$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer File: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer (raw, json) Hash identifier: gSeHMdzFVz/vm5qq8p9z4v4eo44L6kuMNbqPkkcon7g= Subject key identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3AD118AA5EAA0834FFC40F57BDA5AE834A0D17AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft caRepository: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 10:39:48 +0000 Certificate not after: Mon 29 Jul 2024 10:44:48 +0000 Subordinate resources: IP: 103.133.60.0/22 IP: 2404:48c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d1:18:aa:5e:aa:08:34:ff:c4:0f:57:bd:a5:ae:83:4a:0d:17:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 10:39:48 2023 GMT Not After : Jul 29 10:44:48 2024 GMT Subject: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:22:9f:b4:b7:32:d6:a1:3f:2d:13:b0:2e:9b: a4:e9:58:16:2a:5b:2e:c3:95:78:6e:4c:0b:ae:b6: a4:b5:66:0c:b5:ac:a8:db:d2:3e:23:35:35:0e:d9: ab:0c:37:c2:74:2c:08:0e:de:96:27:23:29:d2:e8: 92:4f:c6:08:c5:74:39:01:e3:c8:8a:ff:6b:31:23: 5d:54:6a:6d:d8:cb:fe:80:58:7f:6b:4d:6e:e9:74: af:64:a8:de:aa:36:3c:c7:c9:a0:99:d5:0b:a7:ba: e2:7e:56:c6:0f:9f:a3:fc:8b:0e:ff:da:6e:0a:f5: 69:cb:6d:0e:5a:ff:6c:18:5d:4a:27:5c:b0:4e:20: 4d:5a:b7:0b:de:d7:10:87:87:51:bd:fd:13:1f:d9: c1:07:0a:88:18:35:0f:d8:37:58:5a:b6:9d:fb:d8: f8:0c:d5:4e:e2:d4:1f:65:b5:c8:b5:44:6d:65:d4: fb:55:7b:7d:7b:45:eb:08:7d:2a:7d:8b:6d:8b:35: 9d:eb:da:0b:a7:03:73:23:21:85:6b:e6:eb:27:b9: 47:e7:10:2d:60:76:f0:f2:2c:f3:43:f5:e8:a8:4c: 45:e9:3e:59:e8:e2:62:4b:ee:90:56:01:1f:a8:1c: 6d:72:30:43:a7:28:32:51:5f:20:e8:4d:ea:c2:54: 03:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.133.60.0/22 IPv6: 2404:48c0::/32 Signature Algorithm: sha256WithRSAEncryption 0d:e3:9f:ba:58:b4:11:bd:6d:f9:9b:a7:ae:c2:8a:e0:76:84: d6:bb:10:33:4b:1c:6a:58:5d:73:83:d9:c4:72:6c:1e:75:2d: 5e:3f:b5:b8:7d:f8:df:1e:b2:7e:53:24:67:e1:81:cd:ae:8a: dc:7c:fa:ad:1d:52:fa:35:12:b7:0f:34:7e:24:76:f6:53:58: 79:7b:95:1f:c4:c3:db:e3:3b:e2:a7:c7:36:3e:f2:54:0c:b2: 1c:5d:ef:2c:cb:f6:09:cd:bf:c9:17:c8:4f:d9:a7:9c:85:35: 43:c1:f3:85:74:62:dc:51:18:89:91:bd:f1:e3:ea:5d:fb:c6: 76:53:b1:50:30:51:9f:62:03:7f:34:93:11:72:ba:60:d3:9c: 73:ea:27:29:55:f8:c3:de:03:f3:6e:f1:a3:0d:8c:49:e7:6a: a4:8f:c8:d0:0c:ee:a2:fc:7b:ce:c0:22:0b:0a:e8:51:4c:4d: 1f:5c:19:77:15:86:d0:69:83:15:5f:06:8d:a2:b5:f2:f4:8d: 89:b3:2d:f6:32:14:c4:06:e0:b3:0c:bf:45:d8:a6:4a:64:52: ad:70:19:f6:c7:88:f9:fd:f3:c5:84:f9:83:44:40:c3:b5:9b: 49:3d:0e:f3:72:93:db:b5:c6:55:e6:53:3e:fc:5d:06:06:b3: 25:5e:b7:36 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUOtEYql6qCDT/xA9XvaWug0oNF60wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTEwMzk0OFoX DTI0MDcyOTEwNDQ0OFowMzExMC8GA1UEAxMoQzNGODBBMzVDMUM2ODc3QkJFNDk3 MTlCOTA4RDAyOUZCRkNEREJCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANYin7S3MtahPy0TsC6bpOlYFipbLsOVeG5MC662pLVmDLWsqNvSPiM1NQ7Z qww3wnQsCA7elicjKdLokk/GCMV0OQHjyIr/azEjXVRqbdjL/oBYf2tNbul0r2So 3qo2PMfJoJnVC6e64n5Wxg+fo/yLDv/abgr1acttDlr/bBhdSidcsE4gTVq3C97X EIeHUb39Ex/ZwQcKiBg1D9g3WFq2nfvY+AzVTuLUH2W1yLVEbWXU+1V7fXtF6wh9 Kn2LbYs1nevaC6cDcyMhhWvm6ye5R+cQLWB28PIs80P16KhMRek+WejiYkvukFYB H6gcbXIwQ6coMlFfIOhN6sJUA+0CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMP4CjXBxod7vklxm5CNAp+/zduwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jY2Y2OGFiYS05NTE1LTRkMTItYWFjMi04Y2VlNWRiMmE0OGYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjZjY4YWJh LTk1MTUtNGQxMi1hYWMyLThjZWU1ZGIyYTQ4Zi8wL0MzRjgwQTM1QzFDNjg3N0JC RTQ5NzE5QjkwOEQwMjlGQkZDRERCQjAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnhTwwDQQCAAIwBwMFACQESMAwDQYJKoZIhvcNAQELBQADggEBAA3jn7pYtBG9 bfmbp67CiuB2hNa7EDNLHGpYXXOD2cRybB51LV4/tbh9+N8esn5TJGfhgc2uitx8 +q0dUvo1ErcPNH4kdvZTWHl7lR/Ew9vjO+KnxzY+8lQMshxd7yzL9gnNv8kXyE/Z p5yFNUPB84V0YtxRGImRvfHj6l37xnZTsVAwUZ9iA380kxFyumDTnHPqJylV+MPe A/Nu8aMNjEnnaqSPyNAM7qL8e87AIgsK6FFMTR9cGXcVhtBpgxVfBo2itfL0jYmz LfYyFMQG4LMMv0XYpkpkUq1wGfbHiPn988WE+YNEQMO1m0k9DvNyk9u1xlXmUz78 XQYGsyVetzY= -----END CERTIFICATE-----Generated at Wed May 8 10:06:56 2024 by rpki-client on console-ams.rpki-client.org