$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer File: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer (raw, json) Hash identifier: B45FnZjuCixmk/8+b6A2T90aVRdgxu6PkyvraIi8gpc= Subject key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0F138350C7FF9EA732804784EC88D4CEED82EBFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft caRepository: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 18 Nov 2023 17:17:14 +0000 Certificate not after: Sat 16 Nov 2024 17:22:14 +0000 Subordinate resources: IP: 103.4.76.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:13:83:50:c7:ff:9e:a7:32:80:47:84:ec:88:d4:ce:ed:82:eb:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 18 17:17:14 2023 GMT Not After : Nov 16 17:22:14 2024 GMT Subject: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c1:b0:d5:58:6a:46:cb:52:3e:ed:4e:88:59: 9b:f7:9f:f2:c9:d7:09:2b:6f:f3:f4:f7:d4:d9:4f: c5:60:d8:32:1c:4c:e9:56:ad:1a:d8:ba:0f:8b:10: 9d:8d:f0:86:7c:a3:a6:f6:25:47:ac:fc:30:e9:f5: 49:4a:a0:1f:96:b2:03:da:81:3a:2c:c2:15:52:e2: a2:eb:e2:4d:60:8d:34:d8:0f:41:d3:9e:11:36:af: 93:5a:6a:7a:d6:50:3b:df:3b:c0:21:ac:51:62:0e: 6d:8b:09:09:b7:b1:3d:73:9e:a2:08:86:4f:ea:e5: df:21:f9:cd:d6:42:17:b5:03:60:6b:98:b6:79:b6: bf:21:79:50:ce:ff:f4:35:97:ba:ab:61:cc:78:0d: c3:29:1c:b6:9a:fd:26:4e:da:0e:27:75:81:de:cd: f4:15:bd:3b:a0:b2:ba:27:b1:88:ba:f3:3e:c1:d0: 01:2c:84:7c:b9:28:fd:86:b6:83:d2:8b:12:5e:6a: 2e:b1:f1:b5:32:c7:66:9d:1d:a2:b5:6a:1a:04:f3: 53:84:b0:ee:2a:8a:9a:ac:fc:c7:48:11:f0:bb:43: b4:4e:a7:9c:87:dc:68:c9:c2:f9:1d:f7:29:2d:30: 68:68:fb:69:b5:1a:4d:9e:7e:64:9c:80:79:0d:d9: 5c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.76.0/23 Signature Algorithm: sha256WithRSAEncryption 99:44:e6:87:e9:60:cd:c0:1b:9a:b9:ec:98:a7:ae:3b:21:34: d3:4c:75:58:64:3d:a6:b5:13:32:c6:00:72:e5:c0:76:25:92: 2e:81:37:eb:36:e3:26:dd:16:3a:b3:52:41:7b:72:18:86:4e: 14:d1:57:8b:8c:47:44:df:88:6d:7f:73:8d:c1:1c:8f:d4:79: 0f:12:a5:d9:e4:9b:06:00:51:a3:b8:41:52:0b:68:5d:eb:3a: dd:11:77:ee:f3:6d:44:be:a4:4d:12:44:a8:7c:7e:40:62:8f: ce:dc:ea:e9:c5:15:75:da:81:55:cc:e5:7d:7d:71:be:01:6d: 03:b6:5c:9f:6c:5d:03:3f:24:41:a5:43:67:27:ea:1b:9b:b7: d2:6c:f4:37:66:b6:36:a6:35:5a:a0:66:40:f2:f2:d6:7c:5d: 62:96:a4:23:49:f9:47:b6:ac:49:1f:18:b1:f2:88:44:f8:e7: 49:78:b5:55:78:8d:df:0b:43:3e:b7:14:50:16:b0:5f:49:4a: 85:95:0c:5b:88:24:e9:f2:65:19:d3:d4:e0:bc:08:e9:cf:ae: 82:43:64:b3:7b:79:fb:5b:11:ff:6c:36:e1:5b:71:09:ea:83: 9b:cc:91:da:e7:b7:cc:6a:b8:f1:c9:b0:bb:e5:ff:96:36:d4: ce:16:34:22 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUDxODUMf/nqcygEeE7IjUzu2C6/swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTExODE3MTcxNFoX DTI0MTExNjE3MjIxNFowMzExMC8GA1UEAxMoM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3 QkNEMzA5MUQ3NTRFQTgxNTZEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANXBsNVYakbLUj7tTohZm/ef8snXCStv8/T31NlPxWDYMhxM6VatGti6D4sQ nY3whnyjpvYlR6z8MOn1SUqgH5ayA9qBOizCFVLiouviTWCNNNgPQdOeETavk1pq etZQO987wCGsUWIObYsJCbexPXOeogiGT+rl3yH5zdZCF7UDYGuYtnm2vyF5UM7/ 9DWXuqthzHgNwykctpr9Jk7aDid1gd7N9BW9O6CyuiexiLrzPsHQASyEfLko/Ya2 g9KLEl5qLrHxtTLHZp0dorVqGgTzU4Sw7iqKmqz8x0gR8LtDtE6nnIfcaMnC+R33 KS0waGj7abUaTZ5+ZJyAeQ3ZXJUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD+/6S1bIg6bNrN7zTCR11TqgVbTMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83Mjk0MDFkMC0yNmE3LTQ3ODctYjY4YS0xODJiMTUyYTk1MTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcyOTQwMWQw LTI2YTctNDc4Ny1iNjhhLTE4MmIxNTJhOTUxMy8wLzNGQkZFOTJENUIyMjBFOUIz NkIzN0JDRDMwOTFENzU0RUE4MTU2RDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnBEwwDQYJKoZIhvcNAQELBQADggEBAJlE5ofpYM3AG5q57JinrjshNNNMdVhk Paa1EzLGAHLlwHYlki6BN+s24ybdFjqzUkF7chiGThTRV4uMR0TfiG1/c43BHI/U eQ8SpdnkmwYAUaO4QVILaF3rOt0Rd+7zbUS+pE0SRKh8fkBij87c6unFFXXagVXM 5X19cb4BbQO2XJ9sXQM/JEGlQ2cn6hubt9Js9DdmtjamNVqgZkDy8tZ8XWKWpCNJ +Ue2rEkfGLHyiET450l4tVV4jd8LQz63FFAWsF9JSoWVDFuIJOnyZRnT1OC8COnP roJDZLN7eftbEf9sNuFbcQnqg5vMkdrnt8xquPHJsLvl/5Y21M4WNCI= -----END CERTIFICATE-----Generated at Wed May 8 04:37:49 2024 by rpki-client on console-fra.rpki-client.org