$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer File: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer (raw, json) Hash identifier: 2oO+lfmFPX/bGzrG7a4Z2GAGR/UwC1r+2tlnhdEMROk= Subject key identifier: 9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1EEB6E7D9B0D760349E67AF26C69AE46F502676E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft caRepository: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 02 Dec 2024 07:42:50 +0000 Certificate not after: Mon 01 Dec 2025 07:47:50 +0000 Subordinate resources: IP: 160.187.231.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:eb:6e:7d:9b:0d:76:03:49:e6:7a:f2:6c:69:ae:46:f5:02:67:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Dec 2 07:42:50 2024 GMT Not After : Dec 1 07:47:50 2025 GMT Subject: CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ce:60:ce:58:0d:51:3a:f3:38:8d:17:3d:c3: 99:01:07:cb:6a:46:d6:ab:04:ee:09:9e:bb:fb:a2: 53:25:d1:f7:a6:8a:39:f8:96:82:64:63:cf:6e:c0: dd:48:f7:86:2e:14:b8:df:6e:4c:7b:63:0c:6f:99: d6:c9:08:01:a2:3a:f8:7d:02:50:94:94:78:37:40: a2:a7:d0:c8:5e:9c:e8:20:db:22:c0:1b:eb:07:df: 8b:4b:ae:2d:d6:7e:9a:40:06:44:2f:a7:64:96:3b: 16:ee:06:1c:f9:11:ea:94:26:55:b4:29:38:7d:3c: 9b:ac:5a:48:7f:ec:b3:85:4d:ab:a3:36:b4:b7:81: 55:e0:e8:01:32:31:92:cd:dd:8c:43:b6:77:6e:6e: 47:83:c3:f0:5b:ba:92:73:02:10:48:04:f5:20:30: 33:93:48:6f:54:82:80:67:b2:89:fd:c6:44:80:b5: 9e:11:8f:7a:77:96:b1:57:33:bf:98:ed:1e:f2:a6: 8b:da:17:80:1f:c5:cd:e1:9e:7e:46:95:72:63:e1: 16:c8:d5:aa:d8:21:42:ce:3c:b0:a1:fa:70:19:9b: 41:b5:2b:6a:51:2d:f0:a2:2a:5e:80:1b:11:79:2a: 89:1e:65:f2:c4:1b:58:24:40:d6:9f:d3:be:f3:c7: 47:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.231.0/24 Signature Algorithm: sha256WithRSAEncryption 36:9a:23:14:d0:5d:20:0b:60:be:ae:dd:c1:7d:ab:50:a4:c1: 9e:fb:30:b2:24:82:56:08:84:82:2a:99:dc:8e:fd:95:8d:dc: e1:c1:cd:18:4f:85:c8:94:f9:60:fa:e3:cf:ed:84:31:0a:5c: b0:aa:00:fd:bb:94:19:54:0c:ae:38:7e:59:92:b4:32:d4:49: 43:5f:b8:fc:24:06:6c:56:3c:89:aa:c1:9f:fb:7a:d4:4b:ef: f9:e5:29:7b:ab:a9:db:1f:23:16:7f:7f:09:1d:d5:63:e3:9d: 2c:e5:88:35:04:8a:22:8d:79:ed:fe:73:b8:d8:7f:2b:28:c9: 57:96:08:ca:24:99:5c:82:a5:d7:3e:98:52:a5:91:ed:ba:fe: 73:6c:4b:a1:ba:9c:69:f2:e8:7f:37:a5:02:2e:3f:d0:f1:af: 07:3c:31:8c:e9:1d:44:61:01:fe:ec:fb:31:2b:da:d1:56:1a: f6:cf:19:af:cc:ac:1a:c5:77:cf:bd:9a:21:31:80:f6:8e:8f: 1f:41:65:db:04:84:15:d6:37:ee:c2:9b:15:55:c8:23:9f:be: 5b:04:1e:71:9e:36:11:00:6f:5a:b9:c4:02:e6:19:c3:03:81: c9:29:b8:19:13:8f:ca:f5:ed:34:a3:b9:8a:65:72:a2:6b:e0: 65:df:e6:ef -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHutufZsNdgNJ5nrybGmuRvUCZ24wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTIwMjA3NDI1MFoX DTI1MTIwMTA3NDc1MFowMzExMC8GA1UEAxMoOUMwREJEN0FFMTkzMkU2QjlEMDk4 M0ZDNDhFMzIxNDNEOEE0Q0Y5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPHOYM5YDVE68ziNFz3DmQEHy2pG1qsE7gmeu/uiUyXR96aKOfiWgmRjz27A 3Uj3hi4UuN9uTHtjDG+Z1skIAaI6+H0CUJSUeDdAoqfQyF6c6CDbIsAb6wffi0uu LdZ+mkAGRC+nZJY7Fu4GHPkR6pQmVbQpOH08m6xaSH/ss4VNq6M2tLeBVeDoATIx ks3djEO2d25uR4PD8Fu6knMCEEgE9SAwM5NIb1SCgGeyif3GRIC1nhGPeneWsVcz v5jtHvKmi9oXgB/FzeGefkaVcmPhFsjVqtghQs48sKH6cBmbQbUralEt8KIqXoAb EXkqiR5l8sQbWCRA1p/TvvPHR/UCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJwNvXrhky5rnQmD/EjjIUPYpM+TMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jYWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhZmNiZmJi LWJhM2YtNGQ1My1hMDRmLTE0ZDZmNGJlMGNiMS8wLzlDMERCRDdBRTE5MzJFNkI5 RDA5ODNGQzQ4RTMyMTQzRDhBNENGOTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgu+cwDQYJKoZIhvcNAQELBQADggEBADaaIxTQXSALYL6u3cF9q1CkwZ77MLIk glYIhIIqmdyO/ZWN3OHBzRhPhciU+WD648/thDEKXLCqAP27lBlUDK44flmStDLU SUNfuPwkBmxWPImqwZ/7etRL7/nlKXurqdsfIxZ/fwkd1WPjnSzliDUEiiKNee3+ c7jYfysoyVeWCMokmVyCpdc+mFKlke26/nNsS6G6nGny6H83pQIuP9Dxrwc8MYzp HURhAf7s+zEr2tFWGvbPGa/MrBrFd8+9miExgPaOjx9BZdsEhBXWN+7CmxVVyCOf vlsEHnGeNhEAb1q5xALmGcMDgckpuBkTj8r17TSjuYplcqJr4GXf5u8= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net