$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer File: 3E788037924369AA3B8E52A5857804BE5D285FA2.cer (raw, json) Hash identifier: Ww0qJCrcRzroeErurwr9cXs+yDUaMBBmGJekjoQ5Hxc= Subject key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 21271B8EB700909E88A4F82D8A3BEE26A72A13A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft caRepository: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 29 Nov 2023 11:31:20 +0000 Certificate not after: Wed 27 Nov 2024 11:36:20 +0000 Subordinate resources: IP: 103.162.54.0/24 IP: 103.179.117.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:27:1b:8e:b7:00:90:9e:88:a4:f8:2d:8a:3b:ee:26:a7:2a:13:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 29 11:31:20 2023 GMT Not After : Nov 27 11:36:20 2024 GMT Subject: CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e9:6f:03:7a:e8:6e:39:7b:34:df:12:4c:4d: aa:c9:40:67:2b:c8:6e:b8:b2:55:33:d7:1d:9b:f9: f1:99:65:11:67:b7:52:4b:d9:2e:b7:12:53:17:d2: d6:c5:69:e0:15:9a:e4:98:fe:63:0a:ab:b9:38:99: 86:63:44:3f:0e:df:dd:f5:31:f2:44:43:70:35:16: f8:81:ad:0f:19:65:f8:59:8d:7c:50:8e:72:1d:bc: 58:6e:bf:a8:5b:75:03:e2:ae:53:d5:8e:9f:c8:4d: 4c:9b:5d:19:72:2c:db:50:9a:4a:5f:21:f0:40:1d: 69:cf:99:e3:0c:54:99:15:42:ae:51:08:a0:8b:a2: dc:9a:d8:37:25:86:11:b0:60:ad:01:4a:9a:07:a4: 27:72:f6:24:61:77:63:55:8c:b5:03:81:54:8a:00: cf:9b:0a:12:9c:18:e1:8f:d0:96:d7:c3:c0:9e:3f: 2f:18:c5:ae:07:30:c5:b1:74:e4:2a:d1:49:ba:43: df:e0:b0:4a:7d:ca:d5:84:d6:78:5c:a8:0d:03:06: 5c:02:db:58:06:14:14:f2:e8:bf:14:db:17:37:cc: 49:52:fc:28:a7:ca:3c:d4:3f:e2:45:97:33:b6:2d: 3b:71:f8:b5:83:32:30:72:65:9d:d7:e9:2d:7d:c7: 65:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.54.0/24 103.179.117.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:3c:27:47:8d:2d:83:4c:d0:24:b6:f5:33:b9:dc:3e:dd:34: 38:27:6c:69:03:6f:74:b5:c5:0a:1e:c6:f0:ac:78:0c:50:ba: f0:a7:a8:a2:ba:ea:9a:c4:94:99:00:76:36:89:ef:29:61:50: c3:bc:3b:c0:5f:2a:a4:b0:c2:19:44:7d:17:bb:be:ab:a5:1d: f9:ad:98:74:af:4e:24:04:d2:a8:27:a3:ec:ac:21:db:63:a6: fd:24:5a:73:9d:54:f1:64:89:a9:ed:08:84:9d:1f:2b:3e:05: c2:5b:b6:c1:34:5a:bc:16:df:3d:4d:73:06:c2:2a:65:a8:f8: 2b:3c:16:aa:76:50:59:1a:be:23:4c:1d:44:63:c0:d7:c1:33: 01:29:14:17:12:a3:9b:e9:05:f5:e3:57:47:51:10:3e:e3:aa: fa:88:95:7e:9c:cc:15:b4:1a:f9:c1:11:22:c5:f3:7a:a2:f2: 26:83:20:db:2b:24:52:25:e7:9a:ab:53:09:32:82:5b:5d:c2: 5b:ab:0e:5e:ce:bb:84:68:92:89:56:e0:3d:86:4e:80:3a:03: 68:9a:a0:1e:3a:25:c4:43:e5:ba:a7:65:82:23:a7:eb:ec:0b: af:ee:78:e4:29:3c:20:18:c6:ca:76:4f:a8:3b:c3:01:c9:28: ad:ae:6f:3b -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUIScbjrcAkJ6IpPgtijvuJqcqE6kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEyOTExMzEyMFoX DTI0MTEyNzExMzYyMFowMzExMC8GA1UEAxMoM0U3ODgwMzc5MjQzNjlBQTNCOEU1 MkE1ODU3ODA0QkU1RDI4NUZBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALfpbwN66G45ezTfEkxNqslAZyvIbriyVTPXHZv58ZllEWe3UkvZLrcSUxfS 1sVp4BWa5Jj+YwqruTiZhmNEPw7f3fUx8kRDcDUW+IGtDxll+FmNfFCOch28WG6/ qFt1A+KuU9WOn8hNTJtdGXIs21CaSl8h8EAdac+Z4wxUmRVCrlEIoIui3JrYNyWG EbBgrQFKmgekJ3L2JGF3Y1WMtQOBVIoAz5sKEpwY4Y/QltfDwJ4/LxjFrgcwxbF0 5CrRSbpD3+CwSn3K1YTWeFyoDQMGXALbWAYUFPLovxTbFzfMSVL8KKfKPNQ/4kWX M7YtO3H4tYMyMHJlndfpLX3HZX0CAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD54gDeSQ2mqO45SpYV4BL5dKF+iMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iODUzYWZkZC0yZTA5LTQ3NzMtOGJlNC02ZmQwZWU5MGIwNDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I4NTNhZmRk LTJlMDktNDc3My04YmU0LTZmZDBlZTkwYjA0MC8wLzNFNzg4MDM3OTI0MzY5QUEz QjhFNTJBNTg1NzgwNEJFNUQyODVGQTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BABnojYDBABns3UwDQYJKoZIhvcNAQELBQADggEBAD88J0eNLYNM0CS29TO53D7d NDgnbGkDb3S1xQoexvCseAxQuvCnqKK66prElJkAdjaJ7ylhUMO8O8BfKqSwwhlE fRe7vqulHfmtmHSvTiQE0qgno+ysIdtjpv0kWnOdVPFkiantCISdHys+BcJbtsE0 WrwW3z1NcwbCKmWo+Cs8Fqp2UFkaviNMHURjwNfBMwEpFBcSo5vpBfXjV0dRED7j qvqIlX6czBW0GvnBESLF83qi8iaDINsrJFIl55qrUwkygltdwlurDl7Ou4RokolW 4D2GToA6A2iaoB46JcRD5bqnZYIjp+vsC6/ueOQpPCAYxsp2T6g7wwHJKK2ubzs= -----END CERTIFICATE-----Generated at Thu May 9 00:36:59 2024 by rpki-client on console-fra.rpki-client.org