$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer File: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer (raw, json) Hash identifier: 6Gi3j8RAAmtMIrNUoIQsULkH4xNDbJICoIDbQpDt3KA= Subject key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 31B2B1EE06B55D01BD9A94DEB5314944897350A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft caRepository: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 19 Oct 2024 23:25:49 +0000 Certificate not after: Sat 18 Oct 2025 23:30:49 +0000 Subordinate resources: IP: 103.4.76.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b2:b1:ee:06:b5:5d:01:bd:9a:94:de:b5:31:49:44:89:73:50:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 19 23:25:49 2024 GMT Not After : Oct 18 23:30:49 2025 GMT Subject: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c1:b0:d5:58:6a:46:cb:52:3e:ed:4e:88:59: 9b:f7:9f:f2:c9:d7:09:2b:6f:f3:f4:f7:d4:d9:4f: c5:60:d8:32:1c:4c:e9:56:ad:1a:d8:ba:0f:8b:10: 9d:8d:f0:86:7c:a3:a6:f6:25:47:ac:fc:30:e9:f5: 49:4a:a0:1f:96:b2:03:da:81:3a:2c:c2:15:52:e2: a2:eb:e2:4d:60:8d:34:d8:0f:41:d3:9e:11:36:af: 93:5a:6a:7a:d6:50:3b:df:3b:c0:21:ac:51:62:0e: 6d:8b:09:09:b7:b1:3d:73:9e:a2:08:86:4f:ea:e5: df:21:f9:cd:d6:42:17:b5:03:60:6b:98:b6:79:b6: bf:21:79:50:ce:ff:f4:35:97:ba:ab:61:cc:78:0d: c3:29:1c:b6:9a:fd:26:4e:da:0e:27:75:81:de:cd: f4:15:bd:3b:a0:b2:ba:27:b1:88:ba:f3:3e:c1:d0: 01:2c:84:7c:b9:28:fd:86:b6:83:d2:8b:12:5e:6a: 2e:b1:f1:b5:32:c7:66:9d:1d:a2:b5:6a:1a:04:f3: 53:84:b0:ee:2a:8a:9a:ac:fc:c7:48:11:f0:bb:43: b4:4e:a7:9c:87:dc:68:c9:c2:f9:1d:f7:29:2d:30: 68:68:fb:69:b5:1a:4d:9e:7e:64:9c:80:79:0d:d9: 5c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.76.0/23 Signature Algorithm: sha256WithRSAEncryption 34:4c:dc:72:55:b5:7d:98:36:a5:3a:48:1d:b1:b1:cb:78:12: dc:38:28:38:2a:99:f9:42:ed:b1:25:43:a1:85:c2:ea:88:11: 9b:e3:52:b3:b9:5b:aa:a3:1e:8a:32:3e:7d:92:a2:65:4d:ac: 68:ff:af:ac:e2:ea:8c:c4:ae:70:b6:43:ab:27:20:08:de:57: cf:3b:c6:6a:b2:79:94:34:ec:fe:72:ae:3d:a8:ab:55:94:b4: 5e:9c:3c:bd:57:e1:4c:15:1f:a5:89:9b:4d:d9:db:b5:25:28: c7:4e:e8:34:54:d2:75:53:95:d6:61:8d:e0:0a:97:a4:72:a1: 21:34:7b:00:0b:1d:9d:72:03:0d:42:aa:9f:19:67:30:7c:da: d7:ad:22:09:71:d8:68:f5:14:f4:43:a7:4a:ca:dd:b0:e7:ab: 4b:1e:3b:0f:95:15:c0:53:50:99:b1:b8:0a:1d:68:5a:08:9d: 26:9c:f1:b2:ed:45:3b:d3:5a:c4:b3:94:1d:f1:7f:de:f9:fe: 50:ee:84:d3:1e:c9:21:89:ed:d1:dd:76:74:47:21:66:62:60: 36:26:52:50:d9:8d:30:9f:e9:af:33:a4:c3:78:4f:9a:7b:f7: 6a:da:b1:51:85:89:88:56:04:fc:19:e0:6d:3b:0f:bd:4a:6f: 71:47:9b:e6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUMbKx7ga1XQG9mpTetTFJRIlzUKYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAxOTIzMjU0OVoX DTI1MTAxODIzMzA0OVowMzExMC8GA1UEAxMoM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3 QkNEMzA5MUQ3NTRFQTgxNTZEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANXBsNVYakbLUj7tTohZm/ef8snXCStv8/T31NlPxWDYMhxM6VatGti6D4sQ nY3whnyjpvYlR6z8MOn1SUqgH5ayA9qBOizCFVLiouviTWCNNNgPQdOeETavk1pq etZQO987wCGsUWIObYsJCbexPXOeogiGT+rl3yH5zdZCF7UDYGuYtnm2vyF5UM7/ 9DWXuqthzHgNwykctpr9Jk7aDid1gd7N9BW9O6CyuiexiLrzPsHQASyEfLko/Ya2 g9KLEl5qLrHxtTLHZp0dorVqGgTzU4Sw7iqKmqz8x0gR8LtDtE6nnIfcaMnC+R33 KS0waGj7abUaTZ5+ZJyAeQ3ZXJUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD+/6S1bIg6bNrN7zTCR11TqgVbTMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83Mjk0MDFkMC0yNmE3LTQ3ODctYjY4YS0xODJiMTUyYTk1MTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcyOTQwMWQw LTI2YTctNDc4Ny1iNjhhLTE4MmIxNTJhOTUxMy8wLzNGQkZFOTJENUIyMjBFOUIz NkIzN0JDRDMwOTFENzU0RUE4MTU2RDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnBEwwDQYJKoZIhvcNAQELBQADggEBADRM3HJVtX2YNqU6SB2xsct4Etw4KDgq mflC7bElQ6GFwuqIEZvjUrO5W6qjHooyPn2SomVNrGj/r6zi6ozErnC2Q6snIAje V887xmqyeZQ07P5yrj2oq1WUtF6cPL1X4UwVH6WJm03Z27UlKMdO6DRU0nVTldZh jeAKl6RyoSE0ewALHZ1yAw1Cqp8ZZzB82tetIglx2Gj1FPRDp0rK3bDnq0seOw+V FcBTUJmxuAodaFoInSac8bLtRTvTWsSzlB3xf975/lDuhNMeySGJ7dHddnRHIWZi YDYmUlDZjTCf6a8zpMN4T5p792rasVGFiYhWBPwZ4G07D71Kb3FHm+Y= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:16 2024 by rpki-client on console-fra.rpki-client.org