$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer File: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer (raw, json) Hash identifier: fOxsHjfoNmpoOS9ILhrxwmh64hC+hyCQfqg7orsJ4yI= Subject key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0F52AD6E92AE69F9F3AA494B59C4EEA3390593A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft caRepository: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 15 Apr 2025 08:52:06 +0000 Certificate not after: Tue 14 Apr 2026 08:57:06 +0000 Subordinate resources: IP: 160.19.84.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:52:ad:6e:92:ae:69:f9:f3:aa:49:4b:59:c4:ee:a3:39:05:93:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 15 08:52:06 2025 GMT Not After : Apr 14 08:57:06 2026 GMT Subject: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:6a:ba:46:59:8c:d5:7b:75:81:41:0d:14: ad:36:9f:7d:81:f2:9c:af:bb:18:ec:1a:74:5e:9d: a2:15:d3:06:b3:13:80:7d:e1:47:76:7b:ee:6b:76: 66:fb:57:d6:e0:d4:6a:d9:b2:9d:a6:f8:34:e8:b8: 8d:fa:75:ee:fa:c6:dd:c4:47:83:45:5a:0b:c3:3a: 75:31:3d:7d:9b:40:b8:4d:3d:a0:1a:90:a5:36:40: 81:42:bc:63:cd:cd:6b:d7:3b:36:56:d0:36:06:e9: cf:47:1e:ce:35:b8:7f:7b:63:95:bf:23:99:4d:54: 7e:e3:ef:11:48:2e:43:8c:b0:f1:05:19:9f:11:b7: 22:3b:0e:fb:a1:40:61:76:e5:b7:e5:b3:bd:3e:59: 15:13:a7:e2:a2:62:39:88:8c:16:c4:a1:ef:c9:6c: d2:8b:ec:95:bc:8f:5a:99:cb:97:63:15:de:54:b5: 20:c4:28:28:bd:55:12:ab:fc:09:1c:bc:9d:01:82: 49:60:e5:ab:4b:e0:4c:d9:66:e0:88:a9:14:e6:ff: 00:c6:71:b2:64:b2:84:7d:6f:b5:b3:af:a9:f2:45: 78:59:ea:be:a6:0d:0d:a9:97:44:ac:e2:a7:2e:a0: 50:c6:da:ec:08:11:68:c9:0a:81:99:a9:b0:e8:4b: 3f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.84.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:78:e6:12:87:3e:2e:87:0a:1e:04:1d:d0:21:a4:d3:af:54: 89:d6:ff:54:bb:ce:2a:76:8a:be:82:2e:0d:84:d4:ce:6f:fd: 6c:75:43:79:00:a8:bb:c3:25:66:7e:2f:44:e2:0c:86:80:36: 6a:69:6e:7b:80:1c:f0:62:a7:30:39:43:9a:70:6b:c4:14:24: 9f:33:f0:94:9e:eb:a8:d4:2c:7d:59:9a:68:95:55:18:cf:04: d9:5b:82:be:4e:82:b1:33:fc:fa:84:c6:3c:94:d4:11:6c:09: 9b:62:c3:d0:c9:3e:84:c1:89:b7:7d:18:2d:09:36:e5:90:48: fb:66:44:91:cb:af:d7:a1:43:ac:e6:c0:63:c4:6e:5a:e6:08: aa:f0:54:04:40:98:49:cc:36:f8:d0:05:b6:3d:1a:4f:31:01: 56:79:05:df:f8:0f:e5:f5:bd:5f:7e:0c:4b:3d:35:7a:43:9a: 0a:49:c7:70:b1:83:1e:58:9f:fc:87:1f:7a:d4:20:d6:e7:6c: 56:67:0f:c8:93:04:94:56:d5:54:83:6f:b7:1b:bd:14:e7:de: e9:a5:bc:e8:57:c6:83:41:f1:38:1f:f1:91:ac:56:88:63:e1: 63:b6:2b:db:ad:f8:dd:ed:d6:e1:ae:23:32:a4:d6:ed:7d:de: d6:ef:7d:f5 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUD1KtbpKuafnzqklLWcTuozkFk6gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDQxNTA4NTIwNloX DTI2MDQxNDA4NTcwNlowMzExMC8GA1UEAxMoQzE4NEQwQkJBMENEMTk0NEMxOTlC RjIwRDBFQkE1MUE5RkI0N0FERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbuarpGWYzVe3WBQQ0UrTaffYHynK+7GOwadF6dohXTBrMTgH3hR3Z77mt2 ZvtX1uDUatmynab4NOi4jfp17vrG3cRHg0VaC8M6dTE9fZtAuE09oBqQpTZAgUK8 Y83Na9c7NlbQNgbpz0cezjW4f3tjlb8jmU1UfuPvEUguQ4yw8QUZnxG3IjsO+6FA YXblt+WzvT5ZFROn4qJiOYiMFsSh78ls0ovslbyPWpnLl2MV3lS1IMQoKL1VEqv8 CRy8nQGCSWDlq0vgTNlm4IipFOb/AMZxsmSyhH1vtbOvqfJFeFnqvqYNDamXRKzi py6gUMba7AgRaMkKgZmpsOhLP2UCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMGE0LugzRlEwZm/INDrpRqftHrdMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ZTM3NGQ0OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRlMzc0ZDQ4 LTVhNzAtNGM3Zi1iZGZkLWQ4MDUyZWJhZjBhYi8wL0MxODREMEJCQTBDRDE5NDRD MTk5QkYyMEQwRUJBNTFBOUZCNDdBREQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgE1QwDQYJKoZIhvcNAQELBQADggEBAAt45hKHPi6HCh4EHdAhpNOvVInW/1S7 zip2ir6CLg2E1M5v/Wx1Q3kAqLvDJWZ+L0TiDIaANmppbnuAHPBipzA5Q5pwa8QU JJ8z8JSe66jULH1ZmmiVVRjPBNlbgr5OgrEz/PqExjyU1BFsCZtiw9DJPoTBibd9 GC0JNuWQSPtmRJHLr9ehQ6zmwGPEblrmCKrwVARAmEnMNvjQBbY9Gk8xAVZ5Bd/4 D+X1vV9+DEs9NXpDmgpJx3Cxgx5Yn/yHH3rUINbnbFZnD8iTBJRW1VSDb7cbvRTn 3umlvOhXxoNB8Tgf8ZGsVohj4WO2K9ut+N3t1uGuIzKk1u193tbvffU= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net