$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer File: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer (raw, json) Hash identifier: bi8hmznpx3lxAwhU/ZOTMQdoDbl7vAO/U8VWiLbcOV8= Subject key identifier: 09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6D7563AE86380722B646822A3DF24D56B64CDCA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft caRepository: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 22 Apr 2025 16:04:40 +0000 Certificate not after: Tue 21 Apr 2026 16:09:40 +0000 Subordinate resources: IP: 103.143.194.0/23 IP: 2405:59c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:75:63:ae:86:38:07:22:b6:46:82:2a:3d:f2:4d:56:b6:4c:dc:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 22 16:04:40 2025 GMT Not After : Apr 21 16:09:40 2026 GMT Subject: CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:de:0f:59:48:aa:dc:8d:1c:13:fa:e5:35:20: e2:0e:d4:4f:ab:c6:ae:02:4e:bd:b3:d8:7f:02:96: 4b:fb:38:9b:dd:d8:2f:01:bc:69:ad:3b:4b:cb:4d: f2:14:32:1c:67:bc:1c:27:37:e1:70:29:c8:5f:7b: e4:e7:c8:8a:74:2f:5d:96:e3:05:2a:6f:76:ad:ce: a3:f8:46:de:fd:56:bf:5e:ae:f9:1c:cc:fe:c3:54: 3f:12:3e:86:ff:cf:da:c6:3f:30:bf:f9:32:cf:12: 6c:1c:64:0f:b1:cf:71:b6:1e:7e:3c:70:24:88:47: 4c:c1:a4:94:7d:6b:e0:81:41:5d:f0:d9:28:13:63: 6d:67:5e:32:3c:92:69:d2:bb:34:59:73:e2:12:2a: cf:d4:c4:8e:2c:68:3d:1f:0f:9b:2b:bf:05:b1:02: 4e:a0:0b:30:42:74:50:f8:cb:e7:dc:5f:1b:a5:77: 32:ba:1c:e7:89:fe:f3:e0:e8:ee:ae:7a:91:46:9c: 35:a3:f2:04:57:99:31:ca:3d:bd:c6:bc:38:54:dd: 7b:eb:46:b5:38:2b:08:e9:46:86:ce:d4:f3:96:fb: 1f:1f:fa:bb:0d:76:eb:73:fb:cc:22:54:cf:69:49: c9:c5:39:c4:52:fd:e9:b9:78:35:95:04:b5:7c:11: ce:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.194.0/23 IPv6: 2405:59c0::/32 Signature Algorithm: sha256WithRSAEncryption 73:d8:68:77:1a:3f:ee:74:be:b6:19:fa:5f:26:9e:76:87:59: 49:82:95:f2:0e:d5:95:ba:76:f7:f5:83:e9:6a:ab:01:36:b1: 39:61:55:90:1f:6c:5c:8c:82:cd:96:71:50:b9:04:67:fc:14: 3e:19:83:a3:28:c1:5b:e5:87:8b:f8:d5:25:30:09:bc:91:8c: 37:58:8e:6f:49:fe:6f:84:0c:2b:d2:84:98:3f:ff:a9:43:e0: e6:ea:51:db:37:2b:ac:9f:55:b7:d4:cb:3d:00:db:08:cf:09: f1:14:8a:f8:0d:b7:1a:ea:9f:e0:cc:83:0c:34:75:54:df:12: 7e:c1:e3:c5:4f:e6:2e:1e:49:92:bb:0e:58:84:8f:95:99:15: f8:31:91:5a:7a:e2:64:ee:3f:29:31:16:30:4b:39:db:6f:c5: 08:7a:d1:bb:66:11:43:b8:c4:fb:14:65:c3:35:95:ef:83:35: 3f:ed:70:58:e3:ee:f7:3f:af:f7:85:a9:8b:bd:31:f3:fb:d6: f8:b6:69:86:9a:7c:1a:b1:31:0c:ed:0b:e5:fa:25:41:13:11: e5:49:dd:ac:81:12:4e:c6:f0:db:fa:9c:6c:89:83:87:23:4f: 97:b1:37:91:2a:aa:a3:80:5f:08:c7:95:02:31:65:5f:eb:47: 30:95:35:1e -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUbXVjroY4ByK2RoIqPfJNVrZM3KIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQyMjE2MDQ0MFoX DTI2MDQyMTE2MDk0MFowMzExMC8GA1UEAxMoMDlGNThGNjQxQzVENDJCRDJEMjU1 N0ZGQTJFQTA2MUI2NkFDQkRBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMHeD1lIqtyNHBP65TUg4g7UT6vGrgJOvbPYfwKWS/s4m93YLwG8aa07S8tN 8hQyHGe8HCc34XApyF975OfIinQvXZbjBSpvdq3Oo/hG3v1Wv16u+RzM/sNUPxI+ hv/P2sY/ML/5Ms8SbBxkD7HPcbYefjxwJIhHTMGklH1r4IFBXfDZKBNjbWdeMjyS adK7NFlz4hIqz9TEjixoPR8Pmyu/BbECTqALMEJ0UPjL59xfG6V3Mroc54n+8+Do 7q56kUacNaPyBFeZMco9vca8OFTde+tGtTgrCOlGhs7U85b7Hx/6uw1263P7zCJU z2lJycU5xFL96bl4NZUEtXwRzq0CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAn1j2QcXUK9LSVX/6LqBhtmrL2oMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMmUwNmY3Mi0xMzIzLTRmYmQtYjI2ZS05ZWQ5YTlhZGQ4ODAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IyZTA2Zjcy LTEzMjMtNGZiZC1iMjZlLTllZDlhOWFkZDg4MC8wLzA5RjU4RjY0MUM1RDQyQkQy RDI1NTdGRkEyRUEwNjFCNjZBQ0JEQTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnj8IwDQQCAAIwBwMFACQFWcAwDQYJKoZIhvcNAQELBQADggEBAHPYaHcaP+50 vrYZ+l8mnnaHWUmClfIO1ZW6dvf1g+lqqwE2sTlhVZAfbFyMgs2WcVC5BGf8FD4Z g6MowVvlh4v41SUwCbyRjDdYjm9J/m+EDCvShJg//6lD4ObqUds3K6yfVbfUyz0A 2wjPCfEUivgNtxrqn+DMgww0dVTfEn7B48VP5i4eSZK7DliEj5WZFfgxkVp64mTu PykxFjBLOdtvxQh60btmEUO4xPsUZcM1le+DNT/tcFjj7vc/r/eFqYu9MfP71vi2 aYaafBqxMQztC+X6JUETEeVJ3ayBEk7G8Nv6nGyJg4cjT5exN5EqqqOAXwjHlQIx ZV/rRzCVNR4= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:11 2025 by rpki-client on console.sobornost.net