$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer File: 0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer (raw, json) Hash identifier: L0dPOJ+r9JLjXbXRuEcytMfoO0PveLSgiPCIz2qc6qM= Subject key identifier: 03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 41CA2439534B263D637EE4566BDD7A9D4C319E3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.mft caRepository: rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 13:12:42 +0000 Certificate not after: Mon 30 Jun 2025 13:17:42 +0000 Subordinate resources: IP: 103.90.24.0/22 IP: 103.232.240.0/24 IP: 103.232.242.0/23 IP: 103.250.199.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ca:24:39:53:4b:26:3d:63:7e:e4:56:6b:dd:7a:9d:4c:31:9e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 13:12:42 2024 GMT Not After : Jun 30 13:17:42 2025 GMT Subject: CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:76:a5:5f:60:f4:d7:6f:ec:58:aa:78:41:44: 33:9b:0f:06:ad:55:87:0c:8d:35:5e:a4:f3:64:ec: d7:77:cf:22:b3:42:f4:46:b7:d2:b4:a4:2d:6d:07: 1e:de:3b:c0:33:1a:e8:37:cf:5b:e4:f3:1b:b5:a7: 47:0e:42:44:8c:f2:07:fb:fe:5c:56:f0:ac:ed:c1: 5c:ba:eb:76:5d:3f:d6:0f:5e:db:2e:c7:04:5a:4c: 6a:a1:6d:8a:d2:94:9c:2e:30:52:07:5e:eb:3d:6f: 99:3e:1e:ec:94:34:84:e2:4e:b2:8b:55:c4:9b:22: 9c:3f:e7:e4:94:62:2a:d6:b6:46:af:47:cf:2e:86: be:5c:e8:c1:41:8e:da:26:6d:b2:7d:58:c2:54:85: 2a:06:04:62:4b:a2:f3:3b:a6:65:8e:c8:60:03:f0: b7:27:97:fc:5c:1d:3d:4c:9e:f5:fc:df:a7:8d:ac: f4:45:f4:d3:98:f1:47:7d:25:2e:87:59:27:d4:1c: 10:51:b3:8a:db:67:5a:cd:95:aa:70:76:70:28:bb: bc:d3:11:43:92:6b:81:d0:83:a0:2b:b1:db:d3:a5: a5:84:95:af:0c:2e:33:cd:04:d5:df:59:8e:80:da: 34:b0:56:c4:e9:5f:ab:8d:d9:28:e0:45:3e:73:a7: d1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.90.24.0/22 103.232.240.0/24 103.232.242.0/23 103.250.199.0/24 Signature Algorithm: sha256WithRSAEncryption 46:d3:a4:9b:fb:00:7e:6e:de:9e:1f:ca:70:da:f0:76:8a:a2: b5:41:ea:e8:26:99:64:ae:69:40:e1:c7:50:14:22:71:c6:34: 59:ff:53:da:ac:d0:78:bb:02:a4:46:45:df:e2:a8:78:04:4b: 14:87:d9:e5:da:7b:e1:cb:4f:41:9c:f2:e5:6c:7a:c2:24:52: a9:06:ae:a2:d4:d5:ff:e2:0a:40:30:6a:f0:6c:6d:dd:d9:a1: ee:ba:d3:ad:da:46:2f:51:7e:b0:d4:7f:b1:d6:8d:82:38:0c: 8f:31:c9:dd:42:0d:4f:5a:98:67:41:f4:42:b2:63:8e:e4:ee: ce:50:14:c3:97:dd:fe:66:95:ba:de:d7:37:69:1a:57:09:f1: 98:24:35:60:32:0b:f3:3d:53:04:0e:9a:8b:ae:4e:f5:38:a6: 5f:71:1e:a2:66:dc:52:f8:a8:12:8f:89:71:15:74:53:06:6d: 0b:54:68:87:e6:62:bf:0b:7a:28:b1:ba:76:b0:a5:c2:40:b4: b2:43:74:21:3c:6b:e5:f0:bc:aa:57:6f:17:c3:8c:6f:c2:4f: e6:8a:55:cf:1f:7b:a3:0d:13:07:95:3c:a3:5e:64:ef:a3:98: 65:9f:9f:b2:ca:82:26:7d:d5:23:c5:9c:26:fa:36:39:f3:a9: fb:1e:47:ea -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUQcokOVNLJj1jfuRWa916nUwxnjswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTEzMTI0MloX DTI1MDYzMDEzMTc0MlowMzExMC8GA1UEAxMoMDMyMTk4NEY5ODIzMEE0Rjk0NjY3 RTgyQzBBM0RFQjExNTFDNUVEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALd2pV9g9Ndv7FiqeEFEM5sPBq1VhwyNNV6k82Ts13fPIrNC9Ea30rSkLW0H Ht47wDMa6DfPW+TzG7WnRw5CRIzyB/v+XFbwrO3BXLrrdl0/1g9e2y7HBFpMaqFt itKUnC4wUgde6z1vmT4e7JQ0hOJOsotVxJsinD/n5JRiKta2Rq9Hzy6GvlzowUGO 2iZtsn1YwlSFKgYEYkui8zumZY7IYAPwtyeX/FwdPUye9fzfp42s9EX005jxR30l LodZJ9QcEFGzittnWs2VqnB2cCi7vNMRQ5JrgdCDoCux29OlpYSVrwwuM80E1d9Z joDaNLBWxOlfq43ZKOBFPnOn0XcCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAMhmE+YIwpPlGZ+gsCj3rEVHF7bMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hMTYzM2I4ZS0wZGY5LTQ0YWMtOWNhZS1kNmY2NzY1YTUyYzkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExNjMzYjhl LTBkZjktNDRhYy05Y2FlLWQ2ZjY3NjVhNTJjOS8wLzAzMjE5ODRGOTgyMzBBNEY5 NDY2N0U4MkMwQTNERUIxMTUxQzVFREIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgD BAJnWhgDBABn6PADBAFn6PIDBABn+scwDQYJKoZIhvcNAQELBQADggEBAEbTpJv7 AH5u3p4fynDa8HaKorVB6ugmmWSuaUDhx1AUInHGNFn/U9qs0Hi7AqRGRd/iqHgE SxSH2eXae+HLT0Gc8uVsesIkUqkGrqLU1f/iCkAwavBsbd3Zoe66063aRi9RfrDU f7HWjYI4DI8xyd1CDU9amGdB9EKyY47k7s5QFMOX3f5mlbre1zdpGlcJ8ZgkNWAy C/M9UwQOmouuTvU4pl9xHqJm3FL4qBKPiXEVdFMGbQtUaIfmYr8LeiixunawpcJA tLJDdCE8a+XwvKpXbxfDjG/CT+aKVc8fe6MNEweVPKNeZO+jmGWfn7LKgiZ91SPF nCb6NjnzqfseR+o= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:12 2024 by rpki-client on console-fra.rpki-client.org