$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer File: 03F45A130990D1072FE172E1EF64AAFAEC347834.cer (raw, json) Hash identifier: q+oi2z/SEZNL5bL4llGl1saew2iCLMwOiqSOxcUUD38= Subject key identifier: 03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 071EF96E0CBE7A5ACF019CE352B5A41AA326E9B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft caRepository: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 12 Feb 2024 22:44:11 +0000 Certificate not after: Mon 10 Feb 2025 22:49:11 +0000 Subordinate resources: IP: 103.143.4.0/23 IP: 2405:4640::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:1e:f9:6e:0c:be:7a:5a:cf:01:9c:e3:52:b5:a4:1a:a3:26:e9:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 12 22:44:11 2024 GMT Not After : Feb 10 22:49:11 2025 GMT Subject: CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:55:16:3c:03:d7:bd:be:7b:6c:39:66:1f:5a: 37:ca:8d:03:e6:fd:f2:ff:7d:20:ea:65:30:74:6a: fd:48:27:52:9b:b4:b7:30:3d:35:b9:c2:4a:c6:05: 28:61:61:ed:4b:1a:6e:f0:72:4c:40:25:1f:2c:70: f3:49:21:77:3d:06:30:d0:76:93:8e:1c:ef:fe:19: 22:29:e6:dc:b6:62:fa:e4:04:d5:13:b6:7a:96:3f: 4d:53:be:a0:51:73:e6:ad:21:70:67:ae:83:ce:8a: 67:9c:9b:82:63:19:6a:25:28:b5:84:16:c4:07:25: 74:54:1c:9d:e1:d0:65:79:a9:ba:74:0b:07:d9:59: 43:6c:03:df:96:9c:21:55:85:8f:5b:75:57:92:11: dd:2a:86:a9:52:fe:13:f2:b0:cd:2a:d2:b9:94:6f: c1:4e:38:25:d5:c8:8e:f0:ec:4e:ff:cd:62:37:3b: 01:ee:38:69:6b:c2:8b:73:8f:35:0d:5e:38:c7:79: 57:ab:cf:a3:64:35:a1:c7:27:1d:aa:d8:f9:2e:bf: 74:fe:0e:25:46:3a:e8:09:e3:cd:0e:7d:e9:4e:c9: ea:e3:8e:17:8b:d4:26:df:5a:91:84:92:67:84:50: 7e:19:39:39:0a:d6:40:4a:4c:70:43:f5:2e:7c:04: e1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.4.0/23 IPv6: 2405:4640::/32 Signature Algorithm: sha256WithRSAEncryption 64:3a:99:57:06:cb:ae:e0:8e:2b:16:e8:ef:14:4c:11:be:ef: be:d7:af:81:d8:a5:aa:22:58:8c:68:ea:c4:1b:c6:73:9f:27: ae:43:c3:21:7c:3a:ab:f0:27:b5:bf:4b:0a:4f:77:97:57:e2: 3c:d1:5d:19:59:b3:e9:8f:21:98:8c:13:1c:83:64:b3:e1:d0: 12:13:a1:68:5a:20:c2:4f:23:db:06:3b:87:7c:22:44:27:97: c7:ba:19:f4:89:2d:63:17:58:2d:7d:4c:1f:c2:31:61:a4:af: 07:bf:b9:4d:0b:2f:a5:3b:71:d1:e0:f8:8b:6f:9c:ff:d9:56: 3f:20:a6:04:96:20:a4:09:46:67:a6:23:4f:71:10:4b:ff:57: b3:44:05:19:8e:e9:6f:05:b0:fe:4b:3f:34:b3:ab:e1:b4:cc: 2e:66:ff:b1:9c:cc:10:f9:04:70:e9:e6:85:80:13:cf:3d:19: 4d:8a:9d:56:d4:0d:ce:df:d9:5b:9a:72:f9:96:94:7c:71:79: d6:09:98:7b:c5:80:ad:2d:fa:a2:ec:30:e9:c1:4b:7f:96:53: 45:90:cb:9a:e9:b7:5c:3f:a5:74:be:9f:ee:60:98:76:ce:64: b9:92:f5:a7:e6:c0:2b:74:d4:9f:45:05:3b:0e:e8:87:18:3b: 16:05:2a:0c -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUBx75bgy+elrPAZzjUrWkGqMm6bIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIxMjIyNDQxMVoX DTI1MDIxMDIyNDkxMVowMzExMC8GA1UEAxMoMDNGNDVBMTMwOTkwRDEwNzJGRTE3 MkUxRUY2NEFBRkFFQzM0NzgzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALxVFjwD172+e2w5Zh9aN8qNA+b98v99IOplMHRq/UgnUpu0tzA9NbnCSsYF KGFh7UsabvByTEAlHyxw80khdz0GMNB2k44c7/4ZIinm3LZi+uQE1RO2epY/TVO+ oFFz5q0hcGeug86KZ5ybgmMZaiUotYQWxAcldFQcneHQZXmpunQLB9lZQ2wD35ac IVWFj1t1V5IR3SqGqVL+E/KwzSrSuZRvwU44JdXIjvDsTv/NYjc7Ae44aWvCi3OP NQ1eOMd5V6vPo2Q1occnHarY+S6/dP4OJUY66AnjzQ596U7J6uOOF4vUJt9akYSS Z4RQfhk5OQrWQEpMcEP1LnwE4fUCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAP0WhMJkNEHL+Fy4e9kqvrsNHg0MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83OTk4ZDZlZS02ZmQ3LTRlMmQtYWU0MS02OTM5ZmRiMTUzZWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc5OThkNmVl LTZmZDctNGUyZC1hZTQxLTY5MzlmZGIxNTNlZS8wLzAzRjQ1QTEzMDk5MEQxMDcy RkUxNzJFMUVGNjRBQUZBRUMzNDc4MzQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnjwQwDQQCAAIwBwMFACQFRkAwDQYJKoZIhvcNAQELBQADggEBAGQ6mVcGy67g jisW6O8UTBG+777Xr4HYpaoiWIxo6sQbxnOfJ65DwyF8OqvwJ7W/SwpPd5dX4jzR XRlZs+mPIZiMExyDZLPh0BIToWhaIMJPI9sGO4d8IkQnl8e6GfSJLWMXWC19TB/C MWGkrwe/uU0LL6U7cdHg+ItvnP/ZVj8gpgSWIKQJRmemI09xEEv/V7NEBRmO6W8F sP5LPzSzq+G0zC5m/7GczBD5BHDp5oWAE889GU2KnVbUDc7f2VuacvmWlHxxedYJ mHvFgK0t+qLsMOnBS3+WU0WQy5rpt1w/pXS+n+5gmHbOZLmS9afmwCt01J9FBTsO 6IcYOxYFKgw= -----END CERTIFICATE-----Generated at Wed May 8 04:37:45 2024 by rpki-client on console-fra.rpki-client.org