$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer File: 3E0D060F214DF8E6493243033EBD30ABD627ED36.cer (raw, json) Hash identifier: hG/4wtFIrGNUWQocsCmWBet5CnmDSpbxDM93ZSe+uAM= Subject key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6B60E243462843503069DF64F7B21FCC74E74466 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft caRepository: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 08 May 2025 23:56:04 +0000 Certificate not after: Fri 08 May 2026 00:01:04 +0000 Subordinate resources: IP: 103.66.44.0/22 IP: 2001:df2:b200::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 23:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:60:e2:43:46:28:43:50:30:69:df:64:f7:b2:1f:cc:74:e7:44:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 8 23:56:04 2025 GMT Not After : May 8 00:01:04 2026 GMT Subject: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:63:34:6c:5c:11:2c:ea:44:ca:92:f7:cc:37: a4:97:df:0b:b7:5a:5d:ae:4b:0f:fd:ad:80:a3:46: 10:a9:32:b5:2f:02:1b:c3:52:59:b1:88:20:39:2f: 3a:ae:85:c3:0a:7d:9a:bd:2e:a0:18:9f:92:33:bc: 7d:7b:b7:02:1a:88:87:70:11:9c:a4:ee:c8:86:52: ef:f2:89:9a:41:93:3c:09:5d:9e:f7:bb:fa:24:a2: 22:a8:82:0b:bc:27:67:d3:ee:11:04:b3:34:6a:09: 92:74:ac:b9:bb:19:9a:18:8e:e8:85:08:54:48:e9: 3e:5c:0d:73:f1:5f:89:b2:c6:03:ce:0c:49:81:04: c9:04:3e:1c:c0:5c:9d:6f:6f:c3:b4:c2:0b:1e:76: 15:df:a8:1f:6a:ac:fc:cb:6c:60:3b:f4:fc:cc:fa: a0:08:c4:13:43:b8:8a:f5:e2:e0:6c:99:f5:ad:5e: 9e:d8:4b:32:cc:64:1d:2d:41:9c:3f:7a:5b:6f:c9: 0e:35:9e:60:77:c9:31:8f:9c:4e:98:63:3f:09:3c: af:03:44:b2:27:ed:dc:5c:8b:da:62:4e:e5:c1:82: 62:51:19:71:1d:4d:bc:f2:c6:dc:5d:ad:2e:82:7d: b1:5d:e5:87:a6:76:74:2e:c4:31:93:09:75:e5:5d: 42:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.66.44.0/22 IPv6: 2001:df2:b200::/48 Signature Algorithm: sha256WithRSAEncryption 7a:c6:ce:b9:f4:8b:8d:24:99:b4:ed:e5:49:16:93:12:0d:f2: 47:5b:b7:d5:ca:c4:73:d9:26:cf:a3:7e:f6:d5:7f:17:60:c8: c4:9f:18:f1:2e:fd:17:cd:ff:61:f9:f8:c7:ce:cf:5a:d4:ff: 32:0c:93:c8:e3:d0:89:2c:b6:3b:d9:7f:bc:99:c4:97:e0:7e: ab:00:c6:ce:84:1f:1e:9e:22:95:f0:9b:7b:b9:c1:2a:de:96: 5f:13:bd:fa:5b:b4:35:c0:68:5f:5a:95:0a:41:e8:f2:3f:10: 2b:34:51:5e:e8:ac:ac:0e:40:f4:03:9f:9c:a0:f9:19:7b:2a: f9:c2:48:00:cd:f0:8c:22:c5:fc:e1:09:7e:39:27:00:81:db: a4:7b:4a:01:cd:e6:81:c4:ff:3b:29:08:e9:78:48:06:09:b3: 56:05:7c:32:14:dc:a9:72:65:ab:13:b3:78:c4:a4:cf:cb:a2: 02:38:1f:ef:42:9e:19:1c:41:c5:69:18:49:b7:07:23:c1:35: 33:88:4d:07:0a:5b:42:7c:a8:76:b6:71:4c:1e:4a:ca:1b:9a: 4b:2c:5b:f2:15:38:b2:80:ba:1a:08:0f:2e:9c:53:46:e6:84: 15:f2:fb:1c:a8:4e:cb:b4:d2:83:09:20:85:88:65:b2:d1:a6: e7:00:ec:90 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUa2DiQ0YoQ1Awad9k97IfzHTnRGYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUwODIzNTYwNFoX DTI2MDUwODAwMDEwNFowMzExMC8GA1UEAxMoM0UwRDA2MEYyMTRERjhFNjQ5MzI0 MzAzM0VCRDMwQUJENjI3RUQzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOdjNGxcESzqRMqS98w3pJffC7daXa5LD/2tgKNGEKkytS8CG8NSWbGIIDkv Oq6Fwwp9mr0uoBifkjO8fXu3AhqIh3ARnKTuyIZS7/KJmkGTPAldnve7+iSiIqiC C7wnZ9PuEQSzNGoJknSsubsZmhiO6IUIVEjpPlwNc/FfibLGA84MSYEEyQQ+HMBc nW9vw7TCCx52Fd+oH2qs/MtsYDv0/Mz6oAjEE0O4ivXi4GyZ9a1enthLMsxkHS1B nD96W2/JDjWeYHfJMY+cTphjPwk8rwNEsift3FyL2mJO5cGCYlEZcR1NvPLG3F2t LoJ9sV3lh6Z2dC7EMZMJdeVdQuMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD4NBg8hTfjmSTJDAz69MKvWJ+02MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84YjRmODUxMS0wN2IzLTRhNjEtYmQwNC0yZTY2NWM5Mjc4ZmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhiNGY4NTEx LTA3YjMtNGE2MS1iZDA0LTJlNjY1YzkyNzhmYy8wLzNFMEQwNjBGMjE0REY4RTY0 OTMyNDMwMzNFQkQzMEFCRDYyN0VEMzYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJnQiwwDwQCAAIwCQMHACABDfKyADANBgkqhkiG9w0BAQsFAAOCAQEAesbOufSL jSSZtO3lSRaTEg3yR1u31crEc9kmz6N+9tV/F2DIxJ8Y8S79F83/Yfn4x87PWtT/ MgyTyOPQiSy2O9l/vJnEl+B+qwDGzoQfHp4ilfCbe7nBKt6WXxO9+lu0NcBoX1qV CkHo8j8QKzRRXuisrA5A9AOfnKD5GXsq+cJIAM3wjCLF/OEJfjknAIHbpHtKAc3m gcT/OykI6XhIBgmzVgV8MhTcqXJlqxOzeMSkz8uiAjgf70KeGRxBxWkYSbcHI8E1 M4hNBwpbQnyodrZxTB5KyhuaSyxb8hU4soC6GggPLpxTRuaEFfL7HKhOy7TSgwkg hYhlstGm5wDskA== -----END CERTIFICATE-----Generated at Wed May 14 01:22:24 2025 by rpki-client