$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer File: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer (raw, json) Hash identifier: cJIbLCNry3EykEyBHJCYaHLUfddTN8/6wnDPz0Uwrjk= Subject key identifier: 0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 29813064F4F0EED4B58B6C5063D057D145716C76 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft caRepository: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Dec 2024 14:30:10 +0000 Certificate not after: Tue 02 Dec 2025 14:35:10 +0000 Subordinate resources: IP: 139.0.0.0/16 IP: 139.192.0.0/14 IP: 139.228.0.0/16 IP: 139.255.0.0 -- 140.0.255.255 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:81:30:64:f4:f0:ee:d4:b5:8b:6c:50:63:d0:57:d1:45:71:6c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Dec 3 14:30:10 2024 GMT Not After : Dec 2 14:35:10 2025 GMT Subject: CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:16:b3:df:c9:24:56:64:40:e8:29:7a:73:f4: fd:18:ec:60:62:0a:fc:3c:df:ad:c0:c6:fe:71:f2: a3:3b:fa:44:50:0c:c8:15:33:ab:9f:30:6f:db:66: fe:06:e6:54:e9:05:40:fc:67:a2:19:9e:c0:2b:f8: 05:6e:3d:13:60:07:ee:bf:3d:e6:50:c1:0a:d5:57: 8b:64:43:39:65:43:7f:f4:7a:37:38:e1:73:3c:0d: f9:09:07:f2:64:a4:8c:c8:d4:4c:8e:a2:e4:b9:a9: d1:e0:be:b1:91:26:2e:43:d5:5f:e0:8f:86:fa:db: a2:f2:fc:cf:a3:57:38:e9:25:63:36:da:a0:81:90: 32:db:f2:3b:b3:cb:b3:64:c4:89:33:2f:4b:6f:d0: 0a:c9:9f:ab:b1:8f:60:99:cb:71:a1:46:fa:5f:7d: 47:d3:75:33:65:ea:f4:bd:fc:be:b7:4a:ab:df:f9: ee:a9:01:7c:38:ee:48:ba:91:b6:ee:ec:d2:21:3c: 84:8d:94:6b:c9:2b:e1:db:de:68:9d:9a:e2:00:44: 9e:ba:b2:a5:dd:50:68:b4:0f:74:e1:b7:96:58:8b: c8:ea:ff:c2:a7:f2:28:4a:ff:36:73:ed:f9:fe:74: de:89:8e:da:83:fe:88:3e:59:09:5d:85:71:b3:15: 7a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.0.0.0/16 139.192.0.0/14 139.228.0.0/16 139.255.0.0-140.0.255.255 Signature Algorithm: sha256WithRSAEncryption 10:1f:9c:e3:98:1b:1c:3a:34:ea:de:ff:72:70:e5:06:24:65: 60:6c:52:99:e0:3b:ff:67:7b:4d:44:bc:e3:84:b1:cb:22:4c: 80:24:25:19:c3:16:24:ca:a7:65:15:01:54:62:38:34:82:a1: 8f:13:b0:90:b9:7a:72:d1:1a:53:d1:11:0d:1b:01:ca:cc:1a: 80:5b:27:b4:71:53:56:42:34:32:2f:db:a9:a3:60:a4:a0:8c: d8:47:29:ab:34:60:07:1c:24:97:87:d6:da:39:d6:ab:56:7b: 78:f4:e2:2f:f9:ef:89:ed:79:4a:19:b0:f8:16:bc:77:3b:d3: 2a:42:70:21:44:00:9a:32:5b:c0:d6:f1:40:86:98:67:79:51: 9f:cb:7b:26:25:3c:ea:65:86:3c:e9:53:26:af:c5:42:8c:ab: 85:b3:2d:c3:a8:8f:5c:7d:4e:c6:1b:b7:24:47:f1:70:d8:80: a4:da:c3:8b:81:72:94:e9:8e:81:8b:1d:c9:96:10:d0:d2:e4: 4e:59:84:61:97:da:dd:d7:a7:88:2b:70:7c:e0:db:e4:57:1b: c1:c9:50:5b:bb:29:b2:93:2c:5a:49:ab:e9:a3:40:2a:fd:1f: 85:15:13:f1:b3:9d:f7:38:f3:85:c0:b6:63:3e:22:16:31:2e: 98:95:1c:08 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUKYEwZPTw7tS1i2xQY9BX0UVxbHYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTIwMzE0MzAxMFoX DTI1MTIwMjE0MzUxMFowMzExMC8GA1UEAxMoMEY0NEJGMjU4RDc1RjJEMUM0NDVE NTI5QzMwMTVGOUZFNTFCMjgwRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOcWs9/JJFZkQOgpenP0/RjsYGIK/DzfrcDG/nHyozv6RFAMyBUzq58wb9tm /gbmVOkFQPxnohmewCv4BW49E2AH7r895lDBCtVXi2RDOWVDf/R6NzjhczwN+QkH 8mSkjMjUTI6i5Lmp0eC+sZEmLkPVX+CPhvrbovL8z6NXOOklYzbaoIGQMtvyO7PL s2TEiTMvS2/QCsmfq7GPYJnLcaFG+l99R9N1M2Xq9L38vrdKq9/57qkBfDjuSLqR tu7s0iE8hI2Ua8kr4dveaJ2a4gBEnrqypd1QaLQPdOG3lliLyOr/wqfyKEr/NnPt +f503omO2oP+iD5ZCV2FcbMVei0CAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFA9EvyWNdfLRxEXVKcMBX5/lGygPMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hMTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExM2RlM2Vj LTRkM2MtNDQwMi1hN2I4LThhMWI5NjIyNmU3NS8wLzBGNDRCRjI1OEQ3NUYyRDFD NDQ1RDUyOUMzMDE1RjlGRTUxQjI4MEYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMCEEAgABMBsD AwCLAAMDAovAAwMAi+QwCgMDAIv/AwMAjAAwDQYJKoZIhvcNAQELBQADggEBABAf nOOYGxw6NOre/3Jw5QYkZWBsUpngO/9ne01EvOOEscsiTIAkJRnDFiTKp2UVAVRi ODSCoY8TsJC5enLRGlPREQ0bAcrMGoBbJ7RxU1ZCNDIv26mjYKSgjNhHKas0YAcc JJeH1to51qtWe3j04i/574nteUoZsPgWvHc70ypCcCFEAJoyW8DW8UCGmGd5UZ/L eyYlPOplhjzpUyavxUKMq4WzLcOoj1x9TsYbtyRH8XDYgKTaw4uBcpTpjoGLHcmW ENDS5E5ZhGGX2t3Xp4grcHzg2+RXG8HJUFu7KbKTLFpJq+mjQCr9H4UVE/Gznfc4 84XAtmM+IhYxLpiVHAg= -----END CERTIFICATE-----Generated at Sat Apr 26 06:13:32 2025 by rpki-client on console.sobornost.net