$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer File: 1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer (raw, json) Hash identifier: ZrlMOsO1xsn0Jl5xK5KGx6nhyckpCKixAQY+26PxBBc= Subject key identifier: 1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7EE59B0BE95ACB398CD753658483731311BA2301 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft caRepository: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 18 Feb 2025 22:37:42 +0000 Certificate not after: Tue 17 Feb 2026 22:42:42 +0000 Subordinate resources: IP: 2001:df3:72c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e5:9b:0b:e9:5a:cb:39:8c:d7:53:65:84:83:73:13:11:ba:23:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 18 22:37:42 2025 GMT Not After : Feb 17 22:42:42 2026 GMT Subject: CN=1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:2b:69:03:92:f2:ed:05:4d:ab:86:0a:9a: 1f:7a:98:00:c6:90:0c:da:14:b5:64:33:e2:64:b6: 66:f0:21:95:bf:87:0f:00:d2:bf:27:00:b2:75:0c: 5b:4a:d4:18:48:2f:ac:38:8c:27:87:15:4c:d8:b9: a0:47:c7:e2:27:85:cf:21:fa:19:85:24:73:97:df: 4e:d9:4b:a3:37:b3:f7:fd:d9:a6:fb:19:0c:b6:b9: 2c:14:c4:c0:27:86:54:fc:e1:fc:92:f4:c8:4d:99: 77:fc:4d:2f:f6:8b:5c:96:d4:f7:73:72:bf:9e:ed: f2:6b:8c:62:85:5d:27:eb:c9:70:b1:67:e1:72:ff: 2b:0f:a7:b1:9a:6d:12:54:cc:69:39:fa:5e:99:36: 3b:34:ca:fe:7c:ba:a5:29:97:82:be:be:81:b4:68: f1:f1:f3:10:32:46:9b:b4:27:9c:7f:0f:b9:f2:ee: 6c:d8:4f:33:38:94:9d:35:b6:23:15:27:0f:12:40: 2b:3d:35:6a:c4:80:8d:1e:67:01:ff:47:05:50:55: 90:d9:fc:6b:ed:48:47:4e:a8:b6:c7:8a:5c:40:e1: 5d:91:17:2a:25:78:18:93:f6:f7:11:ab:c9:03:f2: 23:44:11:01:7f:08:1c:54:1e:a5:89:2c:ec:b7:74: 94:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:72c0::/48 Signature Algorithm: sha256WithRSAEncryption 3e:2e:ce:dd:1d:87:ab:05:64:03:64:ea:4c:9b:bd:81:d9:4c: 9b:02:eb:f7:a5:97:fd:95:88:19:4c:ca:bc:75:57:48:8f:d7: a0:5d:35:69:37:28:5f:75:51:20:28:ac:ad:33:56:6c:6a:ca: 1f:e8:93:d9:1a:a3:bb:09:cf:01:7c:c7:a8:cc:d7:63:14:ad: cc:bf:4a:8c:cc:4a:10:37:68:2a:ed:83:9a:37:f9:75:7e:a7: 70:ff:17:2d:d8:ca:bc:2c:e6:b2:af:3a:f7:75:3c:36:43:e3: 52:3a:7b:90:bb:be:56:db:62:85:97:0e:fd:b6:49:da:1c:88: 26:bb:32:34:60:e7:0c:f3:67:9b:ee:da:65:18:b3:33:35:c5: 56:1b:a7:dc:5e:33:fa:99:cc:18:b7:ab:a6:55:e7:20:10:ab: 86:81:51:2c:a6:75:4d:f8:0f:b1:e7:e1:18:7c:09:a1:72:fb: 06:f7:f5:96:13:66:66:4d:37:58:fe:38:ce:9a:e8:86:48:42: ab:0e:c1:4d:83:c8:58:f6:52:a0:09:0f:62:4e:2a:ee:2d:91: 1b:63:58:35:2e:26:60:df:5b:7f:f2:2b:ad:9a:ec:68:dd:3f: bf:57:7a:1c:a3:72:9b:73:95:af:15:d2:8a:22:35:be:22:f3: 12:35:98:3f -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUfuWbC+layzmM11NlhINzExG6IwEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIxODIyMzc0MloX DTI2MDIxNzIyNDI0MlowMzExMC8GA1UEAxMoMUFDNDlBRUFGNDhDOTI1MUM3OTEz RUEzOENGNEJBRjhFNDBCN0U0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFMK2kDkvLtBU2rhgqaH3qYAMaQDNoUtWQz4mS2ZvAhlb+HDwDSvycAsnUM W0rUGEgvrDiMJ4cVTNi5oEfH4ieFzyH6GYUkc5ffTtlLozez9/3ZpvsZDLa5LBTE wCeGVPzh/JL0yE2Zd/xNL/aLXJbU93Nyv57t8muMYoVdJ+vJcLFn4XL/Kw+nsZpt ElTMaTn6Xpk2OzTK/ny6pSmXgr6+gbRo8fHzEDJGm7QnnH8PufLubNhPMziUnTW2 IxUnDxJAKz01asSAjR5nAf9HBVBVkNn8a+1IR06otseKXEDhXZEXKiV4GJP29xGr yQPyI0QRAX8IHFQepYks7Ld0lCUCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBrEmur0jJJRx5E+o4z0uvjkC35PMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUxMjM0YzRh LWE4ZmYtNDAzNi04NDIwLWRhODE2MjExMTgwNi8xLzFBQzQ5QUVBRjQ4QzkyNTFD NzkxM0VBMzhDRjRCQUY4RTQwQjdFNEYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ3zcsAwDQYJKoZIhvcNAQELBQADggEBAD4uzt0dh6sFZANk6kybvYHZTJsC 6/ell/2ViBlMyrx1V0iP16BdNWk3KF91USAorK0zVmxqyh/ok9kao7sJzwF8x6jM 12MUrcy/SozMShA3aCrtg5o3+XV+p3D/Fy3Yyrws5rKvOvd1PDZD41I6e5C7vlbb YoWXDv22SdociCa7MjRg5wzzZ5vu2mUYszM1xVYbp9xeM/qZzBi3q6ZV5yAQq4aB USymdU34D7Hn4Rh8CaFy+wb39ZYTZmZNN1j+OM6a6IZIQqsOwU2DyFj2UqAJD2JO Ku4tkRtjWDUuJmDfW3/yK62a7GjdP79Xehyjcptzla8V0ooiNb4i8xI1mD8= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:12 2025 by rpki-client on console.sobornost.net