$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer File: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer (raw, json) Hash identifier: 39SOB86Q4vJDUiiFezUGlgaqDrGzko8NQdKL8ED716Y= Subject key identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4533AA54DCBEE5965C469A435B4ADC4BF35DD73C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft caRepository: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 30 Mar 2024 05:09:42 +0000 Certificate not after: Sat 29 Mar 2025 05:14:42 +0000 Subordinate resources: IP: 103.210.221.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:33:aa:54:dc:be:e5:96:5c:46:9a:43:5b:4a:dc:4b:f3:5d:d7:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 30 05:09:42 2024 GMT Not After : Mar 29 05:14:42 2025 GMT Subject: CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ea:aa:b9:b9:95:8b:fd:7c:88:f7:04:d4:1e: 86:f6:9a:98:04:57:76:92:a6:74:de:ce:d0:78:64: 1c:e4:6a:5a:1d:49:52:4f:71:e0:fb:16:c7:14:3e: 66:6b:a7:46:45:d5:51:b7:ba:ad:45:65:5d:bc:c2: 39:4e:78:57:64:e2:57:ab:2e:bf:6a:bb:d2:03:b2: eb:a5:d4:5a:9f:f7:26:64:42:b1:36:e0:8d:d3:33: b3:f7:ef:5c:22:6f:3b:06:be:0c:92:62:df:35:65: 28:74:62:0d:d2:85:40:ee:e2:84:6e:3c:92:fb:6e: 26:40:8c:85:bb:ec:f7:ca:7f:e8:56:a8:1d:be:a9: 40:35:2f:53:84:77:2c:f6:a9:d6:b7:70:ff:c9:b3: cb:91:f8:94:a9:c8:a8:47:0b:89:eb:d6:57:4f:70: a0:66:df:fd:5c:51:05:8e:30:de:d5:db:1e:23:b1: 26:a5:93:2e:9b:d3:10:c2:43:7f:13:7e:51:1c:8b: 03:01:61:a0:1f:f9:83:1e:82:80:2e:c0:12:f4:63: 57:09:e0:8b:6e:f6:33:e8:be:c8:e7:52:5d:6e:2d: 3e:d2:2e:57:70:e4:ad:68:c8:34:b7:c4:bc:4b:61: a9:9e:54:65:99:20:bd:d8:cc:b4:b9:54:9f:87:ff: b3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.210.221.0/24 Signature Algorithm: sha256WithRSAEncryption 71:f2:06:1d:87:68:c8:20:af:ee:e1:c5:ee:db:80:8f:57:32: 7d:b4:e6:be:bc:ab:6d:5e:ee:d7:67:44:99:7b:8b:d4:81:5c: 4f:a6:24:e7:5c:c4:a6:8e:66:a1:9c:fb:55:ab:a6:92:e4:dc: b0:db:65:d6:3e:aa:08:44:37:c4:0d:48:9b:64:9c:39:0c:99: 30:a9:58:a7:f1:16:e1:9b:b8:0d:5d:16:06:5a:db:3d:a9:7d: 5e:e0:01:52:aa:89:f4:db:99:23:19:7c:52:ab:e6:c6:bd:c2: 21:37:32:cf:93:2f:e8:b7:0b:37:b4:37:35:36:78:17:3d:86: 3c:82:8e:c0:5b:59:81:c1:76:b9:50:8f:dd:d4:99:ab:3b:dc: 6d:be:b0:14:ac:6c:28:0a:2c:ed:22:fa:1b:6e:98:f6:6d:9c: f7:61:a7:31:97:14:3b:1c:01:e2:7b:30:69:c7:88:50:d2:c6: 8b:c8:fe:d5:42:6c:46:98:5a:87:ef:be:10:23:62:51:5b:b1: 61:40:c3:e8:5e:d7:e7:ce:3c:cb:d0:cf:14:89:0b:62:6c:6a: 02:c8:70:c8:78:db:ef:4c:d4:66:01:d9:bf:71:33:79:ad:e4: 06:74:18:88:36:7a:c8:30:ee:d3:a3:99:fd:69:db:79:5d:41: 90:9a:c9:fe -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURTOqVNy+5ZZcRppDW0rcS/Nd1zwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMzMDA1MDk0MloX DTI1MDMyOTA1MTQ0MlowMzExMC8GA1UEAxMoM0EwOUNGMzJFQzRGNkQ1QzRGRDJD ODM3QTExNzRFRDM0NzIxREI0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM3qqrm5lYv9fIj3BNQehvaamARXdpKmdN7O0HhkHORqWh1JUk9x4PsWxxQ+ ZmunRkXVUbe6rUVlXbzCOU54V2TiV6suv2q70gOy66XUWp/3JmRCsTbgjdMzs/fv XCJvOwa+DJJi3zVlKHRiDdKFQO7ihG48kvtuJkCMhbvs98p/6FaoHb6pQDUvU4R3 LPap1rdw/8mzy5H4lKnIqEcLievWV09woGbf/VxRBY4w3tXbHiOxJqWTLpvTEMJD fxN+URyLAwFhoB/5gx6CgC7AEvRjVwngi272M+i+yOdSXW4tPtIuV3DkrWjINLfE vEthqZ5UZZkgvdjMtLlUn4f/sx0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDoJzzLsT21cT9LIN6EXTtNHIdtHMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kOWVlMjA5YS0xMTkzLTRkNmYtOWRiZS04Nzc3YmI4OTgwYWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5ZWUyMDlh LTExOTMtNGQ2Zi05ZGJlLTg3NzdiYjg5ODBhYS8wLzNBMDlDRjMyRUM0RjZENUM0 RkQyQzgzN0ExMTc0RUQzNDcyMURCNDcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn0t0wDQYJKoZIhvcNAQELBQADggEBAHHyBh2HaMggr+7hxe7bgI9XMn205r68 q21e7tdnRJl7i9SBXE+mJOdcxKaOZqGc+1WrppLk3LDbZdY+qghEN8QNSJtknDkM mTCpWKfxFuGbuA1dFgZa2z2pfV7gAVKqifTbmSMZfFKr5sa9wiE3Ms+TL+i3Cze0 NzU2eBc9hjyCjsBbWYHBdrlQj93Umas73G2+sBSsbCgKLO0i+htumPZtnPdhpzGX FDscAeJ7MGnHiFDSxovI/tVCbEaYWofvvhAjYlFbsWFAw+he1+fOPMvQzxSJC2Js agLIcMh42+9M1GYB2b9xM3mt5AZ0GIg2esgw7tOjmf1p23ldQZCayf4= -----END CERTIFICATE-----Generated at Wed May 8 17:45:17 2024 by rpki-client on console-ams.rpki-client.org