$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer File: 3E788037924369AA3B8E52A5857804BE5D285FA2.cer (raw, json) Hash identifier: vf+Dp+/mVXBr3n2OqQj4WYUAXajZ9Qvlj6picIrwHpk= Subject key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6F8796BB7B93BF306C98F65415C54FA1258141FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft caRepository: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 30 Oct 2024 13:44:52 +0000 Certificate not after: Wed 29 Oct 2025 13:49:52 +0000 Subordinate resources: IP: 103.162.54.0/24 IP: 103.179.117.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:87:96:bb:7b:93:bf:30:6c:98:f6:54:15:c5:4f:a1:25:81:41:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 30 13:44:52 2024 GMT Not After : Oct 29 13:49:52 2025 GMT Subject: CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e9:6f:03:7a:e8:6e:39:7b:34:df:12:4c:4d: aa:c9:40:67:2b:c8:6e:b8:b2:55:33:d7:1d:9b:f9: f1:99:65:11:67:b7:52:4b:d9:2e:b7:12:53:17:d2: d6:c5:69:e0:15:9a:e4:98:fe:63:0a:ab:b9:38:99: 86:63:44:3f:0e:df:dd:f5:31:f2:44:43:70:35:16: f8:81:ad:0f:19:65:f8:59:8d:7c:50:8e:72:1d:bc: 58:6e:bf:a8:5b:75:03:e2:ae:53:d5:8e:9f:c8:4d: 4c:9b:5d:19:72:2c:db:50:9a:4a:5f:21:f0:40:1d: 69:cf:99:e3:0c:54:99:15:42:ae:51:08:a0:8b:a2: dc:9a:d8:37:25:86:11:b0:60:ad:01:4a:9a:07:a4: 27:72:f6:24:61:77:63:55:8c:b5:03:81:54:8a:00: cf:9b:0a:12:9c:18:e1:8f:d0:96:d7:c3:c0:9e:3f: 2f:18:c5:ae:07:30:c5:b1:74:e4:2a:d1:49:ba:43: df:e0:b0:4a:7d:ca:d5:84:d6:78:5c:a8:0d:03:06: 5c:02:db:58:06:14:14:f2:e8:bf:14:db:17:37:cc: 49:52:fc:28:a7:ca:3c:d4:3f:e2:45:97:33:b6:2d: 3b:71:f8:b5:83:32:30:72:65:9d:d7:e9:2d:7d:c7: 65:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.54.0/24 103.179.117.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:97:d8:ab:2a:5e:6d:1a:b0:69:16:e4:9e:20:e1:50:72:20: eb:bb:dc:81:09:19:d4:4a:e6:1e:50:6d:32:77:2b:91:f9:1b: 21:98:74:9a:70:ad:de:1b:13:00:03:ba:4e:d5:22:54:78:90: 07:32:15:17:34:39:30:6b:d6:54:18:af:ba:f6:46:55:e4:a1: 3a:98:b6:39:cd:6d:30:f6:d6:6f:dc:f9:4f:9c:a8:a1:4b:f0: 1c:99:46:f1:65:d3:86:ae:42:3e:5e:b9:5a:47:bc:d8:9b:7e: 19:96:53:67:b2:24:d9:4f:70:7f:e5:ad:10:93:79:6e:e1:55: ce:4e:95:38:30:9c:4c:a9:0d:b7:5a:07:c2:80:86:09:38:ec: b1:2d:75:f8:da:f7:55:bf:c7:08:96:70:26:83:45:0c:40:3b: 6d:1c:29:90:14:e3:55:77:94:10:05:86:d0:1d:60:67:05:aa: 48:1b:84:04:67:9a:e2:61:1a:c9:c0:4d:b9:04:16:cf:bf:5c: 0f:29:af:22:07:2e:e0:d6:e2:12:ef:86:9c:0c:c7:cf:3f:7a: 48:80:a5:79:99:4b:61:b0:3f:43:22:27:86:92:8e:17:35:f9: 61:be:4f:12:72:66:fa:52:a9:4b:a9:c0:54:cf:69:0b:7e:ca: 95:1d:f0:8b -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUb4eWu3uTvzBsmPZUFcVPoSWBQfowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAzMDEzNDQ1MloX DTI1MTAyOTEzNDk1MlowMzExMC8GA1UEAxMoM0U3ODgwMzc5MjQzNjlBQTNCOEU1 MkE1ODU3ODA0QkU1RDI4NUZBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALfpbwN66G45ezTfEkxNqslAZyvIbriyVTPXHZv58ZllEWe3UkvZLrcSUxfS 1sVp4BWa5Jj+YwqruTiZhmNEPw7f3fUx8kRDcDUW+IGtDxll+FmNfFCOch28WG6/ qFt1A+KuU9WOn8hNTJtdGXIs21CaSl8h8EAdac+Z4wxUmRVCrlEIoIui3JrYNyWG EbBgrQFKmgekJ3L2JGF3Y1WMtQOBVIoAz5sKEpwY4Y/QltfDwJ4/LxjFrgcwxbF0 5CrRSbpD3+CwSn3K1YTWeFyoDQMGXALbWAYUFPLovxTbFzfMSVL8KKfKPNQ/4kWX M7YtO3H4tYMyMHJlndfpLX3HZX0CAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD54gDeSQ2mqO45SpYV4BL5dKF+iMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iODUzYWZkZC0yZTA5LTQ3NzMtOGJlNC02ZmQwZWU5MGIwNDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I4NTNhZmRk LTJlMDktNDc3My04YmU0LTZmZDBlZTkwYjA0MC8wLzNFNzg4MDM3OTI0MzY5QUEz QjhFNTJBNTg1NzgwNEJFNUQyODVGQTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BABnojYDBABns3UwDQYJKoZIhvcNAQELBQADggEBAA+X2KsqXm0asGkW5J4g4VBy IOu73IEJGdRK5h5QbTJ3K5H5GyGYdJpwrd4bEwADuk7VIlR4kAcyFRc0OTBr1lQY r7r2RlXkoTqYtjnNbTD21m/c+U+cqKFL8ByZRvFl04auQj5euVpHvNibfhmWU2ey JNlPcH/lrRCTeW7hVc5OlTgwnEypDbdaB8KAhgk47LEtdfja91W/xwiWcCaDRQxA O20cKZAU41V3lBAFhtAdYGcFqkgbhARnmuJhGsnATbkEFs+/XA8pryIHLuDW4hLv hpwMx88/ekiApXmZS2GwP0MiJ4aSjhc1+WG+TxJyZvpSqUupwFTPaQt+ypUd8Is= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:47 2024 by rpki-client on console-fra.rpki-client.org