$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer File: D6FA07102C8726922074D42DFF59946144A13506.cer (raw, json) Hash identifier: YS+7D8/RMIBmiTYOG+8FKJuw22cq9/wH9Jd1CSCZDJw= Subject key identifier: D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 4AA6AD3287B5A89813B2B23066F145739B6716F0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft caRepository: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 28 Nov 2024 11:32:21 +0000 Certificate not after: Thu 27 Nov 2025 11:37:21 +0000 Subordinate resources: IP: 160.25.200.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a6:ad:32:87:b5:a8:98:13:b2:b2:30:66:f1:45:73:9b:67:16:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 28 11:32:21 2024 GMT Not After : Nov 27 11:37:21 2025 GMT Subject: CN=D6FA07102C8726922074D42DFF59946144A13506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fa:94:8f:13:b9:70:f3:65:ac:d3:72:13:01: 72:78:16:1b:01:c5:3c:f3:38:6a:b1:be:9b:70:45: eb:9a:64:dc:0d:7f:e4:21:33:29:c1:ef:0f:e7:75: ae:6c:c4:9c:1a:d4:2c:08:5e:23:41:b8:fc:e4:b0: bb:a4:d3:90:25:7a:83:90:a6:5d:c7:2a:46:d1:58: 19:49:d0:b4:d8:86:01:0d:1e:68:24:80:cd:92:9f: 76:89:0d:80:3c:ca:d5:db:f1:3c:f2:86:b0:6c:bc: cc:7c:21:f9:de:da:49:69:33:6d:28:b7:a8:97:f2: c2:40:07:72:db:c0:f0:3d:18:b0:f4:75:5a:d9:7a: 8c:15:73:41:d1:d6:db:f6:c0:ae:d3:67:b8:ba:aa: b3:56:6d:0a:f3:b6:6b:0d:10:49:fa:b1:4b:c9:49: b9:f6:a0:b6:29:ac:f0:d5:e5:d7:b1:63:82:4b:8e: fc:eb:1f:55:b9:00:cd:4f:0b:cf:17:fd:e1:24:22: fb:4c:4f:df:14:de:87:b0:0f:3a:06:ae:e9:54:6a: 36:7d:2b:39:98:70:44:3c:06:b3:84:e7:09:b2:b8: cf:bf:6f:31:4d:29:57:7e:5b:fc:64:c8:e3:83:b2: 2d:8a:45:04:58:df:a9:0b:03:4f:cb:03:38:2c:9d: f0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.200.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:ea:a2:2e:7d:af:14:d7:88:41:44:b1:4c:5d:29:93:1b:5f: 2e:55:e4:8b:2d:91:1d:6b:eb:57:f1:e5:58:52:69:72:22:3a: d0:78:2e:e3:cb:4e:8e:23:30:5c:75:9b:30:05:9f:f4:78:59: 12:87:f2:46:e9:77:51:a6:13:d8:bb:f6:53:83:90:eb:21:28: 29:55:9a:7e:a6:4b:cd:9b:77:be:a2:9c:a2:b4:2a:d0:8c:08: 25:4e:22:f1:1a:34:c9:19:be:95:d9:a0:79:43:d1:5a:2c:60: ae:25:53:85:ca:b7:1b:6a:e5:b7:f1:53:f7:55:c4:c5:c8:5b: 42:4e:dd:8a:b2:df:d9:99:6e:2c:ae:4c:7a:49:10:b4:7b:1f: b3:09:0f:77:a5:27:e3:ab:fa:b9:41:bb:c1:b3:77:ab:14:4c: ea:5f:a6:b4:a1:31:94:d8:d9:4e:dd:6a:02:19:01:a6:6f:81: 7e:81:f1:9a:1c:11:61:df:6b:02:6c:f3:5d:9f:d0:de:9f:dc: e5:2b:1a:3f:07:85:32:69:30:91:05:6d:e8:dd:bc:a4:c6:64: 96:7d:9c:54:35:32:1c:c8:90:e1:0a:79:52:a6:89:e1:3f:3a: 90:35:cb:75:12:b3:dd:d2:c3:d5:4d:d0:42:93:02:ab:d9:c3: 95:c3:56:f0 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUSqatMoe1qJgTsrIwZvFFc5tnFvAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTEyODExMzIyMVoX DTI1MTEyNzExMzcyMVowMzExMC8GA1UEAxMoRDZGQTA3MTAyQzg3MjY5MjIwNzRE NDJERkY1OTk0NjE0NEExMzUwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOf6lI8TuXDzZazTchMBcngWGwHFPPM4arG+m3BF65pk3A1/5CEzKcHvD+d1 rmzEnBrULAheI0G4/OSwu6TTkCV6g5CmXccqRtFYGUnQtNiGAQ0eaCSAzZKfdokN gDzK1dvxPPKGsGy8zHwh+d7aSWkzbSi3qJfywkAHctvA8D0YsPR1Wtl6jBVzQdHW 2/bArtNnuLqqs1ZtCvO2aw0QSfqxS8lJufagtims8NXl17FjgkuO/OsfVbkAzU8L zxf94SQi+0xP3xTeh7APOgau6VRqNn0rOZhwRDwGs4TnCbK4z79vMU0pV35b/GTI 44OyLYpFBFjfqQsDT8sDOCyd8O8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNb6BxAshyaSIHTULf9ZlGFEoTUGMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83ZDYzYTZlNi1jYWIzLTRmMGMtODVjNy1lMDJiZDY0MWUzY2UvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdkNjNhNmU2 LWNhYjMtNGYwYy04NWM3LWUwMmJkNjQxZTNjZS8wL0Q2RkEwNzEwMkM4NzI2OTIy MDc0RDQyREZGNTk5NDYxNDRBMTM1MDYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgGcgwDQYJKoZIhvcNAQELBQADggEBAIrqoi59rxTXiEFEsUxdKZMbXy5V5Ist kR1r61fx5VhSaXIiOtB4LuPLTo4jMFx1mzAFn/R4WRKH8kbpd1GmE9i79lODkOsh KClVmn6mS82bd76inKK0KtCMCCVOIvEaNMkZvpXZoHlD0VosYK4lU4XKtxtq5bfx U/dVxMXIW0JO3Yqy39mZbiyuTHpJELR7H7MJD3elJ+Or+rlBu8Gzd6sUTOpfprSh MZTY2U7dagIZAaZvgX6B8ZocEWHfawJs812f0N6f3OUrGj8HhTJpMJEFbejdvKTG ZJZ9nFQ1MhzIkOEKeVKmieE/OpA1y3USs93Sw9VN0EKTAqvZw5XDVvA= -----END CERTIFICATE-----Generated at Sat Apr 26 06:13:33 2025 by rpki-client on console.sobornost.net