$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer File: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer (raw, json) Hash identifier: THcKjkhepJZ1OusWu4mW5Xill8zBxx3kR7ln8z0tUCw= Subject key identifier: F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 09B2FF1A3520B21ED4AEEC38195379439A94BE25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft caRepository: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 18 Apr 2025 22:39:39 +0000 Certificate not after: Fri 17 Apr 2026 22:44:39 +0000 Subordinate resources: IP: 157.66.84.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b2:ff:1a:35:20:b2:1e:d4:ae:ec:38:19:53:79:43:9a:94:be:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 18 22:39:39 2025 GMT Not After : Apr 17 22:44:39 2026 GMT Subject: CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5d:8a:5d:8b:72:01:3b:69:3a:6f:3c:f0:87: 7d:35:57:fd:2d:54:d4:47:34:12:ab:ab:e0:1e:37: 7e:98:3e:53:49:48:e8:48:8c:72:df:5b:24:42:32: da:a7:59:85:ff:16:3f:8c:e9:27:d9:3f:92:19:b9: 5f:8f:c6:95:0e:62:cc:c7:30:a7:22:ce:9c:a3:62: 5e:e5:f7:a3:aa:f8:68:bd:63:9e:a2:bf:2a:16:f3: e8:a4:78:fc:29:2e:b5:e8:03:17:ff:81:c5:f3:57: 71:10:d4:e4:c9:15:ca:53:37:8d:e5:f0:cd:d7:ec: cc:b4:8f:ac:8e:f0:31:44:2b:d5:73:36:f5:c5:73: 6e:c0:7b:ce:07:73:6a:f3:38:f4:c2:4e:03:4e:8b: 2f:95:33:72:80:12:06:65:39:ec:84:43:5b:95:19: 57:3b:62:6a:5d:26:3e:98:12:3c:4e:f9:20:14:32: 34:e3:80:a9:cd:05:ef:15:23:1b:60:4d:ff:e6:b0: 09:c4:ba:11:9d:bb:47:4a:8b:d9:19:07:c4:b3:bf: c4:42:f6:75:cb:7a:b1:ac:7a:d7:12:c0:ce:a8:12: ae:ca:a9:e9:ed:a7:d7:d6:fc:8e:b9:b8:e2:7b:01: 4a:9f:2b:36:f8:59:24:14:d4:f5:2e:ac:d3:09:76: 49:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.84.0/23 Signature Algorithm: sha256WithRSAEncryption 91:56:e5:32:ad:14:fb:36:9a:24:c7:28:41:44:34:c1:b5:cd: dc:52:4b:4d:fe:b7:81:a6:d3:ae:aa:d6:65:6a:88:7c:c7:a9: ac:0a:58:64:b5:02:4c:3b:3e:d2:1a:53:a4:a3:78:8d:b2:d8: 82:07:52:d6:22:cc:71:8b:e7:bb:91:27:c7:4b:a9:6a:59:f2: f7:13:a7:db:4b:4b:ca:4d:32:bf:9b:e2:f1:da:6f:be:a9:e1: a6:4f:a8:59:e8:2e:66:3f:25:42:23:a6:15:2e:bb:2d:1d:3c: f7:9f:c9:74:c9:66:50:53:e7:da:eb:83:a0:43:99:5d:71:cc: b8:df:68:67:1f:12:7c:7d:48:72:f6:08:ee:41:22:72:1e:11: b6:a0:d3:97:e4:17:9d:9a:74:81:65:67:31:90:ec:d1:71:58: 79:ef:68:88:31:f0:71:76:0c:9e:cc:33:60:16:5f:95:a7:a0: c8:38:6e:ae:75:30:3f:08:4e:2c:98:8f:8f:24:61:8e:24:e9: c4:cc:99:dc:cc:80:37:27:c5:5c:ff:ff:3c:72:2e:b7:ea:3a: 30:e9:81:39:97:cf:f1:1e:fc:1a:8f:43:ad:22:cc:a3:fd:6c: 78:47:d7:ce:4d:37:b1:6a:35:07:81:a4:5b:64:34:34:71:5d: 0b:e7:34:2d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUCbL/GjUgsh7Uruw4GVN5Q5qUviUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDQxODIyMzkzOVoX DTI2MDQxNzIyNDQzOVowMzExMC8GA1UEAxMoRjREOUM2QzNFMjY1M0U1M0U0NTQ5 RUNEN0IwRTQzMjZGRTk1NkI0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZdil2LcgE7aTpvPPCHfTVX/S1U1Ec0Equr4B43fpg+U0lI6EiMct9bJEIy 2qdZhf8WP4zpJ9k/khm5X4/GlQ5izMcwpyLOnKNiXuX3o6r4aL1jnqK/Khbz6KR4 /CkutegDF/+BxfNXcRDU5MkVylM3jeXwzdfszLSPrI7wMUQr1XM29cVzbsB7zgdz avM49MJOA06LL5UzcoASBmU57IRDW5UZVztial0mPpgSPE75IBQyNOOAqc0F7xUj G2BN/+awCcS6EZ27R0qL2RkHxLO/xEL2dct6sax61xLAzqgSrsqp6e2n19b8jrm4 4nsBSp8rNvhZJBTU9S6s0wl2SXMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPTZxsPiZT5T5FSezXsOQyb+lWtMMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lOTdjNjgyYS00NDhiLTQwZTItYTg4Zi0xNmRmODNkZDMzMzcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5N2M2ODJh LTQ0OGItNDBlMi1hODhmLTE2ZGY4M2RkMzMzNy8wL0Y0RDlDNkMzRTI2NTNFNTNF NDU0OUVDRDdCMEU0MzI2RkU5NTZCNEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdQlQwDQYJKoZIhvcNAQELBQADggEBAJFW5TKtFPs2miTHKEFENMG1zdxSS03+ t4Gm066q1mVqiHzHqawKWGS1Akw7PtIaU6SjeI2y2IIHUtYizHGL57uRJ8dLqWpZ 8vcTp9tLS8pNMr+b4vHab76p4aZPqFnoLmY/JUIjphUuuy0dPPefyXTJZlBT59rr g6BDmV1xzLjfaGcfEnx9SHL2CO5BInIeEbag05fkF52adIFlZzGQ7NFxWHnvaIgx 8HF2DJ7MM2AWX5WnoMg4bq51MD8ITiyYj48kYY4k6cTMmdzMgDcnxVz//zxyLrfq OjDpgTmXz/Ee/BqPQ60izKP9bHhH185NN7FqNQeBpFtkNDRxXQvnNC0= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net