$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer File: FF102371565831DDB9C06DF47DF79B1120C9861E.cer (raw, json) Hash identifier: 5TuMEP4FiotiVQwkudnfkB+DujOyoeqByBYkJPqVhtQ= Subject key identifier: FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 376E062F63B5733C50A9744FEEA1D806B970CA7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft caRepository: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 31 Jul 2024 08:27:16 +0000 Certificate not after: Wed 30 Jul 2025 08:32:16 +0000 Subordinate resources: IP: 103.3.233.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:6e:06:2f:63:b5:73:3c:50:a9:74:4f:ee:a1:d8:06:b9:70:ca:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 08:27:16 2024 GMT Not After : Jul 30 08:32:16 2025 GMT Subject: CN=FF102371565831DDB9C06DF47DF79B1120C9861E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:6d:d5:81:3f:14:41:f0:16:65:e6:39:c9: 88:85:10:0d:5b:16:9b:22:a7:07:8c:cd:1d:e0:f0: a2:9e:eb:3c:ba:85:b4:00:87:09:5e:0d:3d:13:2f: 7d:1b:f7:b4:ec:33:38:ec:d3:74:8b:f4:0d:e4:ec: 23:e2:ab:90:a8:63:fd:b8:8e:68:09:05:7a:2b:3c: db:bd:b3:1b:7b:da:d1:f1:15:7e:9d:15:98:a2:b3: a7:6e:78:c3:23:e8:ee:5e:ac:eb:4f:7f:07:3d:77: 8f:6e:05:71:e3:df:4c:94:df:ab:99:7e:c8:ed:88: 51:62:48:3c:b8:1c:5f:68:85:31:f4:3c:80:d4:1d: e1:7f:6d:a4:88:b5:bb:86:17:b9:68:e3:5e:50:f6: c8:1f:b2:fc:9c:b0:9b:e8:dc:6d:3d:98:76:1a:a6: 00:b8:f5:0d:76:4c:34:64:da:ba:e8:16:f5:ec:75: 45:96:84:c0:03:1c:3e:1e:e4:04:91:11:62:c1:11: 60:76:28:ec:56:24:18:10:cb:00:07:9b:60:a2:d4: 76:3e:1f:e4:b6:37:58:dc:b4:7a:51:2d:e2:cf:49: 9a:d5:e3:13:b9:a5:54:18:78:74:06:9d:ba:08:3e: b8:f9:2b:ab:d2:b4:e9:6e:e6:48:19:a0:1a:e2:93: 5d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.3.233.0/24 Signature Algorithm: sha256WithRSAEncryption 54:55:ec:31:d9:c6:a7:fd:e2:00:ea:49:9a:5f:12:3f:67:5a: f4:bd:e0:4a:2d:06:f3:0a:21:4f:9d:97:6f:82:51:d0:fe:93: 7e:b0:14:13:4b:3c:35:92:89:6a:44:71:22:b7:52:9d:0e:32: ec:9a:eb:ee:d5:8d:bc:60:33:68:4a:6b:d9:4f:8a:f2:7f:62: 94:e5:ba:d0:9b:5e:2b:02:04:22:48:af:ee:d3:f5:73:c9:47: 60:cc:c6:cb:60:90:f5:76:22:6b:fc:b1:f1:3b:e1:ba:ee:cc: 0e:65:2c:38:8f:01:09:7f:f6:c3:90:da:6e:a7:a7:05:ce:14: 7c:36:2d:fc:95:6d:f2:e1:60:f8:04:a4:00:dc:f1:8c:95:63: 8b:a7:2e:98:71:7b:ad:f7:e7:4d:2a:bd:df:6f:a6:d8:02:30: f1:e6:32:e0:5e:fa:12:5f:77:d4:a2:a7:63:1f:3a:c4:00:b2: 00:eb:6b:9f:3f:37:ef:cc:1c:1e:af:af:b6:af:26:31:68:9b: dd:39:59:00:f8:d7:7c:10:81:ea:e6:3e:7a:73:9f:70:b5:b9: 07:92:46:5a:33:f7:ac:0c:35:67:3b:73:73:bb:7c:7e:d4:45: fc:ed:3a:b5:ea:eb:42:a8:56:ee:52:fd:fe:a8:11:78:02:0b: 00:29:28:8c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUN24GL2O1czxQqXRP7qHYBrlwynwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDczMTA4MjcxNloX DTI1MDczMDA4MzIxNlowMzExMC8GA1UEAxMoRkYxMDIzNzE1NjU4MzFEREI5QzA2 REY0N0RGNzlCMTEyMEM5ODYxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALhebdWBPxRB8BZl5jnJiIUQDVsWmyKnB4zNHeDwop7rPLqFtACHCV4NPRMv fRv3tOwzOOzTdIv0DeTsI+KrkKhj/biOaAkFeis8272zG3va0fEVfp0VmKKzp254 wyPo7l6s609/Bz13j24FcePfTJTfq5l+yO2IUWJIPLgcX2iFMfQ8gNQd4X9tpIi1 u4YXuWjjXlD2yB+y/Jywm+jcbT2YdhqmALj1DXZMNGTauugW9ex1RZaEwAMcPh7k BJERYsERYHYo7FYkGBDLAAebYKLUdj4f5LY3WNy0elEt4s9JmtXjE7mlVBh4dAad ugg+uPkrq9K06W7mSBmgGuKTXTkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP8QI3FWWDHducBt9H33mxEgyYYeMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zNDNmMjllYS04NzRhLTRkMWEtYWJjYy03NTI5M2NiNTFhNmQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM0M2YyOWVh LTg3NGEtNGQxYS1hYmNjLTc1MjkzY2I1MWE2ZC8wL0ZGMTAyMzcxNTY1ODMxRERC OUMwNkRGNDdERjc5QjExMjBDOTg2MUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnA+kwDQYJKoZIhvcNAQELBQADggEBAFRV7DHZxqf94gDqSZpfEj9nWvS94Eot BvMKIU+dl2+CUdD+k36wFBNLPDWSiWpEcSK3Up0OMuya6+7VjbxgM2hKa9lPivJ/ YpTlutCbXisCBCJIr+7T9XPJR2DMxstgkPV2Imv8sfE74bruzA5lLDiPAQl/9sOQ 2m6npwXOFHw2LfyVbfLhYPgEpADc8YyVY4unLphxe633500qvd9vptgCMPHmMuBe +hJfd9Sip2MfOsQAsgDra58/N+/MHB6vr7avJjFom905WQD413wQgermPnpzn3C1 uQeSRloz96wMNWc7c3O7fH7URfztOrXq60KoVu5S/f6oEXgCCwApKIw= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:53 2024 by rpki-client on console-ams.rpki-client.org