$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer File: 3B276288FD701E3EC497C2BCC17831BA188BAF79.cer (raw, json) Hash identifier: wF9bPVkY6y4fCnNvJVnQR//XFz9QB3fx8++dm7DLTDA= Subject key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6DC524A8A5F7F9C4A8A07D2A39F8C1594C7FB9B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft caRepository: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 12 Apr 2024 20:09:43 +0000 Certificate not after: Fri 11 Apr 2025 20:14:43 +0000 Subordinate resources: IP: 103.181.138.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c5:24:a8:a5:f7:f9:c4:a8:a0:7d:2a:39:f8:c1:59:4c:7f:b9:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 12 20:09:43 2024 GMT Not After : Apr 11 20:14:43 2025 GMT Subject: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9a:83:f2:73:e9:94:26:3c:34:23:98:8a:a9: e6:01:f8:3b:9c:b0:e1:30:db:ce:f8:9d:a7:d8:e9: 51:73:c5:43:a1:c8:b0:2f:d9:77:b6:17:12:01:3a: 74:37:1d:53:38:b1:cd:05:a6:fd:af:ed:3b:01:52: ac:06:a5:25:ce:35:22:6f:f0:3d:87:a2:b2:7f:12: d0:92:b4:e1:b8:22:7c:20:72:66:0a:c5:54:a7:50: 42:c9:d9:7c:c8:77:30:66:a7:3a:00:bd:b0:52:32: 97:59:e4:8a:43:50:02:95:eb:0d:db:34:cb:66:4b: 78:bc:50:09:27:fe:75:38:38:2c:de:d0:20:a6:d0: 4d:1d:08:f4:56:d8:dc:84:12:c0:fa:6a:19:63:fa: 79:af:75:21:77:c5:31:8d:3a:d3:fd:74:ba:b0:6d: f4:2e:0d:f7:5f:b6:79:3a:6e:5e:c5:8c:0c:37:a4: 2c:19:b2:3c:d5:2d:11:a8:a0:98:f5:fc:79:79:87: fb:c8:ba:50:90:38:3a:80:9d:e0:5c:20:36:bb:b3: a2:71:0b:07:74:bd:e2:21:c0:52:65:35:1b:90:fe: 84:68:3f:04:b7:9b:cb:62:12:3c:e3:59:59:82:cd: 5c:32:d2:04:68:35:0a:3b:1c:a6:e6:c7:7b:1b:45: 82:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.138.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:dc:75:1f:b9:3f:f3:ae:ed:39:93:8f:4f:21:8d:2b:cd:68: b4:cf:45:23:a2:1f:22:ec:b0:08:b0:11:b6:80:c7:21:10:3c: f5:1e:a4:2c:07:0f:76:e5:f5:50:33:2d:dc:aa:9f:f9:45:ba: b8:0d:0f:da:4a:15:69:18:10:08:e5:55:d4:2b:5a:d8:cc:fe: b9:c3:44:45:7b:4c:11:03:c1:ab:61:da:17:60:7f:7b:e2:69: 12:4d:06:5e:8a:0e:ed:6a:b7:f8:bf:a6:63:52:58:e3:1a:cc: a2:f5:f0:43:4a:34:c6:65:7b:e1:6e:10:bf:f5:7e:fd:e0:6b: 19:b1:22:0c:96:b8:d5:b5:bf:82:de:18:73:0a:ba:ce:6b:bf: 3d:40:c3:ea:14:db:c4:23:8e:ba:b3:6d:f4:41:1f:b8:a3:91: e0:7e:61:2d:33:04:d1:88:be:bf:8a:f8:4e:00:29:73:17:0a: a7:56:b7:38:62:96:02:3e:8a:b0:9f:16:55:60:53:8a:60:70: 36:96:9e:cb:8d:51:7e:2b:14:b1:c2:ec:38:81:88:c3:b0:2b: 82:70:96:85:93:58:7a:aa:a6:57:9a:f7:31:9c:fb:31:3a:ff: 6c:58:34:ec:e9:24:f5:1a:09:4f:dd:43:c8:d6:b0:f2:d1:fc: b0:b8:b8:dc -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbcUkqKX3+cSooH0qOfjBWUx/ubIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQxMjIwMDk0M1oX DTI1MDQxMTIwMTQ0M1owMzExMC8GA1UEAxMoM0IyNzYyODhGRDcwMUUzRUM0OTdD MkJDQzE3ODMxQkExODhCQUY3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6ag/Jz6ZQmPDQjmIqp5gH4O5yw4TDbzvidp9jpUXPFQ6HIsC/Zd7YXEgE6 dDcdUzixzQWm/a/tOwFSrAalJc41Im/wPYeisn8S0JK04bgifCByZgrFVKdQQsnZ fMh3MGanOgC9sFIyl1nkikNQApXrDds0y2ZLeLxQCSf+dTg4LN7QIKbQTR0I9FbY 3IQSwPpqGWP6ea91IXfFMY060/10urBt9C4N91+2eTpuXsWMDDekLBmyPNUtEaig mPX8eXmH+8i6UJA4OoCd4FwgNruzonELB3S94iHAUmU1G5D+hGg/BLeby2ISPONZ WYLNXDLSBGg1CjscpubHextFgq8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDsnYoj9cB4+xJfCvMF4MboYi695MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mN2ExMTBlOC1iOGMyLTQyNzctYmViMy05MmFhNWIzNjkwZjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3YTExMGU4 LWI4YzItNDI3Ny1iZWIzLTkyYWE1YjM2OTBmMC8wLzNCMjc2Mjg4RkQ3MDFFM0VD NDk3QzJCQ0MxNzgzMUJBMTg4QkFGNzkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFntYowDQYJKoZIhvcNAQELBQADggEBAJrcdR+5P/Ou7TmTj08hjSvNaLTPRSOi HyLssAiwEbaAxyEQPPUepCwHD3bl9VAzLdyqn/lFurgND9pKFWkYEAjlVdQrWtjM /rnDREV7TBEDwath2hdgf3viaRJNBl6KDu1qt/i/pmNSWOMazKL18ENKNMZle+Fu EL/1fv3gaxmxIgyWuNW1v4LeGHMKus5rvz1Aw+oU28QjjrqzbfRBH7ijkeB+YS0z BNGIvr+K+E4AKXMXCqdWtzhilgI+irCfFlVgU4pgcDaWnsuNUX4rFLHC7DiBiMOw K4JwloWTWHqqplea9zGc+zE6/2xYNOzpJPUaCU/dQ8jWsPLR/LC4uNw= -----END CERTIFICATE-----Generated at Wed May 8 17:45:17 2024 by rpki-client on console-ams.rpki-client.org