$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer File: 3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer (raw, json) Hash identifier: +lc3XdUsUFIO5WuNMHI3atSZ2ROHBZcqb9ZTUXfDhdk= Subject key identifier: 31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3EC63B7C5F99AF86F52C3397DAC4E1AB1C10E2E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft caRepository: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 31 Dec 2024 03:51:13 +0000 Certificate not after: Tue 30 Dec 2025 03:56:13 +0000 Subordinate resources: IP: 103.162.35.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Feb 2025 10:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c6:3b:7c:5f:99:af:86:f5:2c:33:97:da:c4:e1:ab:1c:10:e2:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 31 03:51:13 2024 GMT Not After : Dec 30 03:56:13 2025 GMT Subject: CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:25:30:d2:10:ae:f8:82:db:80:3d:9c:2b:33: a9:1f:97:60:1f:c4:35:88:dc:d7:15:e0:e7:a9:50: 39:20:ae:52:2e:35:3f:9a:d0:39:77:27:38:92:a7: cd:2c:2e:d8:8f:c2:70:a2:a6:13:4a:9c:9f:fe:7d: 9e:91:ae:21:de:49:9f:23:19:01:ed:a0:09:94:aa: fc:75:f9:ff:5f:5b:cc:de:2a:f2:01:df:8c:89:8f: 3e:16:27:d0:18:b6:e5:d5:d9:53:07:5b:8c:64:61: ae:37:8a:b1:d2:7c:fc:93:93:01:9e:41:dc:a9:10: 73:bf:c2:a4:f5:20:48:96:09:4f:2e:39:bd:bc:ea: 12:25:98:68:07:10:ab:49:48:af:50:80:cd:a0:84: 32:b9:36:c4:bc:f6:55:95:77:b9:8f:8b:7b:da:d5: bc:d3:a8:25:5e:27:b7:f0:ac:4a:9d:60:92:3f:89: 96:eb:e7:7d:4b:65:65:14:9f:00:d2:16:1c:f3:6b: 8c:3f:0d:d7:1a:39:8f:1e:64:0c:fa:8b:25:8f:19: b0:fb:60:05:14:93:c0:f1:e6:c4:e4:c4:4c:73:36: f0:d1:c6:8d:6d:ea:6e:ca:df:f0:f5:77:35:ec:1b: ec:ce:fe:c7:44:c6:7d:f1:02:c6:04:35:cd:c5:71: fe:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.35.0/24 Signature Algorithm: sha256WithRSAEncryption 21:ce:8d:f5:d8:ec:4c:d9:4f:52:47:4f:92:df:79:ad:ee:3c: ee:23:60:74:fb:6f:24:e4:f9:49:43:90:26:98:4b:95:f4:20: 70:b5:6d:13:07:5b:77:d8:e8:c3:5a:f0:18:cc:61:76:f6:7f: d3:d1:ce:3e:ee:b0:cd:e8:97:09:e7:42:a5:d9:8c:f9:77:0f: 1c:98:58:7a:10:fc:8e:9f:ab:b4:ca:7f:c9:1b:1c:04:ff:c8: cd:a1:d7:96:70:1a:f6:b9:c0:8b:6b:ad:cc:8a:b6:91:31:2a: 1d:8b:52:34:20:8c:2a:ef:d4:9c:33:54:e7:e7:c6:35:63:b9: 75:d7:46:21:4e:2d:f0:6d:d5:11:59:a6:73:f3:4b:18:f4:62: b9:ea:65:0b:9c:a1:dd:6d:d1:0b:66:0e:fa:2b:a3:0d:7e:36: 54:f6:e0:fa:9b:48:93:99:fd:a0:48:b7:ef:88:3f:96:ab:d2: 58:72:b8:96:72:e1:40:f0:2c:0a:e2:a5:b9:3d:23:3d:b5:0d: d9:43:a0:d6:f1:ac:10:d5:da:90:48:af:92:3c:97:3c:e2:0e: 4f:2f:ca:7d:b4:fb:d4:9f:61:e4:ca:1d:56:03:6d:4f:0d:8b: be:90:49:67:ff:42:84:13:fc:d5:8a:ba:7f:6c:a7:da:5a:30: cd:af:80:c5 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUPsY7fF+Zr4b1LDOX2sThqxwQ4uUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIzMTAzNTExM1oX DTI1MTIzMDAzNTYxM1owMzExMC8GA1UEAxMoMzE5NERGRDY2NDU3MzU5QUY3QkYz QkYwOUVBNzY2QURFRjEzMjlCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMElMNIQrviC24A9nCszqR+XYB/ENYjc1xXg56lQOSCuUi41P5rQOXcnOJKn zSwu2I/CcKKmE0qcn/59npGuId5JnyMZAe2gCZSq/HX5/19bzN4q8gHfjImPPhYn 0Bi25dXZUwdbjGRhrjeKsdJ8/JOTAZ5B3KkQc7/CpPUgSJYJTy45vbzqEiWYaAcQ q0lIr1CAzaCEMrk2xLz2VZV3uY+Le9rVvNOoJV4nt/CsSp1gkj+JluvnfUtlZRSf ANIWHPNrjD8N1xo5jx5kDPqLJY8ZsPtgBRSTwPHmxOTETHM28NHGjW3qbsrf8PV3 Newb7M7+x0TGffECxgQ1zcVx/tkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDGU39ZkVzWa97878J6nZq3vEym1MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yM2JhMDI0Yi04N2YyLTRlZGQtODlmZi1hNGZjYTcwMDhjMzYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIzYmEwMjRi LTg3ZjItNGVkZC04OWZmLWE0ZmNhNzAwOGMzNi8wLzMxOTRERkQ2NjQ1NzM1OUFG N0JGM0JGMDlFQTc2NkFERUYxMzI5QjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnoiMwDQYJKoZIhvcNAQELBQADggEBACHOjfXY7EzZT1JHT5Lfea3uPO4jYHT7 byTk+UlDkCaYS5X0IHC1bRMHW3fY6MNa8BjMYXb2f9PRzj7usM3olwnnQqXZjPl3 DxyYWHoQ/I6fq7TKf8kbHAT/yM2h15ZwGva5wItrrcyKtpExKh2LUjQgjCrv1Jwz VOfnxjVjuXXXRiFOLfBt1RFZpnPzSxj0YrnqZQucod1t0QtmDvorow1+NlT24Pqb SJOZ/aBIt++IP5ar0lhyuJZy4UDwLAripbk9Iz21DdlDoNbxrBDV2pBIr5I8lzzi Dk8vyn20+9SfYeTKHVYDbU8Ni76QSWf/QoQT/NWKun9sp9paMM2vgMU= -----END CERTIFICATE-----Generated at Sat Feb 22 14:07:03 2025 by rpki-client