$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3D13C6FB9DB22CE134706325357C20E1DC9A1269.cer File: 3D13C6FB9DB22CE134706325357C20E1DC9A1269.cer (raw, json) Hash identifier: 4agRDRezHeGs8g9VPhUesY/8FmxPI0GatdlOAHfQmaM= Subject key identifier: 3D:13:C6:FB:9D:B2:2C:E1:34:70:63:25:35:7C:20:E1:DC:9A:12:69 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4CC44354034EF76BE9BD81ABAECEBE709C1FFD57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3D13C6FB9DB22CE134706325357C20E1DC9A1269.mft caRepository: rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 26 Oct 2023 16:36:39 +0000 Certificate not after: Thu 24 Oct 2024 16:41:39 +0000 Subordinate resources: IP: 103.24.56.0/22 IP: 202.9.85.0/24 IP: 2001:df0:a8::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c4:43:54:03:4e:f7:6b:e9:bd:81:ab:ae:ce:be:70:9c:1f:fd:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 26 16:36:39 2023 GMT Not After : Oct 24 16:41:39 2024 GMT Subject: CN=3D13C6FB9DB22CE134706325357C20E1DC9A1269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:17:5a:7a:fa:00:b3:03:3c:ef:b5:8b:0d:81: fb:4d:26:12:43:6d:84:31:cf:c3:a7:c0:be:1d:3b: d8:a3:94:56:f6:45:69:06:32:b3:15:3d:42:76:b8: 47:6a:62:d6:52:6d:c3:de:cf:5e:c2:8e:c0:e3:ad: ba:e0:2a:75:c4:d7:bc:63:cf:11:80:cf:f9:92:38: c4:28:db:5b:f3:d4:4a:56:86:2d:da:f2:14:af:72: f5:83:4e:dc:e3:8b:cc:b5:ef:09:93:47:18:16:2e: 12:4a:ad:2d:38:33:c9:84:16:25:0a:63:5f:a1:04: 73:67:1b:1e:81:ff:34:cc:c5:a1:c8:7f:51:6e:7b: fc:51:fe:71:66:e3:ec:e2:ea:34:49:8c:84:01:49: 17:fc:f2:81:0d:33:4f:08:8f:fb:22:be:14:96:ca: 5c:49:8c:10:0f:40:e8:e3:0a:d7:e0:eb:1e:5f:53: 76:95:07:72:45:1a:8d:c8:ed:5b:6f:c0:47:08:0d: 6c:db:6b:c8:46:12:a1:72:e6:9a:f6:39:a5:06:2a: 40:06:d1:8a:71:10:7f:73:0a:23:ee:9d:2f:fe:7d: 8f:c6:80:d0:7b:ff:52:4f:0c:ef:ff:f8:fa:2a:0a: cd:77:cb:ad:aa:d7:1d:cd:1a:b8:1e:cb:71:1f:43: 15:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:13:C6:FB:9D:B2:2C:E1:34:70:63:25:35:7C:20:E1:DC:9A:12:69 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3D13C6FB9DB22CE134706325357C20E1DC9A1269.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.24.56.0/22 202.9.85.0/24 IPv6: 2001:df0:a8::/48 Signature Algorithm: sha256WithRSAEncryption 24:0e:bd:73:9c:4b:48:53:5a:f0:7b:02:07:df:9a:ea:b9:76: fd:4b:cd:a5:2d:c2:58:b2:29:eb:06:2d:e8:0c:33:65:39:3a: 16:56:f4:1f:eb:e3:85:e7:86:f6:41:62:37:21:53:a6:ee:0d: 03:76:e7:26:fd:d1:27:43:f3:3c:f9:06:a5:61:ef:fe:7c:03: b5:60:7c:0d:f5:d6:83:9a:a2:eb:10:95:c8:c3:a3:ad:8c:5f: b9:45:6c:1a:7a:c7:b4:20:fa:b5:03:db:94:55:b8:d9:f1:18: 94:43:31:cc:3b:ff:7c:cc:98:57:0b:17:17:e3:b6:22:d6:a6: 81:f7:c9:8a:2d:4d:b3:08:f3:68:43:61:5e:80:e2:84:9c:3a: b5:c2:35:c1:89:06:23:f5:d9:a4:06:35:aa:25:b6:5b:b6:b1: 2c:84:29:77:83:35:a7:3f:20:78:80:d6:89:17:b3:6a:36:3b: db:7e:55:2f:eb:8b:4b:98:37:be:ad:68:65:28:75:7d:a3:75: 2c:f9:b8:71:6b:b0:80:4c:04:b4:4e:c9:7f:7b:79:d8:b0:99: 23:9b:42:d0:ee:f7:68:e0:05:80:cf:57:a1:2d:bf:03:1f:87: ee:b2:97:18:e8:b4:0c:16:6c:57:b5:ab:77:10:ac:9a:da:6e: 91:21:01:dc -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUTMRDVANO92vpvYGrrs6+cJwf/VcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAyNjE2MzYzOVoX DTI0MTAyNDE2NDEzOVowMzExMC8GA1UEAxMoM0QxM0M2RkI5REIyMkNFMTM0NzA2 MzI1MzU3QzIwRTFEQzlBMTI2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALsXWnr6ALMDPO+1iw2B+00mEkNthDHPw6fAvh072KOUVvZFaQYysxU9Qna4 R2pi1lJtw97PXsKOwOOtuuAqdcTXvGPPEYDP+ZI4xCjbW/PUSlaGLdryFK9y9YNO 3OOLzLXvCZNHGBYuEkqtLTgzyYQWJQpjX6EEc2cbHoH/NMzFoch/UW57/FH+cWbj 7OLqNEmMhAFJF/zygQ0zTwiP+yK+FJbKXEmMEA9A6OMK1+DrHl9TdpUHckUajcjt W2/ARwgNbNtryEYSoXLmmvY5pQYqQAbRinEQf3MKI+6dL/59j8aA0Hv/Uk8M7//4 +ioKzXfLrarXHc0auB7LcR9DFesCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD0TxvudsizhNHBjJTV8IOHcmhJpMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZDFlZTVlMi0zMzhjLTRkMjAtODA3ZS1lNTBiNzU1ODNkYjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkMWVlNWUy LTMzOGMtNGQyMC04MDdlLWU1MGI3NTU4M2RiOC8wLzNEMTNDNkZCOURCMjJDRTEz NDcwNjMyNTM1N0MyMEUxREM5QTEyNjkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BAJnGDgDBADKCVUwDwQCAAIwCQMHACABDfAAqDANBgkqhkiG9w0BAQsFAAOCAQEA JA69c5xLSFNa8HsCB9+a6rl2/UvNpS3CWLIp6wYt6AwzZTk6Flb0H+vjheeG9kFi NyFTpu4NA3bnJv3RJ0PzPPkGpWHv/nwDtWB8DfXWg5qi6xCVyMOjrYxfuUVsGnrH tCD6tQPblFW42fEYlEMxzDv/fMyYVwsXF+O2ItamgffJii1NswjzaENhXoDihJw6 tcI1wYkGI/XZpAY1qiW2W7axLIQpd4M1pz8geIDWiRezajY7235VL+uLS5g3vq1o ZSh1faN1LPm4cWuwgEwEtE7Jf3t52LCZI5tC0O73aOAFgM9XoS2/Ax+H7rKXGOi0 DBZsV7WrdxCsmtpukSEB3A== -----END CERTIFICATE-----Generated at Wed May 8 17:45:17 2024 by rpki-client on console-ams.rpki-client.org