$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer File: B9A55DD123C2F224C4E245856905F78F2F354D92.cer (raw, json) Hash identifier: 36UzroVDn0WKbiOUYdfNu0O3cwBIWGPe66jGWPsrdq4= Subject key identifier: B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 26D85B0ED1E88F32692AAF4A1E2A284989EE645D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft caRepository: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 22 Apr 2025 14:47:57 +0000 Certificate not after: Tue 21 Apr 2026 14:52:57 +0000 Subordinate resources: IP: 157.10.97.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:d8:5b:0e:d1:e8:8f:32:69:2a:af:4a:1e:2a:28:49:89:ee:64:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 22 14:47:57 2025 GMT Not After : Apr 21 14:52:57 2026 GMT Subject: CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:95:29:5a:ad:18:bd:61:b9:02:3f:48:c0:f1: 55:f1:f3:12:f8:ca:a2:47:2a:56:9c:8c:fa:b7:a6: b5:d6:58:1c:fc:3d:74:73:06:19:29:0b:95:62:0c: c6:43:08:ca:a5:e3:d3:f5:4d:2e:f9:de:b8:4b:ff: 0c:46:f5:b4:56:1d:ec:ff:27:52:31:db:58:58:10: 6d:29:96:24:58:63:0a:63:7c:6c:04:ac:6a:77:52: 0a:22:d5:64:03:2f:63:45:dc:3f:80:bd:bb:87:83: dd:cd:2f:8d:d2:63:0e:56:a6:23:c5:89:da:34:67: bf:d7:ad:60:b3:e4:ff:46:8f:b0:c2:d1:df:ab:91: f1:b8:21:5c:6f:c8:d6:02:ed:c6:db:67:8f:48:fe: 9c:47:85:e1:65:9b:61:91:1e:5b:16:13:de:48:1a: 70:62:8d:a4:58:82:f8:5e:2c:54:e6:37:bb:a3:77: e2:55:54:c7:d0:ad:af:f9:55:8a:90:02:f2:c9:70: b5:00:92:6e:85:d0:34:b7:32:51:7f:9b:94:dd:b7: 12:5e:a6:0f:56:01:f5:42:51:b7:8f:cb:8a:f3:f0: 41:8e:a0:e7:f1:b8:44:43:a7:1d:5f:17:2d:90:3c: 2c:cc:c1:2e:19:f5:8e:64:84:ae:c2:44:13:f0:6a: 24:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.97.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:2c:43:71:ee:14:2a:5b:a3:e8:ce:62:b8:30:77:13:fb:45: b0:2b:7e:ed:d4:3d:9b:61:88:9f:ab:1e:d6:db:22:a3:fc:22: 82:ee:6e:57:bb:e2:14:61:28:ad:42:d7:5c:53:39:c6:d2:11: 8d:36:64:37:ff:76:5b:71:b5:19:4c:c6:c7:ea:e2:d6:73:0e: 06:f8:42:78:91:8a:f7:88:90:04:05:6d:9c:69:06:b1:c8:30: 85:fc:04:17:eb:42:25:18:4e:03:08:63:3d:4e:dc:5b:e4:35: 8a:0a:de:07:3d:9d:7d:90:a1:70:49:18:3f:25:9c:a1:e8:23: 1e:ff:e0:20:90:cf:2b:78:fa:d6:9b:10:62:43:06:4a:d0:ee: 69:42:47:6f:ad:b5:ff:6b:7b:c6:41:9e:20:4b:71:95:f2:06: bd:9c:03:67:b9:13:bf:09:3b:74:25:4b:1b:e2:76:3a:69:75: 8d:73:a3:ee:3c:bf:64:25:92:10:f8:1e:ca:e4:2f:82:ba:f4: d8:61:5a:72:bc:0f:77:96:f5:ed:b0:b1:59:1d:a9:81:c5:57: e6:66:88:a7:03:73:ae:18:0b:cf:74:2e:22:fa:5d:73:6f:64: 75:80:a1:ee:f3:e2:37:ac:72:7e:a7:9b:12:dd:b4:91:74:fc: e0:cc:7d:f2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJthbDtHojzJpKq9KHiooSYnuZF0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDQyMjE0NDc1N1oX DTI2MDQyMTE0NTI1N1owMzExMC8GA1UEAxMoQjlBNTVERDEyM0MyRjIyNEM0RTI0 NTg1NjkwNUY3OEYyRjM1NEQ5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+VKVqtGL1huQI/SMDxVfHzEvjKokcqVpyM+remtdZYHPw9dHMGGSkLlWIM xkMIyqXj0/VNLvneuEv/DEb1tFYd7P8nUjHbWFgQbSmWJFhjCmN8bASsandSCiLV ZAMvY0XcP4C9u4eD3c0vjdJjDlamI8WJ2jRnv9etYLPk/0aPsMLR36uR8bghXG/I 1gLtxttnj0j+nEeF4WWbYZEeWxYT3kgacGKNpFiC+F4sVOY3u6N34lVUx9Ctr/lV ipAC8slwtQCSboXQNLcyUX+blN23El6mD1YB9UJRt4/LivPwQY6g5/G4REOnHV8X LZA8LMzBLhn1jmSErsJEE/BqJLcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLmlXdEjwvIkxOJFhWkF948vNU2SMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xZjJmNjRjYS1mYTU0LTQ5OWUtYmMzMy00ODYyZGNhNzk0ZjcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFmMmY2NGNh LWZhNTQtNDk5ZS1iYzMzLTQ4NjJkY2E3OTRmNy8wL0I5QTU1REQxMjNDMkYyMjRD NEUyNDU4NTY5MDVGNzhGMkYzNTREOTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdCmEwDQYJKoZIhvcNAQELBQADggEBAI4sQ3HuFCpbo+jOYrgwdxP7RbArfu3U PZthiJ+rHtbbIqP8IoLuble74hRhKK1C11xTOcbSEY02ZDf/dltxtRlMxsfq4tZz Dgb4QniRiveIkAQFbZxpBrHIMIX8BBfrQiUYTgMIYz1O3FvkNYoK3gc9nX2QoXBJ GD8lnKHoIx7/4CCQzyt4+tabEGJDBkrQ7mlCR2+ttf9re8ZBniBLcZXyBr2cA2e5 E78JO3QlSxvidjppdY1zo+48v2QlkhD4HsrkL4K69NhhWnK8D3eW9e2wsVkdqYHF V+ZmiKcDc64YC890LiL6XXNvZHWAoe7z4jescn6nmxLdtJF0/ODMffI= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net