$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer File: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer (raw, json) Hash identifier: N+CzPwb4Ae0uSXdbMqvTPFKrBBgoF68ptoyG04YCU2U= Subject key identifier: 1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 25D14FF214A309FBD6BACDC5EE09D488D9AD7D15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft caRepository: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 14 Jan 2025 15:19:43 +0000 Certificate not after: Tue 13 Jan 2026 15:24:43 +0000 Subordinate resources: IP: 2001:df5:eb00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d1:4f:f2:14:a3:09:fb:d6:ba:cd:c5:ee:09:d4:88:d9:ad:7d:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 14 15:19:43 2025 GMT Not After : Jan 13 15:24:43 2026 GMT Subject: CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:28:3b:f7:f3:14:1c:84:0c:2b:d3:8c:d0:60: 5a:51:ce:9f:bd:af:4f:58:56:7f:13:0e:9a:13:8b: 8e:6c:e2:8b:16:e1:97:89:6a:bc:9d:a1:12:1c:4a: ff:96:5b:4b:8a:e7:de:5d:aa:91:f2:d3:2f:00:6d: f5:ac:cb:74:c3:eb:23:dd:69:c7:e2:67:ab:05:69: f1:65:bb:29:f1:f6:41:40:f3:02:f3:c7:8b:a8:1c: c5:10:87:0f:93:b4:48:83:d9:81:53:1b:e6:36:df: 77:e2:9c:09:48:84:88:fb:66:70:c3:2a:25:d4:48: 29:6d:2c:a4:1a:e4:e5:15:06:23:c9:b4:6a:82:13: be:1e:60:56:7c:cd:a1:31:e3:e2:4d:08:69:97:4c: c0:b1:18:c9:3f:30:2a:fc:3d:09:1c:b0:e6:c1:da: 01:b9:20:a1:8d:5a:94:dc:94:58:2e:ec:fa:f5:b1: 8b:2c:31:d3:38:5d:59:2a:8b:ec:b4:a8:18:09:e1: a8:09:63:19:3b:bf:84:a4:27:54:53:53:2c:d5:92: 65:33:75:38:e7:b8:42:7d:50:56:d4:b5:43:69:4d: 22:e5:e4:50:68:7b:af:ab:a5:7a:df:49:54:d0:c8: 49:b3:69:78:52:19:a7:44:a8:6a:cb:4b:76:fb:26: 95:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:eb00::/48 Signature Algorithm: sha256WithRSAEncryption 44:47:39:5e:70:cf:17:49:fc:85:71:fd:9d:0f:66:9f:54:cc: 8c:ca:a9:bb:e4:8c:05:6a:8a:51:ae:1d:8e:53:6f:15:35:0a: 18:f6:52:da:c2:44:80:4a:6c:53:4a:77:c0:79:c7:93:cf:f0: ca:f8:3f:f7:88:6d:59:23:2b:4e:fe:5c:42:83:cd:ab:76:b1: cc:0c:63:45:2c:4d:f7:25:16:85:37:14:44:96:e7:c4:af:78: f1:24:de:4a:e9:a3:c8:65:f9:39:67:22:d4:0c:13:e3:f4:d4: f9:c9:3e:67:23:bb:64:8a:7a:59:f5:09:e6:5f:d2:51:06:8a: 15:27:c4:90:ef:62:a4:2e:19:05:de:f7:fb:90:3a:ad:8e:dd: 51:c4:05:da:d1:f4:2e:3c:c7:66:67:6e:ce:b4:6c:a1:63:4a: 55:c4:b5:81:a3:ea:ea:f3:96:05:06:aa:72:0d:fe:1f:95:72: 8d:83:61:a3:4e:7e:28:ef:16:bb:e7:b4:98:f4:22:83:39:46: 4c:c3:f1:f6:17:73:1b:89:56:8a:b4:50:89:b3:03:70:ba:8e: b3:dc:2b:fb:f8:59:08:46:19:38:16:3c:1d:d3:94:dc:4f:0e: f0:98:74:2c:3a:dc:29:20:62:1c:eb:c8:8b:bb:70:24:7e:97: 72:92:b5:f9 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUJdFP8hSjCfvWus3F7gnUiNmtfRUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDExNDE1MTk0M1oX DTI2MDExMzE1MjQ0M1owMzExMC8GA1UEAxMoMUZENTdENEM0MjI2OTYwQ0UwMkI3 QTZFNDJEODgyRkNCN0U0NjBFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQoO/fzFByEDCvTjNBgWlHOn72vT1hWfxMOmhOLjmziixbhl4lqvJ2hEhxK /5ZbS4rn3l2qkfLTLwBt9azLdMPrI91px+JnqwVp8WW7KfH2QUDzAvPHi6gcxRCH D5O0SIPZgVMb5jbfd+KcCUiEiPtmcMMqJdRIKW0spBrk5RUGI8m0aoITvh5gVnzN oTHj4k0IaZdMwLEYyT8wKvw9CRyw5sHaAbkgoY1alNyUWC7s+vWxiywx0zhdWSqL 7LSoGAnhqAljGTu/hKQnVFNTLNWSZTN1OOe4Qn1QVtS1Q2lNIuXkUGh7r6ulet9J VNDISbNpeFIZp0SoastLdvsmle0CAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB/VfUxCJpYM4Ct6bkLYgvy35GDuMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMTM0YmI0OC04YTY1LTQyOGItOTRmMS05OTVhZWQ3MmVjYjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzExMzRiYjQ4 LThhNjUtNDI4Yi05NGYxLTk5NWFlZDcyZWNiNS8wLzFGRDU3RDRDNDIyNjk2MENF MDJCN0E2RTQyRDg4MkZDQjdFNDYwRUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ316wAwDQYJKoZIhvcNAQELBQADggEBAERHOV5wzxdJ/IVx/Z0PZp9UzIzK qbvkjAVqilGuHY5TbxU1Chj2UtrCRIBKbFNKd8B5x5PP8Mr4P/eIbVkjK07+XEKD zat2scwMY0UsTfclFoU3FESW58SvePEk3krpo8hl+TlnItQME+P01PnJPmcju2SK eln1CeZf0lEGihUnxJDvYqQuGQXe9/uQOq2O3VHEBdrR9C48x2Znbs60bKFjSlXE tYGj6urzlgUGqnIN/h+Vco2DYaNOfijvFrvntJj0IoM5RkzD8fYXcxuJVoq0UImz A3C6jrPcK/v4WQhGGTgWPB3TlNxPDvCYdCw63CkgYhzryIu7cCR+l3KStfk= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:12 2025 by rpki-client on console.sobornost.net