$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer File: 78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer (raw, json) Hash identifier: bRj89N+ml1nXKfbr9RXCVJ1qT7FcabveiRq1UTviLU4= Subject key identifier: 78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1CF9C793027F01BBE112B00DEA3E312A3ADC4047 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft caRepository: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 12 Dec 2024 03:59:32 +0000 Certificate not after: Thu 11 Dec 2025 04:04:32 +0000 Subordinate resources: IP: 160.191.198.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:f9:c7:93:02:7f:01:bb:e1:12:b0:0d:ea:3e:31:2a:3a:dc:40:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Dec 12 03:59:32 2024 GMT Not After : Dec 11 04:04:32 2025 GMT Subject: CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:35:84:bf:b6:7d:8c:00:2f:4b:29:d1:9a:ff: 8b:63:4c:58:36:47:c6:c4:13:7b:df:69:da:f4:9c: 0a:0c:29:07:b8:e2:40:47:8f:d3:10:fd:34:ee:23: 50:54:c9:bb:19:cc:88:d3:f6:d2:35:62:ec:11:5f: c7:5d:a4:e6:6e:34:cb:1a:19:84:f7:37:2b:3a:96: 6f:ce:36:eb:0b:ef:b0:52:4a:28:18:94:3f:1e:ce: 32:55:33:c3:ed:db:66:0e:1e:54:50:9f:3b:d4:ff: 5b:21:23:e9:1f:b9:4b:0c:08:13:5a:28:eb:18:9f: 8a:79:83:9d:1d:4e:f2:97:11:97:dc:7d:2b:47:a0: 41:6e:11:35:bc:16:01:90:ba:66:f0:a9:e0:ae:c7: 3a:a2:dd:55:6b:dc:96:53:6f:23:c4:83:4d:b0:fd: fb:df:17:d9:14:24:67:fd:82:42:df:ad:56:49:be: 37:6e:ea:34:e1:46:77:18:1a:0f:4d:49:ac:64:8e: 07:1f:ba:fd:e2:02:be:11:1e:43:b5:b6:81:08:ed: 58:cb:38:d4:88:d9:47:0c:44:6b:4d:30:cc:0f:09: d2:35:70:0b:d5:2a:c9:dc:8e:60:10:51:6e:df:39: e3:d2:74:e9:6e:ff:a5:ad:14:5b:17:b6:2b:8a:30: a2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.198.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:a2:33:85:72:78:fb:60:6f:ca:f1:c2:bc:c3:51:9b:99:31: 67:34:50:29:05:b4:22:44:d0:d5:04:e2:50:d8:16:a0:c5:ab: b8:e8:15:cd:4b:e1:67:13:9d:3e:78:8c:aa:c9:a9:a6:c4:c0: 9e:98:b5:6a:4f:d7:58:0d:5b:04:76:c8:7f:a2:7e:f0:05:7a: b0:d3:5e:fe:3b:97:10:34:0b:6a:51:43:9b:df:fe:15:10:7b: b8:f0:51:e3:71:c8:bd:75:2e:04:c1:20:03:dc:27:c9:ef:cf: ee:c2:04:db:3c:8b:75:61:0e:23:b0:be:b0:aa:9a:c2:2a:24: 25:9c:f4:cc:a5:7b:62:bd:7b:06:86:40:3b:12:dc:e4:08:bb: 02:53:05:bc:5e:2b:6d:ef:2f:c3:c1:bc:34:52:21:43:60:f8: cf:49:43:f2:e9:83:09:f7:aa:a0:b6:cb:8f:ec:93:35:e4:6c: 05:97:10:d2:1c:4f:03:01:a1:0a:cc:99:bd:77:b1:3b:b7:ea: 5e:08:f3:c7:15:64:96:03:84:30:02:5e:d0:22:c4:9b:a8:cb: a5:2d:7f:0f:86:8c:64:e2:34:c6:8e:82:bc:9d:e7:09:3c:5b: 73:07:4f:3c:af:5b:33:b2:cf:4d:00:0b:ff:5a:cc:de:62:87: 85:31:a4:b4 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHPnHkwJ/AbvhErAN6j4xKjrcQEcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTIxMjAzNTkzMloX DTI1MTIxMTA0MDQzMlowMzExMC8GA1UEAxMoNzhCN0ZBQTI4ODFBQkZCQzExN0Mw RjgzRUNEQzlENTU0REY0MTQxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALk1hL+2fYwAL0sp0Zr/i2NMWDZHxsQTe99p2vScCgwpB7jiQEeP0xD9NO4j UFTJuxnMiNP20jVi7BFfx12k5m40yxoZhPc3KzqWb8426wvvsFJKKBiUPx7OMlUz w+3bZg4eVFCfO9T/WyEj6R+5SwwIE1oo6xifinmDnR1O8pcRl9x9K0egQW4RNbwW AZC6ZvCp4K7HOqLdVWvcllNvI8SDTbD9+98X2RQkZ/2CQt+tVkm+N27qNOFGdxga D01JrGSOBx+6/eICvhEeQ7W2gQjtWMs41IjZRwxEa00wzA8J0jVwC9UqydyOYBBR bt8549J06W7/pa0UWxe2K4owor8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHi3+qKIGr+8EXwPg+zcnVVN9BQUMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83NjlmOGFhOC04OTcxLTRlNTEtOGI1MS04MDNiNDliMzJhNGYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2OWY4YWE4 LTg5NzEtNGU1MS04YjUxLTgwM2I0OWIzMmE0Zi8wLzc4QjdGQUEyODgxQUJGQkMx MTdDMEY4M0VDREM5RDU1NERGNDE0MTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgv8YwDQYJKoZIhvcNAQELBQADggEBACuiM4VyePtgb8rxwrzDUZuZMWc0UCkF tCJE0NUE4lDYFqDFq7joFc1L4WcTnT54jKrJqabEwJ6YtWpP11gNWwR2yH+ifvAF erDTXv47lxA0C2pRQ5vf/hUQe7jwUeNxyL11LgTBIAPcJ8nvz+7CBNs8i3VhDiOw vrCqmsIqJCWc9Myle2K9ewaGQDsS3OQIuwJTBbxeK23vL8PBvDRSIUNg+M9JQ/Lp gwn3qqC2y4/skzXkbAWXENIcTwMBoQrMmb13sTu36l4I88cVZJYDhDACXtAixJuo y6Utfw+GjGTiNMaOgryd5wk8W3MHTzyvWzOyz00AC/9azN5ih4UxpLQ= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net