRepository: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 06:27:44 +0000 Certificate not after: Wed 04 Feb 2026 06:32:44 +0000 Subordinate resources: IP: 210.79.142.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:c6:ef:4e:3d:08:3a:fd:69:d3:a1:da:53:89:e2:d8:46:f9:f6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 5 06:27:44 2025 GMT Not After : Feb 4 06:32:44 2026 GMT Subject: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:06:39:06:87:dc:2e:e8:de:c3:cb:6e:b4: b3:c6:62:fb:2d:6a:9c:cb:62:04:72:e8:78:b7:5f: 1c:f1:44:27:90:5a:fd:a3:7a:c3:ec:04:9f:33:ef: 69:5e:3d:05:70:63:76:99:da:41:3e:e4:0c:6a:9d: 63:de:aa:4f:8c:dd:75:07:61:9f:78:f0:7c:47:10: 75:d0:47:90:56:f1:76:49:91:dc:68:65:59:01:eb: ba:37:fd:2f:bd:82:d1:01:16:01:54:71:38:b1:28: 8b:27:eb:9c:37:48:7d:30:11:0d:80:18:6a:11:c2: de:cf:92:db:56:d5:24:5c:02:2f:d2:47:42:4e:2a: 95:28:05:4c:ae:4a:ed:c8:d7:0b:aa:de:94:8c:9b: f9:3c:6a:db:fa:5a:ea:01:13:84:44:d8:35:19:f9: 5e:b0:ef:ae:79:f0:60:31:7b:de:cc:4e:46:44:78: 3b:40:0e:62:0c:04:32:18:e5:88:2b:d0:07:52:98: 2c:8a:81:1e:36:0d:40:ca:a1:c6:15:1d:5a:70:aa: 15:8a:63:b9:07:bd:6a:6a:05:b9:75:a1:51:27:0f: 5d:35:01:a5:b6:b2:64:1d:fc:4e:d7:3d:65:35:68: 06:d0:53:af:7c:e2:a3:9c:e5:a6:f7:b4:b0:3c:34: 57:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.79.142.0/23 Signature Algorithm: sha256WithRSAEncryption 34:fd:7d:f2:b3:9a:2a:da:6a:04:12:24:30:da:00:9b:ec:46: b1:dd:24:1b:3c:2a:29:8b:2d:27:12:bc:e3:54:b6:16:fd:c5: 2d:f2:43:22:c4:45:90:d8:ed:92:12:40:01:e8:a8:c1:85:a2: 9f:eb:d3:16:98:dd:af:b5:2c:93:76:e4:d9:a5:ab:ee:8f:b4: ce:1f:4b:04:74:6f:24:62:22:74:64:30:96:b6:30:85:e1:16: 05:0f:28:2d:e0:0d:ce:16:57:5a:9a:89:42:e4:bb:47:2c:e3: 4f:e8:e5:ed:f0:1f:f4:9e:46:1f:2b:39:1c:7d:d8:55:d5:ab: ce:52:bc:86:c3:dd:a4:73:ea:44:b9:1e:db:ab:0a:6d:d3:25: 1c:c2:25:56:17:09:88:47:d8:6d:85:92:a9:64:88:98:d8:c1: 5c:85:d0:33:ec:4e:1b:62:c3:72:3c:48:ec:4d:66:85:4f:e4: 72:2c:de:0f:11:66:99:ee:71:69:7f:ac:64:0e:1f:30:00:19: 53:6d:4e:d2:f3:18:76:33:d3:8b:52:22:53:fe:dc:85:65:2c: 64:50:53:26:b9:87:8b:04:8d:39:ce:f9:5f:75:8a:5c:26:02: d4:30:d7:a8:c5:e8:f5:ef:bb:2f:45:6c:c1:c1:c6:eb:c3:4c: 1a:c4:95:e7 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUeMbvTj0IOv1p06HaU4ni2Eb59jcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIwNTA2Mjc0NFoX DTI2MDIwNDA2MzI0NFowMzExMC8GA1UEAxMoQzMzNTlCRUJGMEMxNUM5RDQ3MzlD RTg4QkZCMjE0MkQxNUE5OTMxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcOBjkGh9wu6N7Dy260s8Zi+y1qnMtiBHLoeLdfHPFEJ5Ba/aN6w+wEnzPv aV49BXBjdpnaQT7kDGqdY96qT4zddQdhn3jwfEcQddBHkFbxdkmR3GhlWQHrujf9 L72C0QEWAVRxOLEoiyfrnDdIfTARDYAYahHC3s+S21bVJFwCL9JHQk4qlSgFTK5K 7cjXC6relIyb+Txq2/pa6gEThETYNRn5XrDvrnnwYDF73sxORkR4O0AOYgwEMhjl iCvQB1KYLIqBHjYNQMqhxhUdWnCqFYpjuQe9amoFuXWhUScPXTUBpbayZB38Ttc9 ZTVoBtBTr3zio5zlpve0sDw0VxECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMM1m+vwwVydRznOiL+yFC0VqZMTMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81NDM4ZjZhYS1mMjdkLTQ5MDYtOTUxZS1mMDJkODkxYmYxZWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU0MzhmNmFh LWYyN2QtNDkwNi05NTFlLWYwMmQ4OTFiZjFlZC8wL0MzMzU5QkVCRjBDMTVDOUQ0 NzM5Q0U4OEJGQjIxNDJEMTVBOTkzMTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHST44wDQYJKoZIhvcNAQELBQADggEBADT9ffKzmiraagQSJDDaAJvsRrHdJBs8 KimLLScSvONUthb9xS3yQyLERZDY7ZISQAHoqMGFop/r0xaY3a+1LJN25Nmlq+6P tM4fSwR0byRiInRkMJa2MIXhFgUPKC3gDc4WV1qaiULku0cs40/o5e3wH/SeRh8r ORx92FXVq85SvIbD3aRz6kS5HturCm3TJRzCJVYXCYhH2G2FkqlkiJjYwVyF0DPs Thtiw3I8SOxNZoVP5HIs3g8RZpnucWl/rGQOHzAAGVNtTtLzGHYz04tSIlP+3IVl LGRQUya5h4sEjTnO+V91ilwmAtQw16jF6PXvuy9FbMHBxuvDTBrElec= -----END CERTIFICATE-----Generated at Sat Apr 5 10:39:27 2025 by rpki-client