$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer File: FB3AAFE074610C85854BE75082EC16E60A126879.cer (raw, json) Hash identifier: vGpzTqL12fWxs3nIXTyUJdForYLCCs2UYXiWOVBsNSA= Subject key identifier: FB:3A:AF:E0:74:61:0C:85:85:4B:E7:50:82:EC:16:E6:0A:12:68:79 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 69310B6456F061FE1B97F79166CA9AFC512BCE19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft caRepository: rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 06:57:40 +0000 Certificate not after: Thu 03 Apr 2025 07:02:40 +0000 Subordinate resources: IP: 103.150.159.0/24 IP: 2001:df3:7e80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:31:0b:64:56:f0:61:fe:1b:97:f7:91:66:ca:9a:fc:51:2b:ce:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 4 06:57:40 2024 GMT Not After : Apr 3 07:02:40 2025 GMT Subject: CN=FB3AAFE074610C85854BE75082EC16E60A126879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e9:7a:09:48:c0:21:1d:c7:30:86:b6:2b:ae: a8:17:48:22:9c:86:80:05:17:0c:55:2c:8b:fc:dc: 54:c9:dd:cf:90:44:a6:36:1a:9d:7a:d2:fe:b8:62: 43:75:d3:af:44:5d:77:e4:79:b9:6b:ee:bd:c1:96: 2e:18:65:13:6c:b4:1a:1b:83:66:29:f6:5f:40:85: 0e:4e:9b:86:be:d2:fe:7c:09:b9:a9:44:db:f1:da: b8:00:fb:4f:68:5e:d8:ad:97:da:7c:cd:af:ff:1e: bb:f9:a9:77:eb:1a:f5:4d:b0:8c:29:3c:ce:7f:61: 5a:c6:a9:a0:9d:94:55:80:f8:f7:27:e6:55:3c:f2: 4d:0e:47:45:90:ea:38:fc:f8:0f:61:0a:ae:2b:d4: fe:21:fa:d4:f5:9d:72:fe:85:e6:67:a0:9f:2d:08: 5d:2e:3e:fc:25:4c:7d:14:76:29:0e:ba:14:8f:57: 60:de:87:a0:ca:88:58:a4:46:34:d9:fa:6c:69:21: 99:41:28:e9:4a:7f:0c:df:81:ab:21:ac:93:b2:65: 31:1e:d0:f9:95:43:e8:a6:01:ce:b1:5e:ff:8e:35: 2d:18:e7:9a:52:00:47:96:ff:4e:e4:a4:8d:a7:29: 62:57:37:98:27:16:46:b0:e4:8c:f2:c0:85:c4:a6: e2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:3A:AF:E0:74:61:0C:85:85:4B:E7:50:82:EC:16:E6:0A:12:68:79 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.159.0/24 IPv6: 2001:df3:7e80::/48 Signature Algorithm: sha256WithRSAEncryption 00:6a:92:9a:e6:22:0d:af:84:df:02:e6:9d:aa:1b:7f:aa:91: f1:e1:f7:fe:bb:18:62:98:2c:ac:86:f1:d2:63:84:33:2a:e7: fc:ee:3b:d8:7c:a0:e9:ff:34:79:a1:cf:6a:81:7c:4a:a7:2f: 81:5e:34:31:c9:0a:fc:70:d2:61:6a:9e:35:72:48:8b:ca:26: c1:4a:6b:0c:03:da:e9:48:94:fa:f0:3b:f3:00:c4:12:c4:66: 13:cc:44:19:db:73:6d:d5:f4:c4:e4:34:ba:b8:cf:91:a6:c4: b4:23:c2:60:a0:86:66:64:b5:74:90:8d:ee:1f:0a:49:69:15: 8b:26:0c:2c:bc:08:29:fd:e3:e9:28:d2:a4:d0:69:76:24:98: 10:f1:21:6d:5d:1a:c2:d6:d9:db:50:39:83:95:ed:5a:5b:6b: a4:21:60:ee:2f:cb:32:00:51:0c:64:e0:68:fb:dd:54:15:14: 2f:cc:15:c0:ca:60:a3:c6:c2:86:27:ad:f9:92:e2:1e:d4:7d: 52:3f:99:df:76:d7:41:9b:f9:87:2e:21:b7:b6:20:53:f7:60: 75:b2:b8:51:40:f9:ea:0b:e4:46:f3:8f:4b:de:89:d5:b0:be: 57:9a:8e:72:9b:36:f2:e1:dd:20:56:c2:dc:6f:6a:45:1d:aa: b9:8a:44:63 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUaTELZFbwYf4bl/eRZsqa/FErzhkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQwNDA2NTc0MFoX DTI1MDQwMzA3MDI0MFowMzExMC8GA1UEAxMoRkIzQUFGRTA3NDYxMEM4NTg1NEJF NzUwODJFQzE2RTYwQTEyNjg3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTpeglIwCEdxzCGtiuuqBdIIpyGgAUXDFUsi/zcVMndz5BEpjYanXrS/rhi Q3XTr0Rdd+R5uWvuvcGWLhhlE2y0GhuDZin2X0CFDk6bhr7S/nwJualE2/HauAD7 T2he2K2X2nzNr/8eu/mpd+sa9U2wjCk8zn9hWsapoJ2UVYD49yfmVTzyTQ5HRZDq OPz4D2EKrivU/iH61PWdcv6F5megny0IXS4+/CVMfRR2KQ66FI9XYN6HoMqIWKRG NNn6bGkhmUEo6Up/DN+BqyGsk7JlMR7Q+ZVD6KYBzrFe/441LRjnmlIAR5b/TuSk jacpYlc3mCcWRrDkjPLAhcSm4oUCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPs6r+B0YQyFhUvnUILsFuYKEmh5MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84MTY1ZTQ4MS01YTc5LTQ4NjgtYTRlNC1mYWNmZDkyMmQ4MTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgxNjVlNDgx LTVhNzktNDg2OC1hNGU0LWZhY2ZkOTIyZDgxMy8wL0ZCM0FBRkUwNzQ2MTBDODU4 NTRCRTc1MDgyRUMxNkU2MEExMjY4NzkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnlp8wDwQCAAIwCQMHACABDfN+gDANBgkqhkiG9w0BAQsFAAOCAQEAAGqSmuYi Da+E3wLmnaobf6qR8eH3/rsYYpgsrIbx0mOEMyrn/O472Hyg6f80eaHPaoF8Sqcv gV40MckK/HDSYWqeNXJIi8omwUprDAPa6UiU+vA78wDEEsRmE8xEGdtzbdX0xOQ0 urjPkabEtCPCYKCGZmS1dJCN7h8KSWkViyYMLLwIKf3j6SjSpNBpdiSYEPEhbV0a wtbZ21A5g5XtWltrpCFg7i/LMgBRDGTgaPvdVBUUL8wVwMpgo8bChiet+ZLiHtR9 Uj+Z33bXQZv5hy4ht7YgU/dgdbK4UUD56gvkRvOPS96J1bC+V5qOcps28uHdIFbC 3G9qRR2quYpEYw== -----END CERTIFICATE-----Generated at Thu May 9 00:37:13 2024 by rpki-client on console-fra.rpki-client.org