$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer File: 871B4235DFC56C482416E7BBA192562092FFE055.cer (raw, json) Hash identifier: HooGniedoMV3ESLQWS6MD6wr4WQtE5FSKWrmpPhVz8I= Subject key identifier: 87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6486B7C3E33C89C6C24E2D02C103A0FCC844C8AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft caRepository: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 18 Feb 2025 11:23:53 +0000 Certificate not after: Tue 17 Feb 2026 11:28:53 +0000 Subordinate resources: IP: 157.20.92.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:86:b7:c3:e3:3c:89:c6:c2:4e:2d:02:c1:03:a0:fc:c8:44:c8:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 18 11:23:53 2025 GMT Not After : Feb 17 11:28:53 2026 GMT Subject: CN=871B4235DFC56C482416E7BBA192562092FFE055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:60:e8:27:ac:2a:94:fc:6b:2f:84:a4:43:50: 49:df:35:d9:36:42:31:5a:93:c1:f2:1b:36:cf:20: 54:89:b3:ce:43:dc:26:d0:67:40:1e:c1:c5:ec:e1: 8e:d1:26:e2:85:7b:5c:7b:f1:24:60:fb:bb:87:0f: f5:82:7e:af:1e:8b:e0:19:6c:56:c6:f7:b7:81:97: 22:20:2a:38:eb:52:79:e2:38:6b:da:53:69:9f:ef: 2c:4b:0b:8f:68:6b:3a:40:36:00:ff:a3:9a:4a:06: 57:de:ae:6f:eb:10:3a:44:1a:33:88:a5:cb:ab:a1: 0c:77:b6:a7:a6:36:e5:31:62:d0:dc:00:52:b6:09: 03:dc:9a:2d:8b:80:cc:30:e3:f6:97:3c:84:a1:69: 45:4c:f1:41:16:00:7a:21:58:be:93:f3:1e:65:63: d6:57:68:5c:44:80:70:a7:2f:ae:64:cf:51:62:75: b2:1c:07:4a:63:3b:f6:fa:7a:61:f4:15:a3:82:6b: 1c:2b:59:0b:d4:9f:98:2f:0c:82:1b:fd:30:5d:25: 69:69:b2:ae:74:43:b9:13:38:b7:11:92:61:7a:09: e8:84:2c:29:2c:bb:ac:df:2b:10:92:52:eb:0c:36: df:0a:dd:46:f1:04:2f:0a:3a:01:e0:32:35:2b:e1: be:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.92.0/23 Signature Algorithm: sha256WithRSAEncryption 33:88:3e:1a:37:33:74:66:de:f4:3d:9e:13:f7:d5:fe:d0:e1: 26:ab:20:60:a6:da:00:e7:c2:e0:a2:23:46:b1:44:58:39:aa: 15:52:7d:46:ef:b0:fa:ad:23:4d:f9:2d:49:07:bb:80:7e:8c: 12:e0:6f:49:91:26:e1:2c:d8:bc:57:de:db:60:81:e6:f8:f7: d9:47:4f:50:a1:e9:41:6f:31:94:76:01:e0:b2:55:f3:e5:ed: db:8b:56:2d:09:9f:26:9e:c2:f6:5b:86:86:22:f0:34:93:83: 92:53:84:a3:78:cd:49:ef:44:7d:18:dd:9c:42:e6:b6:ee:c1: d3:d1:97:39:c4:82:4d:ed:75:07:3e:92:30:00:46:a6:f4:6d: 42:eb:85:30:b0:d4:2b:4b:87:82:b0:6a:dc:d4:b5:35:1f:a7: 92:20:e8:7c:27:37:a6:d0:d9:99:95:5a:ca:61:9e:3c:f1:77: ec:6b:61:6f:81:ad:82:8b:14:df:da:56:d3:22:c9:8e:0f:0d: 67:94:84:f7:87:5a:c0:19:74:4a:1a:c5:84:94:2a:0e:9d:1d: 83:f3:b6:0e:7a:21:a3:3e:9f:81:a0:01:42:aa:68:64:8d:4e: 19:a5:4c:f6:5f:eb:d8:75:e2:5d:44:2b:18:10:74:db:1d:49: 97:b9:ed:ff -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZIa3w+M8icbCTi0CwQOg/MhEyK8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDIxODExMjM1M1oX DTI2MDIxNzExMjg1M1owMzExMC8GA1UEAxMoODcxQjQyMzVERkM1NkM0ODI0MTZF N0JCQTE5MjU2MjA5MkZGRTA1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPpg6CesKpT8ay+EpENQSd812TZCMVqTwfIbNs8gVImzzkPcJtBnQB7Bxezh jtEm4oV7XHvxJGD7u4cP9YJ+rx6L4BlsVsb3t4GXIiAqOOtSeeI4a9pTaZ/vLEsL j2hrOkA2AP+jmkoGV96ub+sQOkQaM4ily6uhDHe2p6Y25TFi0NwAUrYJA9yaLYuA zDDj9pc8hKFpRUzxQRYAeiFYvpPzHmVj1ldoXESAcKcvrmTPUWJ1shwHSmM79vp6 YfQVo4JrHCtZC9SfmC8Mghv9MF0laWmyrnRDuRM4txGSYXoJ6IQsKSy7rN8rEJJS 6ww23wrdRvEELwo6AeAyNSvhvhECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIcbQjXfxWxIJBbnu6GSViCS/+BVMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82YTg5NmZkYy01NjM4LTQxZDItOGE5OS02OGNlODE2YmQzY2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZhODk2ZmRj LTU2MzgtNDFkMi04YTk5LTY4Y2U4MTZiZDNjZi8wLzg3MUI0MjM1REZDNTZDNDgy NDE2RTdCQkExOTI1NjIwOTJGRkUwNTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFFwwDQYJKoZIhvcNAQELBQADggEBADOIPho3M3Rm3vQ9nhP31f7Q4SarIGCm 2gDnwuCiI0axRFg5qhVSfUbvsPqtI035LUkHu4B+jBLgb0mRJuEs2LxX3ttggeb4 99lHT1Ch6UFvMZR2AeCyVfPl7duLVi0JnyaewvZbhoYi8DSTg5JThKN4zUnvRH0Y 3ZxC5rbuwdPRlznEgk3tdQc+kjAARqb0bULrhTCw1CtLh4KwatzUtTUfp5Ig6Hwn N6bQ2ZmVWsphnjzxd+xrYW+BrYKLFN/aVtMiyY4PDWeUhPeHWsAZdEoaxYSUKg6d HYPztg56IaM+n4GgAUKqaGSNThmlTPZf69h14l1EKxgQdNsdSZe57f8= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net