$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer File: 3E6F306418455683DBA0AC95B4FD41E1846476AB.cer (raw, json) Hash identifier: 30IJ/mBSfKaN2qnUq2a6pJA+Jts0aoZlGtx40xjY6VM= Subject key identifier: 3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 23521FC43DA94CBC4B8DDCE9B8A6BC186F5B2A7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft caRepository: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 23 Jun 2025 15:21:45 +0000 Certificate not after: Mon 22 Jun 2026 15:26:45 +0000 Subordinate resources: IP: 202.46.144.0/20 IP: 2402:82c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:52:1f:c4:3d:a9:4c:bc:4b:8d:dc:e9:b8:a6:bc:18:6f:5b:2a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 23 15:21:45 2025 GMT Not After : Jun 22 15:26:45 2026 GMT Subject: CN=3E6F306418455683DBA0AC95B4FD41E1846476AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e8:7b:a9:fb:f4:c8:b8:6c:2f:e0:df:47:b1: af:98:c6:4a:fb:c4:51:52:ab:8d:ce:13:61:ab:2e: a4:7f:8b:96:ac:d5:0f:b3:5a:d3:1b:28:52:f9:d7: 70:d7:97:3b:04:3e:f2:6e:60:43:1b:b0:ac:cf:1e: 91:a9:f7:2f:c1:87:2b:d6:d1:68:6d:1e:22:d6:5e: 30:ed:a1:15:75:1b:2a:3e:72:17:d8:00:65:b0:a0: 4d:89:9a:e4:f8:d9:43:de:85:9d:91:dd:89:cb:e6: 9f:5f:0e:15:85:52:7c:cc:a7:ac:c2:eb:90:fe:dd: 9a:f9:c4:1e:2e:a0:34:19:74:ba:16:33:b0:ac:d1: b7:8d:e0:7e:5d:6f:f0:ab:09:b8:93:f9:58:18:40: 20:5e:90:24:ab:33:b4:da:13:b9:bf:0a:12:3d:09: 09:b5:fd:74:57:ec:f3:71:fd:4e:15:99:81:33:9c: 93:12:62:0b:23:4c:07:66:cf:01:f7:e2:bd:6a:17: 6a:9d:87:f5:c3:6a:df:fa:cc:6c:02:70:4d:3a:a5: 9f:59:56:17:d2:6d:cc:79:9a:1c:6c:c7:9d:85:b5: 65:23:55:b3:0d:a8:d7:ed:87:7d:19:f7:ee:73:82: 45:09:5b:05:c7:89:51:15:e5:e6:18:30:34:90:47: 66:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.46.144.0/20 IPv6: 2402:82c0::/32 Signature Algorithm: sha256WithRSAEncryption 0a:d8:54:05:69:2d:bc:9b:62:d6:15:ea:90:07:56:3d:fb:4a: 20:fa:f6:d0:af:59:0d:ed:25:b5:26:e0:b6:ee:1a:3a:25:7f: bd:fe:8f:48:6d:af:37:c2:96:27:34:88:0c:a5:43:55:a3:73: 0c:ae:f1:16:ca:67:b3:45:7b:fe:fe:08:28:d7:92:73:9d:19: a6:1d:ec:a3:2f:9f:2d:62:bf:bd:18:88:01:92:76:c3:39:1a: 00:5c:bd:7f:1c:d2:58:ba:3c:6b:89:49:11:b1:73:3d:d6:b2: d8:cb:ec:6e:4d:a5:f4:23:ba:a4:0d:08:ea:e2:ab:a8:70:82: 86:fb:a2:f5:53:54:8b:05:56:4b:bb:b6:b5:1b:87:6c:04:7f: d8:e0:5e:91:6b:3a:e2:70:aa:62:22:2e:49:1f:63:e9:4f:43: 00:4f:b3:f1:d8:cb:e9:d0:c5:93:a8:20:eb:47:59:75:53:56: 03:da:77:3d:43:01:64:49:f7:7e:75:1d:83:24:64:b7:db:25: 53:8b:f4:2f:b6:c6:45:50:cf:9c:c3:13:11:2c:d8:23:40:d9: 6f:72:58:bc:80:35:8b:f5:28:1f:d1:a9:ac:ad:97:d4:90:e9: fa:f8:62:c5:bb:44:ee:7d:6d:15:32:32:a0:48:1d:b5:7a:b9: 4f:d2:4d:ad -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUI1IfxD2pTLxLjdzpuKa8GG9bKn8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYyMzE1MjE0NVoX DTI2MDYyMjE1MjY0NVowMzExMC8GA1UEAxMoM0U2RjMwNjQxODQ1NTY4M0RCQTBB Qzk1QjRGRDQxRTE4NDY0NzZBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzoe6n79Mi4bC/g30exr5jGSvvEUVKrjc4TYasupH+LlqzVD7Na0xsoUvnX cNeXOwQ+8m5gQxuwrM8ekan3L8GHK9bRaG0eItZeMO2hFXUbKj5yF9gAZbCgTYma 5PjZQ96FnZHdicvmn18OFYVSfMynrMLrkP7dmvnEHi6gNBl0uhYzsKzRt43gfl1v 8KsJuJP5WBhAIF6QJKsztNoTub8KEj0JCbX9dFfs83H9ThWZgTOckxJiCyNMB2bP AffivWoXap2H9cNq3/rMbAJwTTqln1lWF9JtzHmaHGzHnYW1ZSNVsw2o1+2HfRn3 7nOCRQlbBceJURXl5hgwNJBHZlMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD5vMGQYRVaD26CslbT9QeGEZHarMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82NGY3ZWI0Zi03OTI0LTRkYjYtYjZkNi0zOTRkODNiMzkyZmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0ZjdlYjRm LTc5MjQtNGRiNi1iNmQ2LTM5NGQ4M2IzOTJmYy8wLzNFNkYzMDY0MTg0NTU2ODNE QkEwQUM5NUI0RkQ0MUUxODQ2NDc2QUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BATKLpAwDQQCAAIwBwMFACQCgsAwDQYJKoZIhvcNAQELBQADggEBAArYVAVpLbyb YtYV6pAHVj37SiD69tCvWQ3tJbUm4LbuGjolf73+j0htrzfClic0iAylQ1Wjcwyu 8RbKZ7NFe/7+CCjXknOdGaYd7KMvny1iv70YiAGSdsM5GgBcvX8c0li6PGuJSRGx cz3WstjL7G5NpfQjuqQNCOriq6hwgob7ovVTVIsFVku7trUbh2wEf9jgXpFrOuJw qmIiLkkfY+lPQwBPs/HYy+nQxZOoIOtHWXVTVgPadz1DAWRJ9351HYMkZLfbJVOL 9C+2xkVQz5zDExEs2CNA2W9yWLyANYv1KB/Rqaytl9SQ6fr4YsW7RO59bRUyMqBI HbV6uU/STa0= -----END CERTIFICATE-----Generated at Sun Jun 29 13:43:33 2025 by rpki-client