$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.cer File: AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.cer (raw, json) Hash identifier: z6Jd2kGKGoUsAEglRFHocwPQSWO3zPNdFeopsgaWTQg= Subject key identifier: AB:3C:3F:A1:D3:27:5E:28:4B:07:A8:4E:C9:50:85:DF:9B:C5:A2:2A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5D3956E2E803DA1DA6AAC101BED7845A150B7A63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.mft caRepository: rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 16 Aug 2024 20:40:05 +0000 Certificate not after: Fri 15 Aug 2025 20:45:05 +0000 Subordinate resources: IP: 103.16.118.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:39:56:e2:e8:03:da:1d:a6:aa:c1:01:be:d7:84:5a:15:0b:7a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 16 20:40:05 2024 GMT Not After : Aug 15 20:45:05 2025 GMT Subject: CN=AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ed:05:f6:94:40:30:6d:1e:84:78:b0:60:fc: 8e:33:9d:aa:95:7a:ba:c3:3b:96:59:63:5c:26:94: a0:3b:81:44:72:d8:62:53:b0:1b:0b:fa:a9:23:84: 78:9a:5b:55:4a:86:9f:77:60:d1:2b:92:b7:5a:58: f3:07:fe:e4:72:89:ac:8e:70:03:63:9a:03:e1:87: 90:13:b2:68:16:75:33:d6:e8:71:c4:52:65:5b:c4: ca:93:da:a2:36:a1:3f:f9:00:f6:90:43:c7:4a:ed: 60:43:f8:e9:3d:8f:50:ef:55:70:dc:2f:3a:66:90: b0:6e:e9:a4:c3:d1:ec:a2:05:06:dd:9e:09:43:f3: 15:f6:5e:cc:ad:1d:6e:09:d0:7b:a0:18:b2:49:72: d4:a5:dd:b6:bb:cf:2b:c1:f0:47:e1:7c:ca:8b:7b: 2f:9a:29:ee:84:f6:df:cc:2f:ff:5a:bd:d9:c0:e9: 92:8f:e1:ab:62:f3:1a:03:36:a2:df:bc:04:1a:0b: e9:df:56:fa:9a:19:f4:08:75:b2:70:85:c2:01:f8: cf:c6:6e:8f:af:6a:20:b5:20:e7:15:04:18:19:d8: 75:b5:06:33:17:83:22:82:bd:49:97:d8:d0:87:9c: d6:6a:7d:cb:83:6e:e7:29:8c:a7:c2:74:da:15:0c: 48:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AB:3C:3F:A1:D3:27:5E:28:4B:07:A8:4E:C9:50:85:DF:9B:C5:A2:2A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.16.118.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:4b:5a:42:ff:e9:2f:e3:82:88:12:88:fa:97:b7:ee:42:70: f4:67:23:54:4b:21:75:c2:9b:51:3f:0a:d7:bb:ab:a9:c2:3f: e0:28:2d:cb:44:f6:d3:be:a4:8e:4c:e2:eb:5a:69:f1:6e:63: 8a:74:7a:52:3c:1b:12:10:99:97:ac:69:6b:0f:dd:ce:f6:c9: ca:b5:23:87:22:9d:6d:5e:dd:94:2e:9f:5a:89:6e:70:16:7a: d7:43:c6:f3:06:4f:39:0c:92:bd:91:a6:f4:d0:e9:a5:5f:b3: 4d:82:f8:8d:07:08:f6:c9:8c:2d:0a:ca:df:80:5f:01:de:21: 77:8d:37:cc:55:a4:4d:ea:8f:1d:b6:bc:c2:4b:a1:8a:48:34: e5:58:52:ed:e7:80:5a:eb:b5:fd:92:4f:fd:94:48:9a:33:b9: 44:b6:d9:a6:cd:3a:77:5d:97:2a:81:6e:f7:34:db:a0:ee:29: b3:ed:dc:ed:77:58:f1:70:d1:a4:b7:bf:ec:08:58:99:13:ab: 13:f2:d0:3f:a2:2e:40:07:3e:c1:00:43:b3:a0:77:e4:16:c6: ee:d4:5f:f5:a3:48:51:9b:e4:74:f4:bc:f3:29:ff:b9:08:10: 2f:42:d4:b5:a8:ec:6b:cb:e0:42:61:b1:d4:07:18:25:fc:4c: ef:54:e4:f4 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXTlW4ugD2h2mqsEBvteEWhULemMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgxNjIwNDAwNVoX DTI1MDgxNTIwNDUwNVowMzExMC8GA1UEAxMoQUIzQzNGQTFEMzI3NUUyODRCMDdB ODRFQzk1MDg1REY5QkM1QTIyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALztBfaUQDBtHoR4sGD8jjOdqpV6usM7llljXCaUoDuBRHLYYlOwGwv6qSOE eJpbVUqGn3dg0SuSt1pY8wf+5HKJrI5wA2OaA+GHkBOyaBZ1M9boccRSZVvEypPa ojahP/kA9pBDx0rtYEP46T2PUO9VcNwvOmaQsG7ppMPR7KIFBt2eCUPzFfZezK0d bgnQe6AYskly1KXdtrvPK8HwR+F8yot7L5op7oT238wv/1q92cDpko/hq2LzGgM2 ot+8BBoL6d9W+poZ9Ah1snCFwgH4z8Zuj69qILUg5xUEGBnYdbUGMxeDIoK9SZfY 0Iec1mp9y4Nu5ymMp8J02hUMSFMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKs8P6HTJ14oSweoTslQhd+bxaIqMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xOTg3OTc0NC1iODE4LTQ2ZGMtOGQ5Zi05YzM1NzkzZjRjYmIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5ODc5NzQ0 LWI4MTgtNDZkYy04ZDlmLTljMzU3OTNmNGNiYi8wL0FCM0MzRkExRDMyNzVFMjg0 QjA3QTg0RUM5NTA4NURGOUJDNUEyMkEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnEHYwDQYJKoZIhvcNAQELBQADggEBABpLWkL/6S/jgogSiPqXt+5CcPRnI1RL IXXCm1E/Cte7q6nCP+AoLctE9tO+pI5M4utaafFuY4p0elI8GxIQmZesaWsP3c72 ycq1I4cinW1e3ZQun1qJbnAWetdDxvMGTzkMkr2RpvTQ6aVfs02C+I0HCPbJjC0K yt+AXwHeIXeNN8xVpE3qjx22vMJLoYpINOVYUu3ngFrrtf2ST/2USJozuUS22abN OnddlyqBbvc026DuKbPt3O13WPFw0aS3v+wIWJkTqxPy0D+iLkAHPsEAQ7Ogd+QW xu7UX/WjSFGb5HT0vPMp/7kIEC9C1LWo7GvL4EJhsdQHGCX8TO9U5PQ= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:53 2024 by rpki-client on console-fra.rpki-client.org