$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer File: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer (raw, json) Hash identifier: dy+5I+MjU5al2KV7IVQoQY3dCUVWA5Ra/J81qJJzSFc= Subject key identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5EA254696EF1CBFDD457C3CE5EC51661F71C9F6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft caRepository: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 20 Feb 2025 03:45:49 +0000 Certificate not after: Thu 19 Feb 2026 03:50:49 +0000 Subordinate resources: IP: 103.84.4.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:a2:54:69:6e:f1:cb:fd:d4:57:c3:ce:5e:c5:16:61:f7:1c:9f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 20 03:45:49 2025 GMT Not After : Feb 19 03:50:49 2026 GMT Subject: CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:10:31:a0:82:43:1e:22:c1:1d:8a:2d:f4:52: 22:d4:84:31:2f:93:25:b1:fc:00:21:88:ba:38:d3: ce:d4:d2:96:33:49:5c:6e:02:c6:71:a9:9a:3d:ba: 90:21:8a:43:8e:fa:2e:78:ca:df:f6:ed:95:a1:1e: 60:92:1f:37:6e:12:4c:7d:93:00:e5:84:17:7c:09: 41:1a:e2:b7:c0:a5:76:e1:17:5c:7a:47:85:94:17: b0:ea:78:0f:cd:26:4d:73:87:f8:ba:80:14:d3:74: d3:7c:02:d7:40:9f:2c:7c:43:a8:d6:9f:0d:b4:f7: f2:94:c8:0f:50:4e:db:38:46:eb:e5:99:22:f8:b6: 1f:58:e8:53:a4:71:e6:2f:1f:ea:3e:19:b5:8c:09: 20:3e:6a:09:0d:e5:3a:e9:97:9a:2a:46:49:1c:ec: b1:b1:c4:0d:3e:c4:c3:a6:64:05:f5:fe:41:5f:6f: 1d:dd:18:59:00:5b:0c:dc:0e:1d:6b:3a:d9:e7:11: 5e:af:5a:ff:01:2f:ce:be:6a:a2:0c:f9:7e:55:40: 8a:11:c0:22:c5:4f:30:5a:aa:77:1d:33:1f:91:20: 02:3e:8c:e0:a7:56:3e:2d:96:70:78:6b:c0:6f:06: aa:93:41:8f:f2:79:57:ff:3a:69:01:29:7c:1d:3a: 06:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.84.4.0/22 Signature Algorithm: sha256WithRSAEncryption 17:e4:e3:b7:fb:50:4b:6d:f9:23:f6:e0:d3:bb:b4:96:4e:b5: f2:c0:99:ef:aa:e6:9c:4d:99:61:d2:e2:66:54:ac:b8:11:33: 17:4d:b6:41:73:9f:74:12:80:36:e4:c2:16:b8:e1:9d:44:a6: 5b:4a:e9:61:55:2f:be:91:7d:85:55:35:29:a2:74:8c:8e:fc: ee:a5:31:8b:6e:c8:2a:1a:2c:a0:b4:6e:14:e3:8b:45:ea:3c: d3:71:75:6a:05:62:e3:97:2f:5d:a5:d7:f8:7f:99:d3:fe:09: 5d:8d:96:d0:14:a3:0b:fb:70:db:9f:60:eb:e0:d2:8a:1a:da: 10:0e:f5:87:80:59:48:79:b4:fa:24:95:67:57:61:ae:9e:39: f1:d9:d9:96:c0:dd:66:34:9c:a2:f1:1e:c6:c8:4f:ae:a0:78: df:c5:03:bc:5f:63:c5:00:47:37:2f:c8:c0:ce:46:2c:9c:b9: 71:77:05:91:9b:e1:6a:64:f1:95:dc:62:18:f4:e1:5d:9b:82: e1:c9:dc:2c:e0:3e:7d:06:fb:18:15:6d:21:4e:e9:fc:1c:43: da:44:b0:c2:20:0e:2c:51:12:99:a3:af:94:3a:db:f7:e7:57: 8c:60:4f:17:0f:38:8b:fe:e2:ef:4a:39:8e:20:bb:8a:69:2d: f9:2e:26:84 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXqJUaW7xy/3UV8POXsUWYfccn20wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIyMDAzNDU0OVoX DTI2MDIxOTAzNTA0OVowMzExMC8GA1UEAxMoM0MwM0NGOTUxNzgxOTcwQzZEMEFE QkU4RkFDRkVDNkE0Q0RENzgzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANQQMaCCQx4iwR2KLfRSItSEMS+TJbH8ACGIujjTztTSljNJXG4CxnGpmj26 kCGKQ476LnjK3/btlaEeYJIfN24STH2TAOWEF3wJQRrit8ClduEXXHpHhZQXsOp4 D80mTXOH+LqAFNN003wC10CfLHxDqNafDbT38pTID1BO2zhG6+WZIvi2H1joU6Rx 5i8f6j4ZtYwJID5qCQ3lOumXmipGSRzssbHEDT7Ew6ZkBfX+QV9vHd0YWQBbDNwO HWs62ecRXq9a/wEvzr5qogz5flVAihHAIsVPMFqqdx0zH5EgAj6M4KdWPi2WcHhr wG8GqpNBj/J5V/86aQEpfB06BmkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDwDz5UXgZcMbQrb6PrP7GpM3Xg2MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mNjE0Y2VlMC01ZGY2LTRiMmItYmIzZC1mNjgzMjEzZTdjMzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y2MTRjZWUw LTVkZjYtNGIyYi1iYjNkLWY2ODMyMTNlN2MzMy8wLzNDMDNDRjk1MTc4MTk3MEM2 RDBBREJFOEZBQ0ZFQzZBNENERDc4MzYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnVAQwDQYJKoZIhvcNAQELBQADggEBABfk47f7UEtt+SP24NO7tJZOtfLAme+q 5pxNmWHS4mZUrLgRMxdNtkFzn3QSgDbkwha44Z1EpltK6WFVL76RfYVVNSmidIyO /O6lMYtuyCoaLKC0bhTji0XqPNNxdWoFYuOXL12l1/h/mdP+CV2NltAUowv7cNuf YOvg0ooa2hAO9YeAWUh5tPoklWdXYa6eOfHZ2ZbA3WY0nKLxHsbIT66geN/FA7xf Y8UARzcvyMDORiycuXF3BZGb4Wpk8ZXcYhj04V2bguHJ3CzgPn0G+xgVbSFO6fwc Q9pEsMIgDixREpmjr5Q62/fnV4xgTxcPOIv+4u9KOY4gu4ppLfkuJoQ= -----END CERTIFICATE-----Generated at Sat Apr 5 06:24:12 2025 by rpki-client