$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer File: 3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer (raw, json) Hash identifier: 9+2sZasyhnpvDr9w9eOGtOK8WhJEx75YMBrWFHDmoGU= Subject key identifier: 3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 62385A207CA41E2B3F7DB50A3D996EBE74E1FF48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft caRepository: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 06 May 2024 15:53:47 +0000 Certificate not after: Mon 05 May 2025 15:58:47 +0000 Subordinate resources: IP: 103.190.60.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:38:5a:20:7c:a4:1e:2b:3f:7d:b5:0a:3d:99:6e:be:74:e1:ff:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 6 15:53:47 2024 GMT Not After : May 5 15:58:47 2025 GMT Subject: CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f4:b4:b6:32:7b:19:55:30:17:26:10:2e:dd: 89:18:da:53:b2:fa:d2:24:be:c3:0d:2d:dc:e4:29: 3f:d2:c1:7e:3d:44:49:60:87:ef:e0:74:30:ee:62: 88:42:d7:52:18:1e:30:c0:6c:4a:40:f6:41:bf:a1: 2b:c6:0f:38:4c:75:86:09:2e:76:15:09:1f:a9:67: 15:37:e4:ee:7d:a0:f3:d0:9f:cb:3f:69:e4:af:97: 99:55:46:30:c3:05:52:2a:f8:b4:c8:8b:66:93:6a: 72:80:a4:42:c6:79:33:b9:19:40:4e:20:e7:ea:b5: 56:d4:d8:01:ed:70:47:73:5d:d9:f1:d5:b9:49:ff: 0c:1f:61:60:8d:07:09:94:32:52:68:53:ba:5c:c0: 7a:88:e1:86:d5:d8:ef:36:9c:26:68:83:62:a8:66: 7f:8a:11:0b:30:28:8e:14:92:47:9e:e6:12:de:36: c2:69:77:b2:fd:90:66:f1:a6:97:fe:7a:81:c5:d7: 79:df:09:97:62:d1:00:e3:b8:20:3e:b8:66:a5:6d: e8:94:a6:94:9b:c8:56:30:c1:19:39:30:1b:f7:4a: 6a:00:d2:c1:b1:2e:b1:09:63:09:41:44:fa:d8:40: 70:c6:3f:69:6f:23:c4:45:b5:75:cc:75:20:b4:0e: 1f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.60.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:1d:22:ba:fe:ba:d2:ae:42:42:ba:4f:60:e6:3d:eb:92:37: 3e:4f:cd:22:54:59:4b:c7:49:10:d1:38:8c:cb:d1:dc:fb:ce: 42:c6:39:d6:27:01:e0:36:ec:66:0a:97:c2:b6:d2:80:2c:96: 60:bd:f6:79:75:b6:4e:90:f8:9e:db:75:2a:f6:f8:1e:1a:ee: 6a:03:81:83:81:4d:27:6c:a9:24:5e:99:9f:6b:66:79:f1:a7: 6e:45:70:04:02:6c:14:be:b3:a1:6c:47:08:ba:89:07:2f:c6: 01:a0:2a:46:5f:d3:ca:6a:51:a9:b1:6e:0e:96:86:23:9a:4b: 54:b8:5b:b0:15:b6:3e:9f:da:ad:7c:ad:52:b1:c1:19:81:d6: e4:1d:14:da:89:75:76:4f:bc:a9:a8:78:ef:81:92:cb:43:8f: 93:c7:86:be:38:0a:8b:66:a7:68:b9:b8:99:57:b9:28:8b:85: bb:ce:ff:35:0e:13:f3:9f:e7:21:1a:1b:8b:23:dc:db:ca:79: 85:39:b3:b7:71:59:8c:06:5a:2e:f5:68:a9:46:ec:9f:9c:64: 36:d6:9f:98:ea:a5:df:8b:08:f1:3b:3c:42:f8:8e:a6:30:53: e4:9e:34:d6:83:f9:c3:7c:32:eb:e4:86:b6:3f:38:5f:c7:ac: 2d:eb:74:4b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUYjhaIHykHis/fbUKPZluvnTh/0gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUwNjE1NTM0N1oX DTI1MDUwNTE1NTg0N1owMzExMC8GA1UEAxMoM0JBNUMxMDE5MEFEQzk2RUUzNEVC NEE2RDA1NDQ1NzAyMkNCREVFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKb0tLYyexlVMBcmEC7diRjaU7L60iS+ww0t3OQpP9LBfj1ESWCH7+B0MO5i iELXUhgeMMBsSkD2Qb+hK8YPOEx1hgkudhUJH6lnFTfk7n2g89Cfyz9p5K+XmVVG MMMFUir4tMiLZpNqcoCkQsZ5M7kZQE4g5+q1VtTYAe1wR3Nd2fHVuUn/DB9hYI0H CZQyUmhTulzAeojhhtXY7zacJmiDYqhmf4oRCzAojhSSR57mEt42wml3sv2QZvGm l/56gcXXed8Jl2LRAOO4ID64ZqVt6JSmlJvIVjDBGTkwG/dKagDSwbEusQljCUFE +thAcMY/aW8jxEW1dcx1ILQOHwkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDulwQGQrclu4060ptBURXAiy97pMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ZTMxNDg1OC1iMzNhLTRiNjUtOWE1NS1kY2U0MWUyMjM4NzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVlMzE0ODU4 LWIzM2EtNGI2NS05YTU1LWRjZTQxZTIyMzg3My8wLzNCQTVDMTAxOTBBREM5NkVF MzRFQjRBNkQwNTQ0NTcwMjJDQkRFRTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvjwwDQYJKoZIhvcNAQELBQADggEBAC0dIrr+utKuQkK6T2DmPeuSNz5PzSJU WUvHSRDROIzL0dz7zkLGOdYnAeA27GYKl8K20oAslmC99nl1tk6Q+J7bdSr2+B4a 7moDgYOBTSdsqSRemZ9rZnnxp25FcAQCbBS+s6FsRwi6iQcvxgGgKkZf08pqUamx bg6WhiOaS1S4W7AVtj6f2q18rVKxwRmB1uQdFNqJdXZPvKmoeO+BkstDj5PHhr44 Cotmp2i5uJlXuSiLhbvO/zUOE/Of5yEaG4sj3NvKeYU5s7dxWYwGWi71aKlG7J+c ZDbWn5jqpd+LCPE7PEL4jqYwU+SeNNaD+cN8MuvkhrY/OF/HrC3rdEs= -----END CERTIFICATE-----Generated at Wed May 8 18:12:06 2024 by rpki-client on console-fra.rpki-client.org