$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer File: 0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer (raw, json) Hash identifier: kLX1DmsOmT31/QoH+ITzCYauCncJr5RNGQHfJYKvCkI= Subject key identifier: 03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 46A0219E72112ACBB51FC218CCF7DEDBA91C2211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.mft caRepository: rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 00:24:50 +0000 Certificate not after: Mon 29 Jul 2024 00:29:50 +0000 Subordinate resources: IP: 103.90.24.0/22 IP: 103.232.240.0/24 IP: 103.232.242.0/23 IP: 103.250.199.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 06:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a0:21:9e:72:11:2a:cb:b5:1f:c2:18:cc:f7:de:db:a9:1c:22:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 00:24:50 2023 GMT Not After : Jul 29 00:29:50 2024 GMT Subject: CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:76:a5:5f:60:f4:d7:6f:ec:58:aa:78:41:44: 33:9b:0f:06:ad:55:87:0c:8d:35:5e:a4:f3:64:ec: d7:77:cf:22:b3:42:f4:46:b7:d2:b4:a4:2d:6d:07: 1e:de:3b:c0:33:1a:e8:37:cf:5b:e4:f3:1b:b5:a7: 47:0e:42:44:8c:f2:07:fb:fe:5c:56:f0:ac:ed:c1: 5c:ba:eb:76:5d:3f:d6:0f:5e:db:2e:c7:04:5a:4c: 6a:a1:6d:8a:d2:94:9c:2e:30:52:07:5e:eb:3d:6f: 99:3e:1e:ec:94:34:84:e2:4e:b2:8b:55:c4:9b:22: 9c:3f:e7:e4:94:62:2a:d6:b6:46:af:47:cf:2e:86: be:5c:e8:c1:41:8e:da:26:6d:b2:7d:58:c2:54:85: 2a:06:04:62:4b:a2:f3:3b:a6:65:8e:c8:60:03:f0: b7:27:97:fc:5c:1d:3d:4c:9e:f5:fc:df:a7:8d:ac: f4:45:f4:d3:98:f1:47:7d:25:2e:87:59:27:d4:1c: 10:51:b3:8a:db:67:5a:cd:95:aa:70:76:70:28:bb: bc:d3:11:43:92:6b:81:d0:83:a0:2b:b1:db:d3:a5: a5:84:95:af:0c:2e:33:cd:04:d5:df:59:8e:80:da: 34:b0:56:c4:e9:5f:ab:8d:d9:28:e0:45:3e:73:a7: d1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.90.24.0/22 103.232.240.0/24 103.232.242.0/23 103.250.199.0/24 Signature Algorithm: sha256WithRSAEncryption 85:aa:88:a9:96:e4:24:67:57:88:5b:84:ec:ea:90:54:b5:ce: 8f:00:f3:ac:b9:d2:23:1c:cc:34:e7:cf:56:6e:b0:a7:f4:f4: 5a:3b:72:29:9d:b0:85:ce:4e:f4:c7:54:5b:5e:5d:5c:2b:5a: 37:6f:0b:53:e6:67:3e:19:1c:60:da:8a:ab:0a:03:69:e0:4c: fa:11:fd:28:f9:39:90:b3:c0:41:cb:f7:65:18:a9:5b:b9:15: cf:ed:3f:7a:cb:56:d8:45:c8:41:ce:45:1b:84:79:2d:83:79: 43:7b:a5:e9:fd:a9:26:81:54:f1:68:c5:47:7a:39:54:3f:5e: c9:50:ea:9a:dc:92:0f:95:9d:38:c3:bf:ae:b4:3e:15:f4:d2: fc:1e:0a:ac:43:c5:b0:58:58:4c:b7:75:8e:ec:93:f0:25:ac: 93:3d:45:76:26:10:65:c1:a9:5e:8f:01:ec:80:fd:2a:b3:29: ce:dd:14:b2:7d:2f:53:2f:2e:0b:75:3c:dc:41:f2:fc:50:ba: 3a:05:8e:5c:32:6c:85:36:8e:e7:1c:47:2c:a5:9f:16:02:81: 71:65:5e:6d:d5:e3:07:91:16:7b:37:13:61:86:72:7d:93:e4: c8:10:ba:c8:52:27:26:3e:fb:b0:1c:85:cb:a3:75:e5:7d:76: 97:1a:ba:bf -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIURqAhnnIRKsu1H8IYzPfe26kcIhEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTAwMjQ1MFoX DTI0MDcyOTAwMjk1MFowMzExMC8GA1UEAxMoMDMyMTk4NEY5ODIzMEE0Rjk0NjY3 RTgyQzBBM0RFQjExNTFDNUVEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALd2pV9g9Ndv7FiqeEFEM5sPBq1VhwyNNV6k82Ts13fPIrNC9Ea30rSkLW0H Ht47wDMa6DfPW+TzG7WnRw5CRIzyB/v+XFbwrO3BXLrrdl0/1g9e2y7HBFpMaqFt itKUnC4wUgde6z1vmT4e7JQ0hOJOsotVxJsinD/n5JRiKta2Rq9Hzy6GvlzowUGO 2iZtsn1YwlSFKgYEYkui8zumZY7IYAPwtyeX/FwdPUye9fzfp42s9EX005jxR30l LodZJ9QcEFGzittnWs2VqnB2cCi7vNMRQ5JrgdCDoCux29OlpYSVrwwuM80E1d9Z joDaNLBWxOlfq43ZKOBFPnOn0XcCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAMhmE+YIwpPlGZ+gsCj3rEVHF7bMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hMTYzM2I4ZS0wZGY5LTQ0YWMtOWNhZS1kNmY2NzY1YTUyYzkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExNjMzYjhl LTBkZjktNDRhYy05Y2FlLWQ2ZjY3NjVhNTJjOS8wLzAzMjE5ODRGOTgyMzBBNEY5 NDY2N0U4MkMwQTNERUIxMTUxQzVFREIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgD BAJnWhgDBABn6PADBAFn6PIDBABn+scwDQYJKoZIhvcNAQELBQADggEBAIWqiKmW 5CRnV4hbhOzqkFS1zo8A86y50iMczDTnz1ZusKf09Fo7cimdsIXOTvTHVFteXVwr WjdvC1PmZz4ZHGDaiqsKA2ngTPoR/Sj5OZCzwEHL92UYqVu5Fc/tP3rLVthFyEHO RRuEeS2DeUN7pen9qSaBVPFoxUd6OVQ/XslQ6prckg+VnTjDv660PhX00vweCqxD xbBYWEy3dY7sk/AlrJM9RXYmEGXBqV6PAeyA/SqzKc7dFLJ9L1MvLgt1PNxB8vxQ ujoFjlwybIU2juccRyylnxYCgXFlXm3V4weRFns3E2GGcn2T5MgQushSJyY++7Ac hcujdeV9dpcaur8= -----END CERTIFICATE-----Generated at Tue Apr 30 21:57:35 2024 by rpki-client on console-ams.rpki-client.org