$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer File: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer (raw, json) Hash identifier: SqGzwOLolM2Dv2SZpQHgbtzENY1AhWHduh8PDXqPdcE= Subject key identifier: FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1396ABBA5A90C03DE87F4396752D783F4F39AD99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft caRepository: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 18 Feb 2025 11:16:04 +0000 Certificate not after: Tue 17 Feb 2026 11:21:04 +0000 Subordinate resources: IP: 157.20.95.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:96:ab:ba:5a:90:c0:3d:e8:7f:43:96:75:2d:78:3f:4f:39:ad:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 18 11:16:04 2025 GMT Not After : Feb 17 11:21:04 2026 GMT Subject: CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:22:af:8a:55:ed:c7:2b:59:ae:74:47:f3:b1: 78:db:03:f9:e7:87:4d:f2:26:1a:34:e2:46:96:99: 42:c6:6a:72:f1:ef:79:7e:9c:ab:00:c3:71:65:01: f6:73:ac:8c:41:38:0b:a2:83:de:b8:fb:09:7d:a1: 1a:85:38:ac:28:fa:10:93:c5:4f:ee:c8:52:5f:60: 40:6d:c9:2c:dd:0a:1f:c6:6a:4b:38:91:c7:16:d1: c0:92:8d:e5:44:da:dc:ca:d6:55:f0:29:a6:bd:18: 78:44:0c:25:95:a2:3c:76:f0:dc:0f:4d:23:c3:2a: 57:f9:85:15:f8:71:d1:77:db:21:36:d3:bf:11:02: 24:08:2d:37:3e:ee:50:9d:ce:97:c2:26:27:23:6f: 6e:bf:84:68:37:50:cd:b5:36:e9:0e:17:a4:fc:26: c4:a9:e4:ef:75:8e:11:c0:cd:1f:0a:99:78:bb:49: 91:74:36:0f:a7:79:72:40:e5:eb:85:36:0c:dc:35: 80:2b:59:23:aa:b1:36:8d:06:a7:a6:93:ff:7d:ae: 89:16:d1:ac:bc:93:71:c3:a0:f0:39:f9:f5:03:7c: 83:8c:24:6e:e4:2c:76:82:12:94:67:96:f2:f0:c6: 19:ad:04:f0:9a:d3:90:93:9f:97:32:74:cf:0a:4f: 84:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.95.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:81:13:37:3b:da:4d:c4:fe:89:29:92:45:77:b9:f0:de:6b: a5:04:51:e1:56:0d:a7:44:e4:1d:69:86:0e:db:8b:d5:0f:29: 6b:88:0e:1e:27:51:f9:ea:9d:6f:38:50:78:20:1a:73:0d:68: d1:1b:c9:c8:c9:a0:ed:20:65:e8:2b:07:25:37:17:6c:4c:ca: 52:a5:19:31:3e:9d:7a:20:b5:25:91:f3:7e:ce:9c:34:13:cb: 57:69:2d:80:89:2d:be:fc:e0:16:b9:6f:8e:5b:cf:31:6f:b9: db:3a:ad:85:b3:53:e4:10:62:7f:13:52:ef:3e:fb:d2:9a:dc: ad:c7:c6:83:ec:27:cc:20:8b:15:9a:a7:ce:10:fc:3b:b6:26: 65:81:ea:b5:d3:08:f7:74:00:24:16:e7:ce:12:0b:65:c9:3b: 85:61:0c:52:e1:68:c7:b6:1f:66:3c:cd:70:99:aa:68:81:be: 48:62:27:d0:de:d9:c8:16:6e:49:ba:ea:6f:44:1d:d4:ad:c8: 0f:54:4f:92:12:91:04:1e:85:89:b3:05:d4:8f:49:40:ae:5d: 78:87:c8:45:4b:07:e8:f1:59:6d:03:f1:3d:39:82:1b:0b:15: f4:f0:3d:d7:a7:7f:14:57:7c:08:e9:6e:63:8b:e7:21:70:f7: da:5a:f6:41 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUE5arulqQwD3of0OWdS14P085rZkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDIxODExMTYwNFoX DTI2MDIxNzExMjEwNFowMzExMC8GA1UEAxMoRkQxOEUzRUNCNUYyMjg1QzA3NTFD NDhFQUYyM0VGMjEwQkE4RkRDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKAir4pV7ccrWa50R/OxeNsD+eeHTfImGjTiRpaZQsZqcvHveX6cqwDDcWUB 9nOsjEE4C6KD3rj7CX2hGoU4rCj6EJPFT+7IUl9gQG3JLN0KH8ZqSziRxxbRwJKN 5UTa3MrWVfAppr0YeEQMJZWiPHbw3A9NI8MqV/mFFfhx0XfbITbTvxECJAgtNz7u UJ3Ol8ImJyNvbr+EaDdQzbU26Q4XpPwmxKnk73WOEcDNHwqZeLtJkXQ2D6d5ckDl 64U2DNw1gCtZI6qxNo0Gp6aT/32uiRbRrLyTccOg8Dn59QN8g4wkbuQsdoISlGeW 8vDGGa0E8JrTkJOflzJ0zwpPhP0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP0Y4+y18ihcB1HEjq8j7yELqP3MMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kYWUxM2JhYy05MWMxLTQ2M2ItODMzMy02NGVlYzZkMjc5N2UvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhZTEzYmFj LTkxYzEtNDYzYi04MzMzLTY0ZWVjNmQyNzk3ZS8wL0ZEMThFM0VDQjVGMjI4NUMw NzUxQzQ4RUFGMjNFRjIxMEJBOEZEQ0MubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdFF8wDQYJKoZIhvcNAQELBQADggEBAEqBEzc72k3E/okpkkV3ufDea6UEUeFW DadE5B1phg7bi9UPKWuIDh4nUfnqnW84UHggGnMNaNEbycjJoO0gZegrByU3F2xM ylKlGTE+nXogtSWR837OnDQTy1dpLYCJLb784Ba5b45bzzFvuds6rYWzU+QQYn8T Uu8++9Ka3K3HxoPsJ8wgixWap84Q/Du2JmWB6rXTCPd0ACQW584SC2XJO4VhDFLh aMe2H2Y8zXCZqmiBvkhiJ9De2cgWbkm66m9EHdStyA9UT5ISkQQehYmzBdSPSUCu XXiHyEVLB+jxWW0D8T05ghsLFfTwPdenfxRXfAjpbmOL5yFw99pa9kE= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net