$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer File: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer (raw, json) Hash identifier: lJVbC3gDPdPxL7mTw7BzT29zXs/ic9n1gyzKFJyInnI= Subject key identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: CE522B586FE271A283F45E29B32B8EDE9C215E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft caRepository: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 18 Apr 2025 10:57:49 +0000 Certificate not after: Fri 17 Apr 2026 11:02:49 +0000 Subordinate resources: IP: 160.19.86.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ce:52:2b:58:6f:e2:71:a2:83:f4:5e:29:b3:2b:8e:de:9c:21:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 18 10:57:49 2025 GMT Not After : Apr 17 11:02:49 2026 GMT Subject: CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:24:be:f5:21:b5:12:91:6e:52:bf:fa:16:c1: 63:d4:5a:97:ea:91:80:e5:4b:8b:bc:3b:45:3d:a6: 3e:12:2b:19:57:a2:1d:dc:8c:94:4d:5a:c8:41:09: 5d:75:ea:43:95:01:6f:2e:4c:b0:42:bc:5e:17:47: 8f:88:c2:c6:e1:18:e2:01:59:e5:87:5a:41:79:d6: 8e:6f:74:f7:5b:d0:96:d5:05:82:fb:d0:c5:3e:af: e1:d2:9d:00:b9:85:1b:3e:18:a3:e4:db:5b:30:bd: 55:a0:aa:fb:cb:36:28:63:a8:9c:f0:f6:4f:78:a1: 90:50:85:71:79:e2:1d:1d:2d:2c:12:93:1d:f9:82: a9:31:33:cc:d7:f9:7b:49:96:eb:ce:ea:dd:c4:39: 72:39:fc:d0:07:8c:76:4e:e8:56:16:ed:c7:ae:71: 54:3f:ac:34:67:7c:9f:73:78:66:dd:6f:8f:b6:f7: ef:6f:86:bd:c7:58:57:59:2f:61:4b:be:77:0f:19: 21:be:b6:25:5f:da:23:1a:8c:40:a4:d0:9c:5d:71: f4:0a:5c:79:9a:5b:ff:75:76:4a:70:6a:0b:ff:3a: f8:17:d0:10:5c:4a:3e:30:55:90:8a:b1:c4:44:91: eb:af:c9:56:c2:e0:92:e8:83:db:e3:be:f9:46:2c: c8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.86.0/24 Signature Algorithm: sha256WithRSAEncryption 06:11:9c:78:d6:e3:f2:fc:3d:00:e5:ec:c6:51:57:bc:cc:f4: cb:c8:9b:3b:a4:92:d7:26:b1:1f:ac:67:37:af:7f:be:af:68: 32:a5:18:cf:ea:25:5b:d1:f7:5e:85:0c:91:c1:8b:4e:20:22: 21:e5:c7:60:e9:70:27:82:70:16:fd:ee:75:7f:de:91:80:92: 9c:4a:fa:c3:61:bc:39:77:fe:98:5b:0b:e6:a3:05:bb:99:4f: a8:81:a6:6b:84:4f:ad:18:20:49:20:6b:e5:f4:c1:ef:08:30: 59:c2:ea:f3:e4:df:71:e1:a1:01:85:ac:44:4a:90:ff:ef:bd: d8:3f:c1:0b:ea:e0:bf:f3:06:77:ee:82:d9:d4:60:e1:e7:0d: f2:1e:f3:d6:10:1c:71:cc:80:f5:f5:8d:10:d0:fa:f9:ca:3b: 6c:b1:f9:83:86:6a:1d:cb:a9:54:2f:3c:f0:cb:d6:76:f3:83: 4d:a5:5a:8f:dd:3d:ba:59:57:60:9a:1a:52:ae:4e:39:39:d3: 79:c6:bd:23:5c:c1:2a:76:2d:de:e6:6f:f3:ee:d0:b1:23:0d: ee:88:ea:b6:6e:6d:58:8d:fc:6d:18:f3:b7:b8:d3:a1:b7:a4: be:7d:f0:55:6c:10:0e:3a:9f:be:5d:65:43:bb:3c:ae:0c:1b: 74:df:ba:88 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUAM5SK1hv4nGig/ReKbMrjt6cIV4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDQxODEwNTc0OVoX DTI2MDQxNzExMDI0OVowMzExMC8GA1UEAxMoMzQwQTk4QzFFOTZBMzkwOUNFQjBC RUI1ODhDNDBDRkJERDNDQTI5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJgkvvUhtRKRblK/+hbBY9Ral+qRgOVLi7w7RT2mPhIrGVeiHdyMlE1ayEEJ XXXqQ5UBby5MsEK8XhdHj4jCxuEY4gFZ5YdaQXnWjm9091vQltUFgvvQxT6v4dKd ALmFGz4Yo+TbWzC9VaCq+8s2KGOonPD2T3ihkFCFcXniHR0tLBKTHfmCqTEzzNf5 e0mW687q3cQ5cjn80AeMdk7oVhbtx65xVD+sNGd8n3N4Zt1vj7b372+GvcdYV1kv YUu+dw8ZIb62JV/aIxqMQKTQnF1x9ApceZpb/3V2SnBqC/86+BfQEFxKPjBVkIqx xESR66/JVsLgkuiD2+O++UYsyHUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDQKmMHpajkJzrC+tYjEDPvdPKKVMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zMTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxNDRkOTdh LWUzZmItNGZmYy1iN2Y3LWY3YjhiNjY1OWFjNC8wLzM0MEE5OEMxRTk2QTM5MDlD RUIwQkVCNTg4QzQwQ0ZCREQzQ0EyOTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgE1YwDQYJKoZIhvcNAQELBQADggEBAAYRnHjW4/L8PQDl7MZRV7zM9MvImzuk ktcmsR+sZzevf76vaDKlGM/qJVvR916FDJHBi04gIiHlx2DpcCeCcBb97nV/3pGA kpxK+sNhvDl3/phbC+ajBbuZT6iBpmuET60YIEkga+X0we8IMFnC6vPk33HhoQGF rERKkP/vvdg/wQvq4L/zBnfugtnUYOHnDfIe89YQHHHMgPX1jRDQ+vnKO2yx+YOG ah3LqVQvPPDL1nbzg02lWo/dPbpZV2CaGlKuTjk503nGvSNcwSp2Ld7mb/Pu0LEj De6I6rZubViN/G0Y87e406G3pL598FVsEA46n75dZUO7PK4MG3Tfuog= -----END CERTIFICATE-----Generated at Sat Apr 26 06:13:33 2025 by rpki-client on console.sobornost.net