$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer File: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer (raw, json) Hash identifier: a28wZyPwH9LRaoqf32xQn8ZfHGua4rc+IazS4S9JtWM= Subject key identifier: B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1BDDD1CDED9565F2B52ADB2713B107635A9AF795 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft caRepository: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 30 Sep 2024 22:33:03 +0000 Certificate not after: Mon 29 Sep 2025 22:38:03 +0000 Subordinate resources: IP: 103.147.164.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:dd:d1:cd:ed:95:65:f2:b5:2a:db:27:13:b1:07:63:5a:9a:f7:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 30 22:33:03 2024 GMT Not After : Sep 29 22:38:03 2025 GMT Subject: CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:05:9a:11:c4:fd:cb:94:0c:1b:b0:c8:4a:7c: b9:ed:98:86:b2:15:b7:1b:55:3d:76:2c:ba:d4:11: 62:99:14:ad:6a:1e:fb:4e:2a:0e:15:ef:b6:00:d1: b8:b5:4d:35:88:b9:37:46:e8:bb:ee:5f:95:1b:5b: 86:4e:d2:99:24:2a:fd:42:25:cc:29:6a:ce:e5:8a: af:80:16:61:22:41:a4:8d:f7:fb:55:1e:8a:e9:39: 4c:d3:43:42:33:8f:55:26:0f:5e:6e:d6:5b:f1:3b: 64:87:0a:bd:be:ce:ee:2d:48:e9:4d:f8:24:83:14: 00:6f:5e:a5:dd:1f:73:bc:27:c0:7d:d6:5e:6a:a7: ae:a6:71:48:b9:3f:98:ab:f4:5d:b9:7f:70:bc:47: 4e:a8:69:27:76:ac:ff:4c:83:59:ae:57:47:41:f5: 22:d6:7e:5b:1a:f5:f5:d7:a5:4b:42:19:e1:15:d3: 77:bf:87:8a:1c:3e:b3:48:a4:a6:15:69:36:e6:f6: 64:f9:5f:6a:f8:c1:59:4e:e2:86:62:da:90:57:5e: 2f:ee:22:c4:c7:23:71:a2:54:72:67:e9:31:15:72: 79:34:5a:f9:cc:45:f2:87:b9:b8:c2:63:da:41:a1: b7:a9:c7:a4:a0:b5:24:be:5d:03:2d:e1:0f:98:f0: ae:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.164.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:aa:ed:a7:96:77:12:d1:9b:aa:fe:7f:08:ae:e7:be:9d:2c: 00:d9:ad:06:ff:d6:2e:5a:73:a0:05:59:eb:eb:4d:5f:5a:40: 39:2e:c1:22:bb:4a:3b:d5:2f:18:72:57:20:f5:e2:c0:5d:68: 93:e1:fc:62:e4:45:af:3b:69:99:9f:22:04:4b:89:6f:65:0d: 34:26:ae:23:9e:08:47:f8:42:ab:9f:ef:8f:0e:e3:d5:14:01: 8c:d5:fb:26:87:c2:74:c2:5f:f7:8c:2e:a3:34:83:3e:f8:cb: 0d:53:7e:ed:7e:5b:30:42:3a:01:0e:f4:88:c0:81:29:d4:72: 50:9c:87:0c:ed:7f:15:ca:1d:bf:90:e8:7e:a1:2e:d8:28:24: f3:c2:da:26:34:dd:8c:fc:08:b1:f6:7c:70:21:22:ab:14:1e: 7f:95:38:b4:9b:c6:5f:ee:57:9c:92:de:e4:8d:f1:c9:d1:b0: 5e:7a:b5:02:25:57:90:24:4e:aa:ab:29:bc:93:c0:66:da:2e: ec:76:a1:ce:43:e1:3a:26:d1:26:f9:d1:23:be:37:6e:99:5a: 7e:c6:4d:2f:93:e2:3f:b5:0d:6b:65:82:62:1d:ce:3d:c2:21: 35:ff:5a:69:ac:62:7f:3b:5e:39:3f:68:ae:92:44:ea:ce:a8: 0f:8e:cb:0a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUG93Rze2VZfK1KtsnE7EHY1qa95UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkzMDIyMzMwM1oX DTI1MDkyOTIyMzgwM1owMzExMC8GA1UEAxMoQjNCM0ExREVFMDlFNDA3QkM2Q0Uw OEVGQzdDRDJCQUY0MUM3QkE0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMoFmhHE/cuUDBuwyEp8ue2YhrIVtxtVPXYsutQRYpkUrWoe+04qDhXvtgDR uLVNNYi5N0bou+5flRtbhk7SmSQq/UIlzClqzuWKr4AWYSJBpI33+1Ueiuk5TNND QjOPVSYPXm7WW/E7ZIcKvb7O7i1I6U34JIMUAG9epd0fc7wnwH3WXmqnrqZxSLk/ mKv0Xbl/cLxHTqhpJ3as/0yDWa5XR0H1ItZ+Wxr19delS0IZ4RXTd7+Hihw+s0ik phVpNub2ZPlfavjBWU7ihmLakFdeL+4ixMcjcaJUcmfpMRVyeTRa+cxF8oe5uMJj 2kGht6nHpKC1JL5dAy3hD5jwrsMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLOzod7gnkB7xs4I78fNK69Bx7pCMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82ZTRjNjFhYy03YjVjLTRkOTQtYTM2NS1jNDAyMWMxNzA5YzcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlNGM2MWFj LTdiNWMtNGQ5NC1hMzY1LWM0MDIxYzE3MDljNy8wL0IzQjNBMURFRTA5RTQwN0JD NkNFMDhFRkM3Q0QyQkFGNDFDN0JBNDIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnk6QwDQYJKoZIhvcNAQELBQADggEBAHuq7aeWdxLRm6r+fwiu576dLADZrQb/ 1i5ac6AFWevrTV9aQDkuwSK7SjvVLxhyVyD14sBdaJPh/GLkRa87aZmfIgRLiW9l DTQmriOeCEf4Qquf748O49UUAYzV+yaHwnTCX/eMLqM0gz74yw1Tfu1+WzBCOgEO 9IjAgSnUclCchwztfxXKHb+Q6H6hLtgoJPPC2iY03Yz8CLH2fHAhIqsUHn+VOLSb xl/uV5yS3uSN8cnRsF56tQIlV5AkTqqrKbyTwGbaLux2oc5D4Tom0Sb50SO+N26Z Wn7GTS+T4j+1DWtlgmIdzj3CITX/WmmsYn87Xjk/aK6SROrOqA+Oywo= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:28 2024 by rpki-client on console-fra.rpki-client.org