$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer File: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer (raw, json) Hash identifier: 7vSNPiyNLXU26NUznT8kmUorNt3X5taf73qVr6Cy+B0= Subject key identifier: 8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1F17DD3E8D2A0D5E20200FB62F2027D72C8CAFE6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft caRepository: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 04 Dec 2024 07:42:52 +0000 Certificate not after: Wed 03 Dec 2025 07:47:52 +0000 Subordinate resources: IP: 160.191.235.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:17:dd:3e:8d:2a:0d:5e:20:20:0f:b6:2f:20:27:d7:2c:8c:af:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Dec 4 07:42:52 2024 GMT Not After : Dec 3 07:47:52 2025 GMT Subject: CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:04:25:03:7f:14:33:d2:91:e0:bb:9f:7d:f5: b6:cc:03:ba:32:28:84:7b:92:76:48:76:8d:03:3d: b1:23:d0:c1:7f:dc:dd:6a:3a:85:5d:3d:d2:02:ea: 4c:a7:e0:50:55:30:bf:6b:e5:22:16:4b:e0:79:65: 2e:7c:aa:e1:35:b9:d1:cc:aa:c7:a2:41:85:c8:17: 0e:41:f1:cf:98:ff:86:9a:e2:cd:97:95:e6:c9:5d: f5:ef:32:05:e1:5d:0d:a6:89:bf:1d:36:bb:fb:bc: 80:ce:8a:02:80:fb:ca:42:41:b5:09:80:1f:cb:f7: c3:6c:5f:56:c6:c9:fd:68:2d:3b:54:46:49:1e:86: 2a:e6:a2:7b:0f:dd:82:ce:de:c4:00:b8:b0:71:7e: 47:5c:62:e6:de:59:f4:09:e2:a3:8c:a9:e2:1f:37: 32:20:f6:16:63:ca:c9:af:c0:a0:8e:73:d6:09:5c: ba:42:fa:62:53:e4:46:af:00:27:9b:69:e6:30:03: 7f:0c:6e:74:f5:45:3d:f8:81:95:f8:a4:2f:81:34: 9f:46:6c:59:b1:cb:6b:51:ed:73:90:3c:5d:c1:a4: c6:9f:1f:bd:86:ba:1c:d1:c4:00:e1:cb:50:bc:45: 48:62:ea:83:1e:30:0a:f8:9c:e5:9a:8d:20:af:0f: 26:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.235.0/24 Signature Algorithm: sha256WithRSAEncryption 63:8e:53:3a:c8:f9:4b:2d:10:07:2a:ab:be:ef:67:d1:9f:7c: 31:88:e7:39:d5:71:6a:7e:f5:57:81:1f:84:4d:61:f4:13:ec: 92:d2:af:fb:d2:40:6b:33:7f:dd:0c:f9:db:67:38:03:30:7e: 19:55:8a:72:93:58:df:71:af:52:a4:98:87:da:a8:2b:f4:b7: 06:50:05:de:81:74:7c:ab:d2:fc:6f:9c:b0:cb:bd:28:ec:12: 27:4b:96:bc:b2:2c:70:e9:c0:92:3e:21:5d:b4:0d:2f:57:f4: 9f:a2:2c:c6:b3:75:37:a6:c9:c0:25:8f:11:16:1b:2d:58:de: b7:5e:32:3d:d3:36:68:bf:d0:cd:f5:00:d5:83:fe:11:2c:69: ab:e2:06:00:19:df:9a:02:ac:13:76:bd:6e:e6:56:f2:e5:15: b6:13:61:e9:2d:ac:61:7a:24:c2:34:04:1b:e2:23:2a:fa:6e: 10:92:a4:a0:ba:f8:2a:d4:b6:8d:66:e2:2d:c5:59:59:a3:d7: bb:09:ea:e6:80:a7:38:9c:46:de:cf:35:84:d8:d8:e5:54:2a: 18:89:21:9b:e6:65:ec:29:9d:45:e8:6d:78:d5:15:60:5a:6a: 00:10:91:82:27:9b:ed:fe:e8:01:bc:af:0b:2d:d0:29:1e:07: cb:eb:92:a2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHxfdPo0qDV4gIA+2LyAn1yyMr+YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTIwNDA3NDI1MloX DTI1MTIwMzA3NDc1MlowMzExMC8GA1UEAxMoOEIzMDE2N0NEQTIwRkU3RURDRkM2 NDdBQzg2QjE0QkIyN0U0MzBDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMoEJQN/FDPSkeC7n331tswDujIohHuSdkh2jQM9sSPQwX/c3Wo6hV090gLq TKfgUFUwv2vlIhZL4HllLnyq4TW50cyqx6JBhcgXDkHxz5j/hprizZeV5sld9e8y BeFdDaaJvx02u/u8gM6KAoD7ykJBtQmAH8v3w2xfVsbJ/WgtO1RGSR6GKuaiew/d gs7exAC4sHF+R1xi5t5Z9Anio4yp4h83MiD2FmPKya/AoI5z1glcukL6YlPkRq8A J5tp5jADfwxudPVFPfiBlfikL4E0n0ZsWbHLa1Htc5A8XcGkxp8fvYa6HNHEAOHL ULxFSGLqgx4wCvic5ZqNIK8PJgMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIswFnzaIP5+3PxkeshrFLsn5DDIMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zM2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzZGMwMzRm LTM4MjMtNDhhZi05NTNkLWFhYTg3M2IwZmI2YS8wLzhCMzAxNjdDREEyMEZFN0VE Q0ZDNjQ3QUM4NkIxNEJCMjdFNDMwQzgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgv+swDQYJKoZIhvcNAQELBQADggEBAGOOUzrI+UstEAcqq77vZ9GffDGI5znV cWp+9VeBH4RNYfQT7JLSr/vSQGszf90M+dtnOAMwfhlVinKTWN9xr1KkmIfaqCv0 twZQBd6BdHyr0vxvnLDLvSjsEidLlryyLHDpwJI+IV20DS9X9J+iLMazdTemycAl jxEWGy1Y3rdeMj3TNmi/0M31ANWD/hEsaaviBgAZ35oCrBN2vW7mVvLlFbYTYekt rGF6JMI0BBviIyr6bhCSpKC6+CrUto1m4i3FWVmj17sJ6uaApzicRt7PNYTY2OVU KhiJIZvmZewpnUXobXjVFWBaagAQkYInm+3+6AG8rwst0CkeB8vrkqI= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net