$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.cer File: AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.cer (raw, json) Hash identifier: XPmo3c4n0Aiq49qFosc7y+tlRT1YZTbP/OUj+gaHay0= Subject key identifier: AB:3C:3F:A1:D3:27:5E:28:4B:07:A8:4E:C9:50:85:DF:9B:C5:A2:2A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 78F13C42197E5994F0420F4092A99759E2DBC086 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.mft caRepository: rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 15 Sep 2023 16:37:16 +0000 Certificate not after: Fri 13 Sep 2024 16:42:16 +0000 Subordinate resources: IP: 103.16.118.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f1:3c:42:19:7e:59:94:f0:42:0f:40:92:a9:97:59:e2:db:c0:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 15 16:37:16 2023 GMT Not After : Sep 13 16:42:16 2024 GMT Subject: CN=AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ed:05:f6:94:40:30:6d:1e:84:78:b0:60:fc: 8e:33:9d:aa:95:7a:ba:c3:3b:96:59:63:5c:26:94: a0:3b:81:44:72:d8:62:53:b0:1b:0b:fa:a9:23:84: 78:9a:5b:55:4a:86:9f:77:60:d1:2b:92:b7:5a:58: f3:07:fe:e4:72:89:ac:8e:70:03:63:9a:03:e1:87: 90:13:b2:68:16:75:33:d6:e8:71:c4:52:65:5b:c4: ca:93:da:a2:36:a1:3f:f9:00:f6:90:43:c7:4a:ed: 60:43:f8:e9:3d:8f:50:ef:55:70:dc:2f:3a:66:90: b0:6e:e9:a4:c3:d1:ec:a2:05:06:dd:9e:09:43:f3: 15:f6:5e:cc:ad:1d:6e:09:d0:7b:a0:18:b2:49:72: d4:a5:dd:b6:bb:cf:2b:c1:f0:47:e1:7c:ca:8b:7b: 2f:9a:29:ee:84:f6:df:cc:2f:ff:5a:bd:d9:c0:e9: 92:8f:e1:ab:62:f3:1a:03:36:a2:df:bc:04:1a:0b: e9:df:56:fa:9a:19:f4:08:75:b2:70:85:c2:01:f8: cf:c6:6e:8f:af:6a:20:b5:20:e7:15:04:18:19:d8: 75:b5:06:33:17:83:22:82:bd:49:97:d8:d0:87:9c: d6:6a:7d:cb:83:6e:e7:29:8c:a7:c2:74:da:15:0c: 48:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AB:3C:3F:A1:D3:27:5E:28:4B:07:A8:4E:C9:50:85:DF:9B:C5:A2:2A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.16.118.0/23 Signature Algorithm: sha256WithRSAEncryption 19:6e:3f:51:b7:ed:d3:95:13:99:0e:1f:66:4a:eb:68:43:22: 53:7c:00:f6:9b:73:10:31:8b:a7:93:64:1b:ab:23:ab:7b:97: d4:fe:1f:3a:34:be:89:7e:59:0b:76:5a:0d:10:51:a2:2f:4b: 6c:3d:be:a8:eb:4f:29:7a:f7:ba:31:67:d5:ad:ea:31:e9:e9: 1d:5e:f7:e1:ae:6d:29:cc:ad:7e:76:db:89:6f:f4:eb:f7:bd: 7a:02:0f:1e:78:83:9a:f5:a5:5f:ec:39:97:84:fe:89:0f:0b: 26:36:b5:55:85:8e:a2:81:24:4b:91:dc:d8:ed:d8:6b:ff:dc: 82:11:07:af:f6:8f:7d:fc:48:ea:99:30:42:82:3c:7c:f2:81: 13:05:5a:2d:8d:e2:2b:7d:db:d0:3c:4d:6b:ad:2b:3e:45:e9: e4:e4:47:34:81:e0:1e:d3:a3:ba:06:52:34:b3:79:0c:33:3b: 6b:bd:c2:4f:c8:09:75:e5:fb:3e:fe:e8:b1:39:87:77:b1:24: dd:f4:15:03:4f:01:39:3c:a0:06:c2:ad:62:b1:9a:33:71:46: f3:ea:3a:ee:06:81:1d:46:78:bf:06:9a:33:ae:f9:3f:2d:5d: 21:25:6a:37:86:8f:f2:76:f5:bf:e9:9d:0b:a6:54:08:b0:47: cf:d5:e5:bd -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUePE8Qhl+WZTwQg9AkqmXWeLbwIYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkxNTE2MzcxNloX DTI0MDkxMzE2NDIxNlowMzExMC8GA1UEAxMoQUIzQzNGQTFEMzI3NUUyODRCMDdB ODRFQzk1MDg1REY5QkM1QTIyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALztBfaUQDBtHoR4sGD8jjOdqpV6usM7llljXCaUoDuBRHLYYlOwGwv6qSOE eJpbVUqGn3dg0SuSt1pY8wf+5HKJrI5wA2OaA+GHkBOyaBZ1M9boccRSZVvEypPa ojahP/kA9pBDx0rtYEP46T2PUO9VcNwvOmaQsG7ppMPR7KIFBt2eCUPzFfZezK0d bgnQe6AYskly1KXdtrvPK8HwR+F8yot7L5op7oT238wv/1q92cDpko/hq2LzGgM2 ot+8BBoL6d9W+poZ9Ah1snCFwgH4z8Zuj69qILUg5xUEGBnYdbUGMxeDIoK9SZfY 0Iec1mp9y4Nu5ymMp8J02hUMSFMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKs8P6HTJ14oSweoTslQhd+bxaIqMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xOTg3OTc0NC1iODE4LTQ2ZGMtOGQ5Zi05YzM1NzkzZjRjYmIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5ODc5NzQ0 LWI4MTgtNDZkYy04ZDlmLTljMzU3OTNmNGNiYi8wL0FCM0MzRkExRDMyNzVFMjg0 QjA3QTg0RUM5NTA4NURGOUJDNUEyMkEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnEHYwDQYJKoZIhvcNAQELBQADggEBABluP1G37dOVE5kOH2ZK62hDIlN8APab cxAxi6eTZBurI6t7l9T+Hzo0vol+WQt2Wg0QUaIvS2w9vqjrTyl697oxZ9Wt6jHp 6R1e9+GubSnMrX5224lv9Ov3vXoCDx54g5r1pV/sOZeE/okPCyY2tVWFjqKBJEuR 3Njt2Gv/3IIRB6/2j338SOqZMEKCPHzygRMFWi2N4it929A8TWutKz5F6eTkRzSB 4B7To7oGUjSzeQwzO2u9wk/ICXXl+z7+6LE5h3exJN30FQNPATk8oAbCrWKxmjNx RvPqOu4GgR1GeL8GmjOu+T8tXSElajeGj/J29b/pnQumVAiwR8/V5b0= -----END CERTIFICATE-----Generated at Wed May 8 07:45:26 2024 by rpki-client on console-ams.rpki-client.org