$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer File: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer (raw, json) Hash identifier: 5svL6PW0CPqrPgZGHTjR0AnPaY6WSZaphU9web0AMsg= Subject key identifier: 3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3A11BF9294614622F6BEB3ABCE1E52C57C8A3E56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft caRepository: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 27 Aug 2024 16:47:33 +0000 Certificate not after: Tue 26 Aug 2025 16:52:33 +0000 Subordinate resources: IP: 103.19.158.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:11:bf:92:94:61:46:22:f6:be:b3:ab:ce:1e:52:c5:7c:8a:3e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 27 16:47:33 2024 GMT Not After : Aug 26 16:52:33 2025 GMT Subject: CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:79:17:b3:0d:4e:18:da:4a:d0:ec:8f:e3:e6: d5:e0:12:95:4a:63:8a:29:70:38:fe:c2:2e:6c:79: 8c:20:bd:4a:2e:d4:d5:4c:77:d4:0e:50:fe:7b:0c: ef:9e:a7:06:4d:80:8f:21:c9:33:cc:73:04:4f:be: b0:cf:ca:ff:45:1e:64:fc:d9:d8:6a:cd:e4:64:35: 06:61:c4:a5:e1:b5:99:24:55:17:98:cf:71:fd:23: 1d:3e:0a:d0:3f:d0:59:19:8f:33:33:ae:52:d4:7e: 24:c4:a6:31:83:d8:a3:60:f2:fb:0c:72:c3:44:7e: ed:24:42:58:c3:1f:cc:a8:37:17:66:9d:16:cf:74: 3b:41:12:3b:49:6f:26:72:92:10:c9:cc:24:5f:c3: f8:5e:5e:34:f3:fb:70:89:db:9b:97:85:01:09:16: 0b:94:63:79:bd:4f:5e:7e:a6:3c:c2:b1:aa:18:88: 1b:93:7d:c4:03:f5:36:0f:10:ca:c4:4c:bb:1b:03: 04:00:00:5a:63:da:fd:1c:7c:f8:b9:0b:ab:64:33: 56:f5:0f:14:62:3d:b3:bd:74:bb:f9:11:64:82:67: 6f:44:49:aa:63:48:a1:0b:f9:e1:b0:2b:9e:14:f9: bc:02:93:1b:33:7e:1f:04:c7:09:33:4e:3b:8d:f1: de:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.158.0/23 Signature Algorithm: sha256WithRSAEncryption 70:cb:1c:39:de:d1:f4:d9:90:5f:9d:4e:c8:80:fc:90:c9:12: d1:52:86:7f:31:41:c6:7d:55:34:5f:1f:bb:34:35:b1:58:68: 87:f2:21:78:47:08:8d:73:c5:37:c6:6c:fa:ef:ee:95:3d:2d: f9:74:ad:9f:92:80:44:df:6e:5f:af:10:b7:86:da:05:e3:49: 07:3d:51:88:58:52:07:19:79:4f:38:0e:89:37:ad:a1:e1:14: ab:df:07:af:46:81:6f:9f:30:14:ba:a7:ab:a1:f4:bd:6f:d2: e1:93:31:3b:bd:7a:53:49:f7:80:50:2b:e0:e2:8d:81:3c:9f: a3:de:39:69:d2:36:d8:42:d4:17:8f:bd:cf:1f:b2:e3:06:9b: 9c:6b:fb:e7:38:19:6f:e2:d5:6e:d2:9a:98:ea:66:ab:76:b8: 8e:44:1a:67:b8:4d:0e:55:f7:88:f2:54:1d:ee:a5:1d:d8:e3: 75:5a:b1:fd:50:77:0b:39:b7:d5:e5:c1:8a:b0:c2:4d:51:81: aa:99:e1:db:64:d0:05:24:31:9e:e5:d9:aa:5d:33:50:4e:cf: 5d:6d:1b:1a:4f:40:dd:89:60:0a:a5:c7:cf:bc:d8:64:70:2a: a6:cb:0e:a1:c1:0d:0e:53:ee:21:16:34:96:6b:0d:22:73:9f: 63:c4:11:53 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUOhG/kpRhRiL2vrOrzh5SxXyKPlYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgyNzE2NDczM1oX DTI1MDgyNjE2NTIzM1owMzExMC8GA1UEAxMoM0VERENBNDBDM0YwQ0Y5MTJCMDAz QkIxOUY5QzAzRTQ4QjQzRjcyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKR5F7MNThjaStDsj+Pm1eASlUpjiilwOP7CLmx5jCC9Si7U1Ux31A5Q/nsM 756nBk2AjyHJM8xzBE++sM/K/0UeZPzZ2GrN5GQ1BmHEpeG1mSRVF5jPcf0jHT4K 0D/QWRmPMzOuUtR+JMSmMYPYo2Dy+wxyw0R+7SRCWMMfzKg3F2adFs90O0ESO0lv JnKSEMnMJF/D+F5eNPP7cInbm5eFAQkWC5Rjeb1PXn6mPMKxqhiIG5N9xAP1Ng8Q ysRMuxsDBAAAWmPa/Rx8+LkLq2QzVvUPFGI9s710u/kRZIJnb0RJqmNIoQv54bAr nhT5vAKTGzN+HwTHCTNOO43x3usCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD7dykDD8M+RKwA7sZ+cA+SLQ/cnMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81Y2RlOGVjZS05N2EyLTRiMGQtYTA2NC0xN2NlYTYxZjQ1Y2MvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjZGU4ZWNl LTk3YTItNGIwZC1hMDY0LTE3Y2VhNjFmNDVjYy8wLzNFRERDQTQwQzNGMENGOTEy QjAwM0JCMTlGOUMwM0U0OEI0M0Y3MjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnE54wDQYJKoZIhvcNAQELBQADggEBAHDLHDne0fTZkF+dTsiA/JDJEtFShn8x QcZ9VTRfH7s0NbFYaIfyIXhHCI1zxTfGbPrv7pU9Lfl0rZ+SgETfbl+vELeG2gXj SQc9UYhYUgcZeU84Dok3raHhFKvfB69GgW+fMBS6p6uh9L1v0uGTMTu9elNJ94BQ K+DijYE8n6PeOWnSNthC1BePvc8fsuMGm5xr++c4GW/i1W7SmpjqZqt2uI5EGme4 TQ5V94jyVB3upR3Y43Vasf1Qdws5t9XlwYqwwk1RgaqZ4dtk0AUkMZ7l2apdM1BO z11tGxpPQN2JYAqlx8+82GRwKqbLDqHBDQ5T7iEWNJZrDSJzn2PEEVM= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:40 2024 by rpki-client on console-ams.rpki-client.org