$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer File: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer (raw, json) Hash identifier: NxBIftMm6rzrhIKKHIomNovPgipbu6Qoqd2V+YsyOH0= Subject key identifier: 02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 57CF8F197CA206D4F8EDEAE899A9103BA14ACFF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft caRepository: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 21 Jan 2025 11:57:54 +0000 Certificate not after: Tue 20 Jan 2026 12:02:54 +0000 Subordinate resources: IP: 103.83.176.0/23 IP: 2001:df7:f200::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 01:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:cf:8f:19:7c:a2:06:d4:f8:ed:ea:e8:99:a9:10:3b:a1:4a:cf:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 21 11:57:54 2025 GMT Not After : Jan 20 12:02:54 2026 GMT Subject: CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2f:95:9f:ad:ce:18:94:d3:db:e6:f2:dc:eb: e4:8a:1a:86:20:34:cb:40:31:59:fe:5f:0f:05:33: a1:0f:a3:14:7a:51:92:d1:18:73:5e:e1:3d:1b:66: 6b:f2:f4:f4:b5:62:f5:25:0d:58:d6:64:6a:50:1a: 59:cf:e1:c7:d9:56:2b:36:b7:d1:b1:60:2d:cc:94: c9:d9:82:55:3a:0c:a4:0a:9e:91:02:da:74:7b:c0: 6c:fe:ca:e0:76:03:ff:d7:c7:ab:f4:42:26:b9:38: d2:39:16:a6:ce:53:54:ea:53:0c:d8:9e:53:46:fe: 3f:f4:52:0b:6e:b0:d9:df:23:bc:5d:54:1c:c2:8f: 0e:f0:bf:f7:4e:65:24:bc:e4:19:59:9c:46:83:75: 1d:ec:e3:a7:35:28:69:fb:cb:c2:71:86:c4:fb:fe: 8a:67:63:89:8c:1f:6c:ab:d2:8a:e5:90:58:08:5d: c9:5a:0f:56:e8:86:44:1e:42:ba:7f:34:24:88:5d: a5:59:9a:41:72:a9:e7:30:1d:98:cd:c8:c0:5e:41: 53:95:e0:94:d2:c6:73:c4:a4:27:d5:e4:41:c5:07: 2e:cc:be:36:13:f5:df:bd:3e:e3:ba:73:fa:ee:d4: 7d:a4:a9:92:a0:ca:fd:eb:1e:15:f8:c4:3d:33:9d: 60:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.83.176.0/23 IPv6: 2001:df7:f200::/48 Signature Algorithm: sha256WithRSAEncryption 71:89:7c:fd:a4:70:1a:32:e8:d1:0f:ff:43:d9:5f:f8:44:d5: 35:06:30:f5:af:4f:62:94:2a:4d:f6:39:6b:09:40:89:60:2b: 95:5c:2e:04:c1:20:24:d6:37:80:d1:65:7b:5d:a5:af:2e:74: 21:f9:ac:a8:bf:a4:3a:33:58:a8:aa:95:1d:fe:c6:93:6e:2d: 4c:94:de:c2:a3:00:b9:6e:31:4f:19:99:cf:db:97:70:64:80: df:f1:57:04:dd:94:3c:d8:99:ac:55:4e:5a:ab:6c:70:1e:a2: f5:b8:a2:71:9e:49:fb:f4:bc:a2:69:f4:1b:c1:e6:1b:1e:df: 56:08:03:c5:65:4e:bc:be:21:da:87:7b:27:31:47:df:55:17: eb:ad:ae:49:92:6d:97:4f:3e:53:a8:c8:95:9d:48:43:4f:c8: e1:9f:e8:92:5c:a5:e9:1c:7a:8c:5e:16:79:de:d4:25:24:4e: 6f:d2:36:16:ee:3f:45:e6:d0:11:8f:26:9e:87:03:d4:7f:71: da:a2:5b:2c:30:33:39:d7:45:31:61:9b:14:50:3e:c2:3c:70: 6b:d6:2a:54:0e:ed:d2:9a:b1:23:24:fb:47:bc:b8:9e:05:5b: d6:04:a9:1e:aa:f0:18:72:be:d9:5f:2c:cb:8d:dd:08:0c:b7: d5:5d:c2:9d -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUV8+PGXyiBtT47eromakQO6FKz/MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEyMTExNTc1NFoX DTI2MDEyMDEyMDI1NFowMzExMC8GA1UEAxMoMDIyMzY5MTNCNDZBOTAwM0MwNjQ1 RTZDQzg1OEVBNTRENkQ3RjRBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMwvlZ+tzhiU09vm8tzr5IoahiA0y0AxWf5fDwUzoQ+jFHpRktEYc17hPRtm a/L09LVi9SUNWNZkalAaWc/hx9lWKza30bFgLcyUydmCVToMpAqekQLadHvAbP7K 4HYD/9fHq/RCJrk40jkWps5TVOpTDNieU0b+P/RSC26w2d8jvF1UHMKPDvC/905l JLzkGVmcRoN1HezjpzUoafvLwnGGxPv+imdjiYwfbKvSiuWQWAhdyVoPVuiGRB5C un80JIhdpVmaQXKp5zAdmM3IwF5BU5XglNLGc8SkJ9XkQcUHLsy+NhP1370+47pz +u7UfaSpkqDK/eseFfjEPTOdYOUCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAIjaRO0apADwGRebMhY6lTW1/SsMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81YjcyZjcxYS1iOWMyLTQwMzMtOTY3NS1kNzcwNzYwM2E4MmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzViNzJmNzFh LWI5YzItNDAzMy05Njc1LWQ3NzA3NjAzYTgyYy8wLzAyMjM2OTEzQjQ2QTkwMDND MDY0NUU2Q0M4NThFQTU0RDZEN0Y0QUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnU7AwDwQCAAIwCQMHACABDffyADANBgkqhkiG9w0BAQsFAAOCAQEAcYl8/aRw GjLo0Q//Q9lf+ETVNQYw9a9PYpQqTfY5awlAiWArlVwuBMEgJNY3gNFle12lry50 IfmsqL+kOjNYqKqVHf7Gk24tTJTewqMAuW4xTxmZz9uXcGSA3/FXBN2UPNiZrFVO WqtscB6i9biicZ5J+/S8omn0G8HmGx7fVggDxWVOvL4h2od7JzFH31UX662uSZJt l08+U6jIlZ1IQ0/I4Z/oklyl6Rx6jF4Wed7UJSROb9I2Fu4/RebQEY8mnocD1H9x 2qJbLDAzOddFMWGbFFA+wjxwa9YqVA7t0pqxIyT7R7y4ngVb1gSpHqrwGHK+2V8s y43dCAy31V3CnQ== -----END CERTIFICATE-----Generated at Sun Apr 27 19:11:48 2025 by rpki-client on console.sobornost.net