$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer File: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer (raw, json) Hash identifier: g1Tuc7x8orFvu9g3sV9dt2bljfN5hAyf/P6qkiZkjXA= Subject key identifier: FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2A30366974F5D94EA2893104B1E0E7BD6D5CE988 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft caRepository: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 26 Apr 2024 17:18:40 +0000 Certificate not after: Fri 25 Apr 2025 17:23:40 +0000 Subordinate resources: IP: 103.164.170.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:30:36:69:74:f5:d9:4e:a2:89:31:04:b1:e0:e7:bd:6d:5c:e9:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 26 17:18:40 2024 GMT Not After : Apr 25 17:23:40 2025 GMT Subject: CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:9a:78:e3:8b:0e:98:f0:e3:2c:62:87:e5: a1:2e:a4:76:e1:f0:4e:f8:57:72:88:f8:88:84:56: f7:9a:de:82:6a:86:0d:2b:09:70:d1:d9:dc:f9:45: 14:4c:72:37:16:34:b5:f5:3e:77:14:e4:b1:7d:0d: 47:61:32:48:ab:d7:0a:2e:2b:12:c2:e0:24:c7:1b: 2b:d9:ee:9e:60:76:a0:14:73:26:75:ee:43:35:ba: c3:74:8c:dc:1e:4c:6d:90:f9:63:2d:a9:7d:5b:0a: f7:c8:19:1e:74:65:d0:7b:1c:e0:11:ea:9a:6a:1e: dc:a7:fc:71:19:d0:7f:b6:68:09:48:9b:bd:58:66: 45:15:c9:4d:25:35:82:77:fa:6c:b7:e6:ac:2c:e8: 35:11:9a:c6:e5:7b:2e:7f:a5:7b:97:70:1d:44:82: 2d:b1:0d:36:7a:29:95:43:fe:3f:7d:5e:57:94:db: ef:f5:cc:77:ad:ec:97:01:22:65:5f:0d:4e:e9:29: e6:9b:87:af:f5:08:21:56:e3:3f:8e:0a:f2:62:bf: 68:b6:78:a4:6c:40:0d:2f:73:d7:e4:00:1a:e4:85: 6f:c4:37:89:a1:c8:50:e2:d1:6f:7d:fc:a9:6d:30: 24:45:53:ad:f2:f9:5c:e0:bf:7d:63:5e:b9:0d:3d: 8f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.170.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:1b:83:00:c4:8c:13:ae:70:2f:6e:33:ab:c7:bf:4d:aa:70: 91:20:85:ad:5e:ec:46:62:96:89:7b:db:04:16:ee:e7:f1:0a: 1e:e4:5f:7b:ef:36:aa:03:f0:8f:79:94:54:65:1e:bf:ba:85: 6d:18:6d:0d:db:e1:d9:20:77:33:c5:2d:83:c2:f3:49:fa:6e: 4d:64:7c:d8:cb:41:e1:b3:f5:e9:d7:ca:f1:64:68:4d:90:f5: dc:55:93:d8:2e:0a:0a:b8:81:60:b1:29:cb:6c:6e:73:f5:de: 97:c5:4d:a4:b4:18:a2:59:fb:30:17:cb:2e:33:57:ba:08:3c: fb:66:3b:05:5f:c3:7b:ed:ab:49:03:2c:0f:94:34:cc:88:2d: 58:ce:be:cf:e5:99:6b:8c:bd:2d:6f:0e:31:cb:5e:18:fc:b3: 8c:cb:44:1a:58:94:9d:7b:82:4b:d4:23:72:6b:a5:40:c4:61: 78:cb:2f:6e:12:06:1a:8a:9e:99:7b:9b:e9:bf:1d:66:70:07: 5e:97:5c:fd:06:69:4a:83:21:bb:a9:ad:be:b4:f1:a0:eb:29: f3:12:d8:5a:34:a5:77:f2:af:e4:76:60:10:d8:32:20:67:95: 77:7a:09:90:26:3d:05:70:9f:e1:a1:02:01:8c:45:df:1f:a0: f0:b5:28:b6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKjA2aXT12U6iiTEEseDnvW1c6YgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQyNjE3MTg0MFoX DTI1MDQyNTE3MjM0MFowMzExMC8GA1UEAxMoRkIzRkNDMUE2OUIxQkQ5MkQ2QTMx OUQ3RkQ4MjBFRUVDRTY3NDI0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALptmnjjiw6Y8OMsYofloS6kduHwTvhXcoj4iIRW95regmqGDSsJcNHZ3PlF FExyNxY0tfU+dxTksX0NR2EySKvXCi4rEsLgJMcbK9nunmB2oBRzJnXuQzW6w3SM 3B5MbZD5Yy2pfVsK98gZHnRl0Hsc4BHqmmoe3Kf8cRnQf7ZoCUibvVhmRRXJTSU1 gnf6bLfmrCzoNRGaxuV7Ln+le5dwHUSCLbENNnoplUP+P31eV5Tb7/XMd63slwEi ZV8NTukp5puHr/UIIVbjP44K8mK/aLZ4pGxADS9z1+QAGuSFb8Q3iaHIUOLRb338 qW0wJEVTrfL5XOC/fWNeuQ09jw0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPs/zBppsb2S1qMZ1/2CDu7OZ0JFMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZDg3YmVlZC02MzMwLTRmMzMtOTEwNS04NzcyMmNkZjJkZDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkODdiZWVk LTYzMzAtNGYzMy05MTA1LTg3NzIyY2RmMmRkMC8wL0ZCM0ZDQzFBNjlCMUJEOTJE NkEzMTlEN0ZEODIwRUVFQ0U2NzQyNDUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnpKowDQYJKoZIhvcNAQELBQADggEBAD4bgwDEjBOucC9uM6vHv02qcJEgha1e 7EZilol72wQW7ufxCh7kX3vvNqoD8I95lFRlHr+6hW0YbQ3b4dkgdzPFLYPC80n6 bk1kfNjLQeGz9enXyvFkaE2Q9dxVk9guCgq4gWCxKctsbnP13pfFTaS0GKJZ+zAX yy4zV7oIPPtmOwVfw3vtq0kDLA+UNMyILVjOvs/lmWuMvS1vDjHLXhj8s4zLRBpY lJ17gkvUI3JrpUDEYXjLL24SBhqKnpl7m+m/HWZwB16XXP0GaUqDIbuprb608aDr KfMS2Fo0pXfyr+R2YBDYMiBnlXd6CZAmPQVwn+GhAgGMRd8foPC1KLY= -----END CERTIFICATE-----Generated at Wed May 8 18:12:23 2024 by rpki-client on console-fra.rpki-client.org