$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer File: 3B1029D44B93CA0397DA506FE1E2147503641EC6.cer (raw, json) Hash identifier: SX2xY2/R4CcCgyAzDRJt6/ERf05aEFFARk0KhGw9QqY= Subject key identifier: 3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1BA4786686D3C1570567C86853EC5263C9CDCB9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft caRepository: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 29 Jan 2024 10:41:14 +0000 Certificate not after: Mon 27 Jan 2025 10:46:14 +0000 Subordinate resources: IP: 103.81.252.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a4:78:66:86:d3:c1:57:05:67:c8:68:53:ec:52:63:c9:cd:cb:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 29 10:41:14 2024 GMT Not After : Jan 27 10:46:14 2025 GMT Subject: CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a7:3e:fa:ed:da:ca:82:4f:bc:7a:b6:81:f5: 75:aa:bc:71:16:98:38:bf:ad:93:c5:15:d7:3b:b9: d1:b8:7a:15:1e:dd:52:05:d3:23:10:61:84:f3:87: f0:d9:0c:a2:b3:fa:d7:f6:e1:70:3c:1f:85:fb:36: 57:d5:2b:af:ff:c4:55:38:e3:6a:ff:df:cf:ab:28: 67:70:98:46:3c:b9:9c:13:d7:1f:e7:30:be:e9:8b: 08:a7:ab:ff:9d:d6:e3:d6:64:ac:06:9b:c1:16:35: e2:0f:e0:8c:5e:57:ce:4e:ab:34:c1:56:f4:6e:a4: 69:07:23:8d:29:d1:2c:fc:ec:b8:b4:3c:5b:e3:9b: ae:10:4b:ad:a8:b0:f7:04:7f:46:be:0a:52:87:7c: c6:d5:ae:c4:86:dd:a7:8a:ab:b5:d3:fc:4d:ab:bd: 33:cc:dd:1b:a0:c3:e1:ce:af:34:45:83:b6:f0:a3: 20:ec:a1:ab:d6:a8:10:1c:db:a2:33:1d:e0:55:a3: 87:ea:06:62:1f:d9:a2:e2:0a:3e:05:ea:6b:3d:28: 15:f6:f0:4a:3b:5c:1b:3d:e1:de:c1:02:e1:1e:ed: 8c:63:84:8d:8f:61:5b:c2:13:41:de:98:c2:99:f0: 3b:f1:bf:f0:86:5a:85:6b:59:a0:d2:f8:ba:0f:29: 28:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.81.252.0/23 Signature Algorithm: sha256WithRSAEncryption 72:57:9c:7c:96:53:0b:42:33:73:58:a9:ce:ca:9d:d9:1b:77: f3:28:8d:86:0d:b8:68:92:9e:73:cd:11:0e:3a:91:08:e0:e0: e5:f3:ac:da:82:66:74:c0:76:f3:eb:66:78:b5:01:ab:c5:43: 9a:ac:44:ee:67:54:47:6e:63:fc:a4:2b:44:8c:59:3d:85:7e: 98:29:e8:0c:f4:19:93:17:60:63:5a:bb:b5:cc:d2:0d:71:88: 9c:62:d3:f9:25:be:f7:aa:f4:38:ff:66:79:36:d4:80:ee:c8: 98:94:e7:16:10:64:2c:f6:e6:c4:5e:45:f1:46:be:d5:95:aa: 47:9d:ca:b7:3a:de:23:59:69:2e:5c:30:b0:59:3f:a4:17:f5: 7d:a2:39:39:e4:74:ec:90:eb:76:8d:49:6a:3d:46:71:39:95: c1:bd:1b:77:15:53:b9:dc:2c:29:e8:97:5f:6e:08:3b:b5:6a: 2c:af:c8:cf:57:e7:6d:46:05:2e:1a:b4:30:d9:eb:23:55:0e: 06:16:de:6b:c7:d1:6e:4d:f1:21:64:33:01:4e:76:d0:e6:ca: e2:16:46:51:e2:aa:54:d8:39:a3:bd:35:83:9d:2c:0a:39:83: bd:fe:6c:6a:94:6d:2d:de:b0:e6:eb:6e:e4:49:ea:c1:dc:e2: 6e:2c:a5:40 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUG6R4ZobTwVcFZ8hoU+xSY8nNy5owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEyOTEwNDExNFoX DTI1MDEyNzEwNDYxNFowMzExMC8GA1UEAxMoM0IxMDI5RDQ0QjkzQ0EwMzk3REE1 MDZGRTFFMjE0NzUwMzY0MUVDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKqnPvrt2sqCT7x6toH1daq8cRaYOL+tk8UV1zu50bh6FR7dUgXTIxBhhPOH 8NkMorP61/bhcDwfhfs2V9Urr//EVTjjav/fz6soZ3CYRjy5nBPXH+cwvumLCKer /53W49ZkrAabwRY14g/gjF5Xzk6rNMFW9G6kaQcjjSnRLPzsuLQ8W+ObrhBLraiw 9wR/Rr4KUod8xtWuxIbdp4qrtdP8Tau9M8zdG6DD4c6vNEWDtvCjIOyhq9aoEBzb ojMd4FWjh+oGYh/ZouIKPgXqaz0oFfbwSjtcGz3h3sEC4R7tjGOEjY9hW8ITQd6Y wpnwO/G/8IZahWtZoNL4ug8pKOkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDsQKdRLk8oDl9pQb+HiFHUDZB7GMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jYzBkNDBiYy05M2M4LTQxNWItYjZhOC1hZWYwODhkN2Y0ZDQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjMGQ0MGJj LTkzYzgtNDE1Yi1iNmE4LWFlZjA4OGQ3ZjRkNC8wLzNCMTAyOUQ0NEI5M0NBMDM5 N0RBNTA2RkUxRTIxNDc1MDM2NDFFQzYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnUfwwDQYJKoZIhvcNAQELBQADggEBAHJXnHyWUwtCM3NYqc7Kndkbd/MojYYN uGiSnnPNEQ46kQjg4OXzrNqCZnTAdvPrZni1AavFQ5qsRO5nVEduY/ykK0SMWT2F fpgp6Az0GZMXYGNau7XM0g1xiJxi0/klvveq9Dj/Znk21IDuyJiU5xYQZCz25sRe RfFGvtWVqkedyrc63iNZaS5cMLBZP6QX9X2iOTnkdOyQ63aNSWo9RnE5lcG9G3cV U7ncLCnol19uCDu1aiyvyM9X521GBS4atDDZ6yNVDgYW3mvH0W5N8SFkMwFOdtDm yuIWRlHiqlTYOaO9NYOdLAo5g73+bGqUbS3esObrbuRJ6sHc4m4spUA= -----END CERTIFICATE-----Generated at Thu May 9 00:29:10 2024 by rpki-client on console-ams.rpki-client.org