$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer File: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer (raw, json) Hash identifier: 1CQsSIdcMDSZ2VIWeMsgDIW4s8yVsEjbXkZN/aGQP9M= Subject key identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 48D185BB86D573D1BDE2FC700C24CD7CACC4A1CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft caRepository: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 20 Mar 2024 21:20:09 +0000 Certificate not after: Wed 19 Mar 2025 21:25:09 +0000 Subordinate resources: IP: 103.84.4.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d1:85:bb:86:d5:73:d1:bd:e2:fc:70:0c:24:cd:7c:ac:c4:a1:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 20 21:20:09 2024 GMT Not After : Mar 19 21:25:09 2025 GMT Subject: CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:10:31:a0:82:43:1e:22:c1:1d:8a:2d:f4:52: 22:d4:84:31:2f:93:25:b1:fc:00:21:88:ba:38:d3: ce:d4:d2:96:33:49:5c:6e:02:c6:71:a9:9a:3d:ba: 90:21:8a:43:8e:fa:2e:78:ca:df:f6:ed:95:a1:1e: 60:92:1f:37:6e:12:4c:7d:93:00:e5:84:17:7c:09: 41:1a:e2:b7:c0:a5:76:e1:17:5c:7a:47:85:94:17: b0:ea:78:0f:cd:26:4d:73:87:f8:ba:80:14:d3:74: d3:7c:02:d7:40:9f:2c:7c:43:a8:d6:9f:0d:b4:f7: f2:94:c8:0f:50:4e:db:38:46:eb:e5:99:22:f8:b6: 1f:58:e8:53:a4:71:e6:2f:1f:ea:3e:19:b5:8c:09: 20:3e:6a:09:0d:e5:3a:e9:97:9a:2a:46:49:1c:ec: b1:b1:c4:0d:3e:c4:c3:a6:64:05:f5:fe:41:5f:6f: 1d:dd:18:59:00:5b:0c:dc:0e:1d:6b:3a:d9:e7:11: 5e:af:5a:ff:01:2f:ce:be:6a:a2:0c:f9:7e:55:40: 8a:11:c0:22:c5:4f:30:5a:aa:77:1d:33:1f:91:20: 02:3e:8c:e0:a7:56:3e:2d:96:70:78:6b:c0:6f:06: aa:93:41:8f:f2:79:57:ff:3a:69:01:29:7c:1d:3a: 06:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.84.4.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:92:05:d9:7e:4a:53:6c:6e:29:48:68:fe:0b:82:b3:d2:2f: b3:90:e4:e5:36:18:f5:50:d9:36:75:b8:96:39:22:21:48:50: 06:3c:1a:9e:5b:ca:4f:50:c3:be:f7:f6:2f:d1:2e:23:f3:8e: e3:85:50:7d:df:c2:64:b7:7b:4f:30:ae:7d:17:5c:b2:08:58: 6e:86:e7:34:50:88:b9:98:03:7f:73:ac:10:ea:23:d6:3e:b7: 9d:f1:ce:db:bd:c9:42:f4:da:c5:af:c0:9b:4f:fb:57:59:12: 48:6e:2f:2d:53:15:af:67:4f:99:9e:2c:85:32:21:cf:af:7c: 66:ef:8b:ef:bd:aa:b4:f5:d3:dc:88:61:ec:4e:ee:03:22:f4: 9f:b4:37:4a:59:8e:46:8a:be:23:78:db:e0:a6:e9:83:ce:fe: 97:a2:95:af:16:85:97:08:fa:e9:00:f7:71:0f:b4:9f:64:5b: 25:db:a1:1c:9a:03:24:44:88:0e:1b:e8:9c:ed:4b:11:56:3c: b0:d8:68:13:23:d6:c2:67:b3:a4:7e:e7:b0:2d:ff:96:b0:4b: 22:66:21:69:53:d6:89:67:bf:8b:c2:18:a8:f9:df:0d:2d:2b: 2b:9e:c1:8c:99:a2:ba:9b:72:b4:5e:24:17:2b:0f:b6:33:88: b5:7c:0b:f4 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUSNGFu4bVc9G94vxwDCTNfKzEoc8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMyMDIxMjAwOVoX DTI1MDMxOTIxMjUwOVowMzExMC8GA1UEAxMoM0MwM0NGOTUxNzgxOTcwQzZEMEFE QkU4RkFDRkVDNkE0Q0RENzgzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANQQMaCCQx4iwR2KLfRSItSEMS+TJbH8ACGIujjTztTSljNJXG4CxnGpmj26 kCGKQ476LnjK3/btlaEeYJIfN24STH2TAOWEF3wJQRrit8ClduEXXHpHhZQXsOp4 D80mTXOH+LqAFNN003wC10CfLHxDqNafDbT38pTID1BO2zhG6+WZIvi2H1joU6Rx 5i8f6j4ZtYwJID5qCQ3lOumXmipGSRzssbHEDT7Ew6ZkBfX+QV9vHd0YWQBbDNwO HWs62ecRXq9a/wEvzr5qogz5flVAihHAIsVPMFqqdx0zH5EgAj6M4KdWPi2WcHhr wG8GqpNBj/J5V/86aQEpfB06BmkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDwDz5UXgZcMbQrb6PrP7GpM3Xg2MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mNjE0Y2VlMC01ZGY2LTRiMmItYmIzZC1mNjgzMjEzZTdjMzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y2MTRjZWUw LTVkZjYtNGIyYi1iYjNkLWY2ODMyMTNlN2MzMy8wLzNDMDNDRjk1MTc4MTk3MEM2 RDBBREJFOEZBQ0ZFQzZBNENERDc4MzYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnVAQwDQYJKoZIhvcNAQELBQADggEBAB2SBdl+SlNsbilIaP4LgrPSL7OQ5OU2 GPVQ2TZ1uJY5IiFIUAY8Gp5byk9Qw7739i/RLiPzjuOFUH3fwmS3e08wrn0XXLII WG6G5zRQiLmYA39zrBDqI9Y+t53xztu9yUL02sWvwJtP+1dZEkhuLy1TFa9nT5me LIUyIc+vfGbvi++9qrT109yIYexO7gMi9J+0N0pZjkaKviN42+Cm6YPO/peila8W hZcI+ukA93EPtJ9kWyXboRyaAyREiA4b6JztSxFWPLDYaBMj1sJns6R+57At/5aw SyJmIWlT1olnv4vCGKj53w0tKyuewYyZorqbcrReJBcrD7YziLV8C/Q= -----END CERTIFICATE-----Generated at Thu May 9 00:29:10 2024 by rpki-client on console-ams.rpki-client.org