$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer File: 7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer (raw, json) Hash identifier: xZ/85bN2w2l/2duKbDDDla9dL07gQqgOChYqrRkGDxk= Subject key identifier: 7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1E565E7B00A328B5120CB25D48A026CA2E3A7E64 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft caRepository: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 12:27:44 +0000 Certificate not after: Thu 05 Mar 2026 12:32:44 +0000 Subordinate resources: IP: 157.20.212.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:56:5e:7b:00:a3:28:b5:12:0c:b2:5d:48:a0:26:ca:2e:3a:7e:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 6 12:27:44 2025 GMT Not After : Mar 5 12:32:44 2026 GMT Subject: CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:77:dc:00:cd:cb:f9:15:95:5a:84:02:aa:99: 6b:67:f7:45:84:26:7f:3a:b8:ec:d3:bc:8d:bb:7d: 4f:32:ec:39:ec:75:08:3b:70:98:e5:a3:5f:b8:d5: 6e:50:8e:8a:ce:be:6c:cd:97:e3:02:eb:f0:d5:97: f0:30:c9:da:96:b3:13:e0:ac:72:6c:06:59:c1:30: ca:86:a4:d7:ae:62:fb:49:28:81:db:43:c6:7d:4a: 37:2b:ea:8d:eb:11:52:75:33:5e:15:a1:0a:5c:60: df:f8:41:80:7d:9d:65:c3:ee:54:62:57:ea:1a:3b: e1:a4:65:62:70:05:39:29:6c:e8:57:eb:dd:d3:58: e9:b8:56:7c:37:3e:98:d4:67:c8:f2:c8:66:e8:5c: 95:af:72:ec:8d:4f:a4:73:a0:0d:02:9b:af:12:4f: 1c:7f:1e:0b:6a:56:cc:0c:88:ad:d9:76:30:f4:be: 85:80:02:94:54:7a:be:80:80:44:25:72:f5:ee:d8: f1:75:8f:33:fa:2e:26:e1:48:35:df:19:c0:3c:cb: 1f:ef:ea:09:70:03:8f:43:c8:c5:19:36:98:9f:46: 4f:ea:86:fe:36:9b:b0:0d:c9:ad:73:5e:a9:ce:a4: d4:df:24:b5:a7:b1:5c:10:c6:5b:52:f0:af:dc:44: 28:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.212.0/23 Signature Algorithm: sha256WithRSAEncryption 00:51:aa:08:be:03:ed:b0:e0:fb:4b:4f:66:03:18:d8:4e:94: 40:31:e8:78:d6:5e:21:7f:26:fb:71:6a:d9:55:a6:db:04:83: be:ed:25:a6:43:60:03:26:3d:cf:8d:33:f3:d6:2f:8f:e2:03: e4:3a:12:31:c4:30:62:65:29:66:8b:35:b2:6f:64:b7:4c:13: d0:79:63:1f:e9:89:d5:d4:18:fb:13:73:d2:ae:ce:b0:13:c3: 71:9c:c6:c1:56:6e:e8:31:7a:a1:1d:06:83:fc:02:a9:0d:bc: 56:d4:ce:ca:8f:56:1a:89:2b:50:99:a0:82:f4:aa:9f:d4:94: 11:fe:00:97:b8:5e:ef:4a:45:1a:b2:2e:74:c0:1f:43:7c:bc: eb:0e:bb:5c:22:0b:08:6b:d4:18:a6:d9:64:7d:d6:c4:68:a8: 45:a2:f5:65:e3:d0:e7:f5:ab:be:92:0a:44:46:bb:ed:38:4a: 99:92:09:54:0b:e5:9e:94:d4:dc:8a:e3:09:ea:7d:ee:c7:b1: 0c:51:33:36:c9:fe:21:71:74:5c:cc:38:db:f3:b8:0e:4a:af: 84:55:1b:dc:87:54:ed:17:c2:98:5e:86:67:a1:ff:92:c7:ba: 3a:22:cb:b1:f1:40:01:91:cd:eb:6f:b3:52:db:3f:83:1d:98: ef:18:67:da -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHlZeewCjKLUSDLJdSKAmyi46fmQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDMwNjEyMjc0NFoX DTI2MDMwNTEyMzI0NFowMzExMC8GA1UEAxMoN0M0RUFDQjZBOEM4QzcyNzZENENF Qjg2RENEQ0EzRTdGNDY4QTc5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALx33ADNy/kVlVqEAqqZa2f3RYQmfzq47NO8jbt9TzLsOex1CDtwmOWjX7jV blCOis6+bM2X4wLr8NWX8DDJ2pazE+CscmwGWcEwyoak165i+0kogdtDxn1KNyvq jesRUnUzXhWhClxg3/hBgH2dZcPuVGJX6ho74aRlYnAFOSls6Ffr3dNY6bhWfDc+ mNRnyPLIZuhcla9y7I1PpHOgDQKbrxJPHH8eC2pWzAyIrdl2MPS+hYAClFR6voCA RCVy9e7Y8XWPM/ouJuFINd8ZwDzLH+/qCXADj0PIxRk2mJ9GT+qG/jabsA3JrXNe qc6k1N8ktaexXBDGW1Lwr9xEKJECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHxOrLaoyMcnbUzrhtzco+f0aKeTMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mM2I0N2FiNi1kMWYxLTRkMmUtOWNmYy04MDg0YTRiYWNmMGIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzYjQ3YWI2 LWQxZjEtNGQyZS05Y2ZjLTgwODRhNGJhY2YwYi8wLzdDNEVBQ0I2QThDOEM3Mjc2 RDRDRUI4NkRDRENBM0U3RjQ2OEE3OTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFNQwDQYJKoZIhvcNAQELBQADggEBAABRqgi+A+2w4PtLT2YDGNhOlEAx6HjW XiF/JvtxatlVptsEg77tJaZDYAMmPc+NM/PWL4/iA+Q6EjHEMGJlKWaLNbJvZLdM E9B5Yx/pidXUGPsTc9KuzrATw3GcxsFWbugxeqEdBoP8AqkNvFbUzsqPVhqJK1CZ oIL0qp/UlBH+AJe4Xu9KRRqyLnTAH0N8vOsOu1wiCwhr1Bim2WR91sRoqEWi9WXj 0Of1q76SCkRGu+04SpmSCVQL5Z6U1NyK4wnqfe7HsQxRMzbJ/iFxdFzMONvzuA5K r4RVG9yHVO0Xwphehmeh/5LHujoiy7HxQAGRzetvs1LbP4MdmO8YZ9o= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net