$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer File: 10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer (raw, json) Hash identifier: Q2nPAc7jlzF4LoyWui6KUhJLMtPFaHTprNLb5wZEhpo= Subject key identifier: 10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6DFEAE1ABEDEF60A632245F38CAD5F95843EB624 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft caRepository: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 10:58:40 +0000 Certificate not after: Fri 06 Mar 2026 11:03:40 +0000 Subordinate resources: IP: 150.242.176.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:fe:ae:1a:be:de:f6:0a:63:22:45:f3:8c:ad:5f:95:84:3e:b6:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 7 10:58:40 2025 GMT Not After : Mar 6 11:03:40 2026 GMT Subject: CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:97:3b:70:53:ad:5c:05:2a:38:0f:db:4b:cc: 37:3b:bf:c4:ca:1f:83:aa:f2:b1:1d:0d:d4:10:84: d9:d7:8a:4c:28:8c:64:f9:e3:34:09:41:6c:86:8b: a0:b8:cc:5b:4e:d1:57:f5:67:4c:a3:d9:1d:3c:fe: 9d:f9:ee:bb:bb:f1:66:55:e8:1c:b2:a6:16:33:b3: e0:d4:5c:f6:ad:0f:1b:15:13:8c:94:d6:43:41:28: e1:0f:9a:cd:dd:d5:c2:d4:eb:ef:af:37:c3:3d:36: 28:09:ce:24:5d:2b:73:b1:77:ec:38:ca:71:e8:0d: 28:b4:2a:bf:5b:04:d4:00:58:25:ba:e0:1e:1d:d2: 36:29:1e:cf:3d:89:96:3f:7b:c0:d4:e9:37:e3:a9: a9:86:92:a9:47:9d:20:36:3e:10:63:78:ff:be:5a: f8:85:e9:1a:ca:20:59:ff:77:17:96:c6:0e:47:f5: 4a:20:33:d9:1e:33:27:bf:b2:3d:94:89:43:75:e1: 47:c7:c7:26:47:9b:64:85:b5:91:69:5b:82:ac:63: 4c:e9:60:b7:e2:0c:74:01:5a:e7:27:84:44:96:f5: 50:a0:28:bb:cb:41:d7:64:63:26:bc:5a:e4:0e:05: 87:1c:ac:1c:11:6d:34:be:33:a5:81:c4:8b:55:65: 8f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.242.176.0/23 Signature Algorithm: sha256WithRSAEncryption 37:5d:bc:fc:d4:1d:ef:c7:47:38:b1:60:2f:39:71:a5:da:ba: 13:d1:1f:d5:fe:89:21:bd:1d:eb:c9:3e:d0:ad:7d:db:c5:fe: 79:ea:d1:40:c7:37:02:5d:19:26:f8:e5:25:a0:58:a4:fc:b3: b2:b7:4c:91:1d:1e:bc:34:4a:de:a9:f7:a1:22:3d:59:9b:b4: 2d:a6:a8:5e:31:d0:c7:14:da:05:80:53:64:79:57:29:ee:ab: 16:54:30:b8:8c:89:41:34:d4:8f:98:a9:b3:e0:9d:d6:14:74: a9:5e:8b:23:3d:d5:7b:3a:8f:a0:f4:1d:76:2f:03:e3:db:93: bb:30:35:83:8a:c7:31:ee:f1:35:88:2b:5f:c5:fd:ad:c4:b7: f2:6f:06:89:3a:1f:57:64:09:53:1b:bc:97:ae:e7:dd:d7:e7: e0:68:00:92:89:91:f5:42:b5:03:65:67:02:4c:e9:98:dc:ce: 7a:29:04:15:e3:05:bd:65:a5:56:64:44:f0:89:78:be:30:40: 54:f7:37:8b:6b:df:7a:98:5d:6b:32:8d:2b:58:3f:a6:a9:bd: 2c:30:0d:88:19:4a:be:43:3b:0e:17:c3:c3:5f:bd:57:72:52: 20:a7:b9:8a:64:c0:c1:82:6d:64:0c:77:59:1c:ee:6c:44:d2: 22:73:67:b0 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbf6uGr7e9gpjIkXzjK1flYQ+tiQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMwNzEwNTg0MFoX DTI2MDMwNjExMDM0MFowMzExMC8GA1UEAxMoMTA5MDJCRjNBRUMxNjVGQzlDQzND RDcyQURDQUJGNUJCRjdCN0NGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCXO3BTrVwFKjgP20vMNzu/xMofg6rysR0N1BCE2deKTCiMZPnjNAlBbIaL oLjMW07RV/VnTKPZHTz+nfnuu7vxZlXoHLKmFjOz4NRc9q0PGxUTjJTWQ0Eo4Q+a zd3VwtTr7683wz02KAnOJF0rc7F37DjKcegNKLQqv1sE1ABYJbrgHh3SNikezz2J lj97wNTpN+OpqYaSqUedIDY+EGN4/75a+IXpGsogWf93F5bGDkf1SiAz2R4zJ7+y PZSJQ3XhR8fHJkebZIW1kWlbgqxjTOlgt+IMdAFa5yeERJb1UKAou8tB12RjJrxa 5A4FhxysHBFtNL4zpYHEi1Vlj8ECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBCQK/OuwWX8nMPNcq3Kv1u/e3z0MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81N2MwNTUyMS0wMzM4LTRmMzEtYTIwOS00Zjg3OGJlZjYzOGEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3YzA1NTIx LTAzMzgtNGYzMS1hMjA5LTRmODc4YmVmNjM4YS8wLzEwOTAyQkYzQUVDMTY1RkM5 Q0MzQ0Q3MkFEQ0FCRjVCQkY3QjdDRjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGW8rAwDQYJKoZIhvcNAQELBQADggEBADddvPzUHe/HRzixYC85caXauhPRH9X+ iSG9HevJPtCtfdvF/nnq0UDHNwJdGSb45SWgWKT8s7K3TJEdHrw0St6p96EiPVmb tC2mqF4x0McU2gWAU2R5VynuqxZUMLiMiUE01I+YqbPgndYUdKleiyM91Xs6j6D0 HXYvA+Pbk7swNYOKxzHu8TWIK1/F/a3Et/JvBok6H1dkCVMbvJeu593X5+BoAJKJ kfVCtQNlZwJM6ZjcznopBBXjBb1lpVZkRPCJeL4wQFT3N4tr33qYXWsyjStYP6ap vSwwDYgZSr5DOw4Xw8NfvVdyUiCnuYpkwMGCbWQMd1kc7mxE0iJzZ7A= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:12 2025 by rpki-client on console.sobornost.net