$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer File: 358F4D417A1317CB220BBDC982D7F35D1540D51A.cer (raw, json) Hash identifier: OgSZt+9LBFRcd+edRQh7lcX5YgNCPIUoE+aU0u6k8OY= Subject key identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1E9D75B850924CCC4698381E6CAD407C28FD16BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft caRepository: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 09 Jun 2023 06:11:31 +0000 Certificate not after: Fri 07 Jun 2024 06:16:31 +0000 Subordinate resources: IP: 103.210.68.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:9d:75:b8:50:92:4c:cc:46:98:38:1e:6c:ad:40:7c:28:fd:16:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 9 06:11:31 2023 GMT Not After : Jun 7 06:16:31 2024 GMT Subject: CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3f:44:0c:1b:e6:2f:b4:99:50:cc:6b:84:68: a8:f5:63:a1:38:9a:4c:ab:fb:78:3a:37:77:8e:fc: bb:fb:c1:9a:74:d0:be:e1:0c:35:55:24:01:de:3a: 46:2b:f1:f0:42:08:d0:84:a2:74:73:17:fe:7f:cc: 0c:8f:ec:ff:07:a6:66:43:75:f0:6d:4e:c9:cf:ae: 73:39:f6:2e:c6:51:62:9b:4f:5c:24:9e:3f:58:3d: f0:1c:aa:98:92:c3:45:ec:65:2c:e1:21:7c:41:f7: 23:ee:ee:d1:1d:27:24:9c:29:88:57:b0:21:c1:bb: d3:3b:5a:4b:68:c2:3a:6b:5b:96:69:ce:1d:a0:08: 96:8d:d8:fd:7b:82:cb:58:16:d7:d0:b3:00:71:26: 5c:28:25:f1:fc:c2:5a:26:69:d6:9f:87:d1:2f:5b: 8d:62:49:25:8b:53:cc:5d:f6:d7:cf:09:f6:aa:26: e3:fa:f0:98:b8:00:e4:f4:fc:d2:08:d1:6e:3f:6e: 2d:d4:6d:f4:d9:a8:8b:85:3a:5a:cd:d9:dd:ec:d6: 9e:b6:a5:1c:f7:c9:a7:3a:d4:2b:ad:8b:80:cd:0a: b1:f9:da:7e:47:44:c6:df:bf:71:05:11:31:0d:ca: 96:ab:32:fe:28:49:45:28:c7:3f:35:e3:b7:2f:f4: 80:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.210.68.0/23 Signature Algorithm: sha256WithRSAEncryption 29:b7:30:a3:7b:f5:d1:2c:db:02:e1:17:b0:79:84:2d:b3:1f: 85:01:75:75:ea:d1:c6:3d:8b:63:37:01:f3:84:60:ce:42:3a: ed:5d:3a:63:da:ea:49:9f:a5:bd:86:ab:c5:2d:92:24:c4:e8: 08:b9:7a:d7:40:9e:dc:6f:9a:e3:1f:f1:5a:64:bb:62:52:49: de:c9:cf:95:45:ac:38:0c:bc:25:85:a5:bb:01:77:9d:3f:75: e2:7c:51:16:84:2f:7b:f3:60:2d:b3:6c:1c:6c:fb:6b:75:50: 3c:a6:65:70:37:ed:58:b2:9a:ee:04:8c:6b:55:df:47:4d:c0: d3:f5:7e:0c:65:ed:84:91:e4:11:30:0a:50:f5:0f:a1:ec:0c: 56:14:76:31:57:2d:08:b2:b8:69:5c:52:03:93:79:05:df:5a: 6e:f6:cf:a9:67:15:b2:34:0c:37:aa:3d:2b:2d:50:4a:90:0f: 95:e7:88:de:f3:1f:4b:72:e1:bd:04:65:5f:27:d8:b0:c9:44: 89:63:30:4f:1a:b4:b2:47:58:78:b4:16:20:9a:07:26:fc:8e: 57:cf:dd:81:cd:c9:d0:4b:e1:20:85:b8:5a:e9:00:a4:90:84: 5f:bb:2f:b3:ef:dd:16:56:0b:f3:8d:c8:53:e1:39:7a:f8:a9: a9:1b:99:4d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHp11uFCSTMxGmDgebK1AfCj9FrwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYwOTA2MTEzMVoX DTI0MDYwNzA2MTYzMVowMzExMC8GA1UEAxMoMzU4RjRENDE3QTEzMTdDQjIyMEJC REM5ODJEN0YzNUQxNTQwRDUxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKk/RAwb5i+0mVDMa4RoqPVjoTiaTKv7eDo3d478u/vBmnTQvuEMNVUkAd46 Rivx8EII0ISidHMX/n/MDI/s/wemZkN18G1Oyc+uczn2LsZRYptPXCSeP1g98Byq mJLDRexlLOEhfEH3I+7u0R0nJJwpiFewIcG70ztaS2jCOmtblmnOHaAIlo3Y/XuC y1gW19CzAHEmXCgl8fzCWiZp1p+H0S9bjWJJJYtTzF32188J9qom4/rwmLgA5PT8 0gjRbj9uLdRt9Nmoi4U6Ws3Z3ezWnralHPfJpzrUK62LgM0KsfnafkdExt+/cQUR MQ3Klqsy/ihJRSjHPzXjty/0gLkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDWPTUF6ExfLIgu9yYLX810VQNUaMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mNDM4YzE5NS00OTRhLTQ2YTItYjkzYy04ZTE1NjY4ZjA1YjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y0MzhjMTk1 LTQ5NGEtNDZhMi1iOTNjLThlMTU2NjhmMDViMi8wLzM1OEY0RDQxN0ExMzE3Q0Iy MjBCQkRDOTgyRDdGMzVEMTU0MEQ1MUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn0kQwDQYJKoZIhvcNAQELBQADggEBACm3MKN79dEs2wLhF7B5hC2zH4UBdXXq 0cY9i2M3AfOEYM5COu1dOmPa6kmfpb2Gq8UtkiTE6Ai5etdAntxvmuMf8Vpku2JS Sd7Jz5VFrDgMvCWFpbsBd50/deJ8URaEL3vzYC2zbBxs+2t1UDymZXA37Viymu4E jGtV30dNwNP1fgxl7YSR5BEwClD1D6HsDFYUdjFXLQiyuGlcUgOTeQXfWm72z6ln FbI0DDeqPSstUEqQD5XniN7zH0ty4b0EZV8n2LDJRIljME8atLJHWHi0FiCaByb8 jlfP3YHNydBL4SCFuFrpAKSQhF+7L7Pv3RZWC/ONyFPhOXr4qakbmU0= -----END CERTIFICATE-----Generated at Tue May 7 16:42:34 2024 by rpki-client on console-ams.rpki-client.org