$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer File: 3FFB3838E6BD431731306308CFEC299A86723365.cer (raw, json) Hash identifier: 26VRUV41SFV2OZt1DBrVITMTBXU6c9owmdXqy+IzWYQ= Subject key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5B1C59F2FB723883C56E54D1EF0F24F0863DC80D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft caRepository: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 06 Mar 2024 10:42:14 +0000 Certificate not after: Wed 05 Mar 2025 10:47:14 +0000 Subordinate resources: IP: 103.96.144.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:1c:59:f2:fb:72:38:83:c5:6e:54:d1:ef:0f:24:f0:86:3d:c8:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 6 10:42:14 2024 GMT Not After : Mar 5 10:47:14 2025 GMT Subject: CN=3FFB3838E6BD431731306308CFEC299A86723365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:43:8e:39:f0:9c:56:0c:31:ff:4e:15:59:d9: 95:7d:63:e0:7d:ce:4a:bc:8b:eb:b8:00:a2:9d:72: 19:20:62:18:dd:bc:30:15:52:37:62:05:12:bd:48: 25:cb:43:19:48:0c:e6:8a:95:44:52:b3:69:15:b9: 7a:2d:01:6f:87:21:f0:19:84:53:fd:03:61:03:31: 15:8f:d7:ee:9a:aa:2f:3c:29:ea:40:95:a8:56:4f: fe:d0:d1:58:81:68:a1:a1:85:99:1e:59:b8:ef:75: 41:65:1f:77:d8:44:66:c5:4b:77:67:c9:ec:17:92: f8:2a:b2:b9:cd:1a:46:f1:7d:f6:55:ba:c7:fb:14: 16:31:2f:01:3e:15:c8:5c:da:cc:49:b4:cb:56:2c: 59:17:6c:25:72:06:b2:97:fe:1d:33:02:1b:a9:7a: ec:d7:2c:c1:21:3c:31:52:3f:cd:d5:28:01:25:f7: a8:c8:60:2d:f9:08:3b:df:15:86:fa:40:6d:3b:d1: 9c:f9:dd:29:e8:2e:7c:f0:1e:1d:79:4d:38:a6:10: c1:c3:e0:5d:d0:76:ec:eb:d9:00:24:ca:1e:39:0c: 88:78:64:02:83:1a:67:3c:ce:52:19:4c:56:7e:65: b6:95:2c:4f:c5:4d:a4:51:f6:f1:49:21:08:87:04: c6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.144.0/23 Signature Algorithm: sha256WithRSAEncryption 18:df:55:b8:68:37:1a:9c:f2:13:eb:4f:26:56:9a:f7:27:eb: ad:97:67:80:79:cd:59:20:25:b2:50:49:06:a8:ad:18:c1:4a: 27:fd:62:8b:81:f8:d5:dd:92:4c:16:9c:8a:aa:9d:5a:eb:a4: 5c:e0:49:f6:55:ce:2d:ad:00:76:86:29:6f:62:56:b3:1d:c6: 34:87:6a:df:63:09:3c:a1:e8:c1:09:ff:08:fb:a9:8c:8d:f6: 1d:99:f2:11:73:64:5d:bc:e7:f9:39:19:cd:a9:e6:4a:d7:63: 6d:77:b5:78:47:8d:49:74:0e:a6:bf:c4:8c:60:96:91:5b:7f: d0:35:67:3f:cb:bd:c4:ff:9c:5c:bc:b1:9d:50:b6:1a:ff:41: 62:6c:53:3f:9b:88:06:ee:04:97:cb:98:d1:41:1d:51:ad:b6: 4d:a9:10:97:80:29:f7:b5:a9:10:2b:81:63:fd:58:77:ee:18: a1:7c:29:c2:61:84:88:2c:1a:2a:c6:7b:bc:71:56:46:77:0f: f1:00:87:eb:c1:43:56:c5:16:14:74:20:89:a0:fd:49:f8:7f: 5a:15:d2:01:f2:3b:7f:40:d8:17:83:9c:1c:bb:9c:59:b5:3d: 11:21:36:75:c0:cb:71:3c:ba:37:86:19:44:68:df:ea:a6:c2: 2d:0e:f6:91 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUWxxZ8vtyOIPFblTR7w8k8IY9yA0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMwNjEwNDIxNFoX DTI1MDMwNTEwNDcxNFowMzExMC8GA1UEAxMoM0ZGQjM4MzhFNkJENDMxNzMxMzA2 MzA4Q0ZFQzI5OUE4NjcyMzM2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO5DjjnwnFYMMf9OFVnZlX1j4H3OSryL67gAop1yGSBiGN28MBVSN2IFEr1I JctDGUgM5oqVRFKzaRW5ei0Bb4ch8BmEU/0DYQMxFY/X7pqqLzwp6kCVqFZP/tDR WIFooaGFmR5ZuO91QWUfd9hEZsVLd2fJ7BeS+Cqyuc0aRvF99lW6x/sUFjEvAT4V yFzazEm0y1YsWRdsJXIGspf+HTMCG6l67NcswSE8MVI/zdUoASX3qMhgLfkIO98V hvpAbTvRnPndKegufPAeHXlNOKYQwcPgXdB27OvZACTKHjkMiHhkAoMaZzzOUhlM Vn5ltpUsT8VNpFH28UkhCIcExrkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD/7ODjmvUMXMTBjCM/sKZqGcjNlMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hODI2MWMzNy01OWE1LTQzNjktOTFlNS00YjEzNjYwMTBjNmQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4MjYxYzM3 LTU5YTUtNDM2OS05MWU1LTRiMTM2NjAxMGM2ZC8wLzNGRkIzODM4RTZCRDQzMTcz MTMwNjMwOENGRUMyOTlBODY3MjMzNjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnYJAwDQYJKoZIhvcNAQELBQADggEBABjfVbhoNxqc8hPrTyZWmvcn662XZ4B5 zVkgJbJQSQaorRjBSif9YouB+NXdkkwWnIqqnVrrpFzgSfZVzi2tAHaGKW9iVrMd xjSHat9jCTyh6MEJ/wj7qYyN9h2Z8hFzZF285/k5Gc2p5krXY213tXhHjUl0Dqa/ xIxglpFbf9A1Zz/LvcT/nFy8sZ1Qthr/QWJsUz+biAbuBJfLmNFBHVGttk2pEJeA Kfe1qRArgWP9WHfuGKF8KcJhhIgsGirGe7xxVkZ3D/EAh+vBQ1bFFhR0IImg/Un4 f1oV0gHyO39A2BeDnBy7nFm1PREhNnXAy3E8ujeGGURo3+qmwi0O9pE= -----END CERTIFICATE-----Generated at Tue May 7 18:07:08 2024 by rpki-client on console-fra.rpki-client.org