$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer File: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer (raw, json) Hash identifier: t8wMPCldm+JX6viCUjePMeuPGIfoBruOI9RSoQiIEFA= Subject key identifier: D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 174FE5DADC2D87635A5EFBA39B3EB554D8AA6829 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft caRepository: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 06 Dec 2024 04:22:09 +0000 Certificate not after: Fri 05 Dec 2025 04:27:09 +0000 Subordinate resources: IP: 157.20.132.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:4f:e5:da:dc:2d:87:63:5a:5e:fb:a3:9b:3e:b5:54:d8:aa:68:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Dec 6 04:22:09 2024 GMT Not After : Dec 5 04:27:09 2025 GMT Subject: CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:be:54:9d:a6:7f:ac:2c:4b:6c:53:fe:0b:5d: bb:4e:d8:1d:0f:17:12:3a:77:51:59:9e:0e:88:82: ef:c7:06:90:f9:c7:3c:19:7d:9f:f3:07:f7:74:92: fa:11:45:77:79:68:38:62:9d:6e:c7:e4:4e:aa:c7: db:76:0d:e9:56:3b:bf:5a:3a:f8:33:29:ce:d4:30: 89:80:79:d6:4c:80:83:49:0b:45:82:70:31:37:9f: 40:5d:60:10:a3:08:db:95:ca:2d:e1:7e:08:4e:92: 8c:71:6c:12:3f:77:cd:87:f3:b3:8f:f1:96:d1:8d: 4c:43:1b:c2:0c:4f:f8:94:ef:f9:b4:a3:ab:9a:68: 9c:a6:55:55:05:e7:9c:92:42:8d:aa:d3:04:63:cc: 79:31:61:0e:c8:cc:c0:8f:0b:b4:56:b6:72:81:c0: 67:33:ee:12:a4:67:2e:33:2f:9e:62:f0:60:75:f1: fd:68:7e:8f:f7:08:b9:cc:e1:f8:0d:5f:90:76:ac: 59:96:7d:d3:86:b7:91:9b:07:c8:5d:65:4d:95:dc: 1b:35:9e:a9:09:25:ab:be:a2:b0:d4:c0:c7:c4:50: 4b:71:42:ef:1d:8b:67:11:1a:c0:c3:6e:b0:4e:4d: 97:95:46:4f:d8:05:f8:ee:d9:44:4d:31:2c:b7:09: 47:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.132.0/23 Signature Algorithm: sha256WithRSAEncryption 89:73:42:4f:ce:2b:36:86:f2:42:8d:dd:8b:8c:41:af:fa:d1: 02:79:a1:b1:d9:12:71:79:d6:e8:e4:85:06:78:42:b0:5a:1a: d3:b3:ce:c2:53:29:26:fc:d7:9d:4b:61:74:3b:2a:9a:f7:93: 0d:f9:fc:1e:e0:7e:86:de:49:84:7c:6c:dc:db:7d:8a:a3:b4: 65:cb:bf:f6:92:6f:74:5c:3d:31:d9:ab:38:38:75:98:32:35: 10:0c:d9:91:fb:28:ec:02:cf:1f:da:25:0d:d9:ec:85:53:0a: 29:4d:b7:be:79:90:3d:86:46:0e:55:c7:c4:c9:a7:89:11:9a: f7:76:4f:47:3e:80:6c:c5:a2:e9:47:7c:8c:38:3a:b9:74:4c: 15:20:be:64:6f:d1:f1:1a:34:ec:b6:7f:2a:83:fe:65:b0:f0: 89:c3:0e:2f:54:f5:36:e4:9f:7c:67:25:29:40:55:cf:eb:f1: ac:4c:7d:89:33:e8:82:af:23:63:9c:10:88:71:d5:bb:5d:b7: c1:d2:35:5a:ad:27:a2:19:9c:70:b2:bb:68:7d:d0:36:5f:56: c4:ee:35:f8:7f:eb:7a:4a:85:9d:26:32:c6:02:8d:02:48:70: 87:22:8d:36:e8:eb:be:b5:48:59:f7:26:b1:8a:d1:6d:64:4f: 40:48:db:4f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUF0/l2twth2NaXvujmz61VNiqaCkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTIwNjA0MjIwOVoX DTI1MTIwNTA0MjcwOVowMzExMC8GA1UEAxMoRDQ2ODhCNTVGQjhDMDBGNkFFQzI4 NEU1QkNCODFFMjI3QzUxMkRFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOS+VJ2mf6wsS2xT/gtdu07YHQ8XEjp3UVmeDoiC78cGkPnHPBl9n/MH93SS +hFFd3loOGKdbsfkTqrH23YN6VY7v1o6+DMpztQwiYB51kyAg0kLRYJwMTefQF1g EKMI25XKLeF+CE6SjHFsEj93zYfzs4/xltGNTEMbwgxP+JTv+bSjq5ponKZVVQXn nJJCjarTBGPMeTFhDsjMwI8LtFa2coHAZzPuEqRnLjMvnmLwYHXx/Wh+j/cIuczh +A1fkHasWZZ904a3kZsHyF1lTZXcGzWeqQklq76isNTAx8RQS3FC7x2LZxEawMNu sE5Nl5VGT9gF+O7ZRE0xLLcJR7UCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNRoi1X7jAD2rsKE5by4HiJ8US3tMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lOWMxNWI3OC0yMDcxLTQ0ZDEtOWExZC1hZDZlYjA5ZmFlMDgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5YzE1Yjc4 LTIwNzEtNDRkMS05YTFkLWFkNmViMDlmYWUwOC8wL0Q0Njg4QjU1RkI4QzAwRjZB RUMyODRFNUJDQjgxRTIyN0M1MTJERUQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFIQwDQYJKoZIhvcNAQELBQADggEBAIlzQk/OKzaG8kKN3YuMQa/60QJ5obHZ EnF51ujkhQZ4QrBaGtOzzsJTKSb8151LYXQ7Kpr3kw35/B7gfobeSYR8bNzbfYqj tGXLv/aSb3RcPTHZqzg4dZgyNRAM2ZH7KOwCzx/aJQ3Z7IVTCilNt755kD2GRg5V x8TJp4kRmvd2T0c+gGzFoulHfIw4Orl0TBUgvmRv0fEaNOy2fyqD/mWw8InDDi9U 9Tbkn3xnJSlAVc/r8axMfYkz6IKvI2OcEIhx1btdt8HSNVqtJ6IZnHCyu2h90DZf VsTuNfh/63pKhZ0mMsYCjQJIcIcijTbo6761SFn3JrGK0W1kT0BI208= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net