$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer File: 21F8D88DCD7D814618247F203F04126E51C2D65E.cer (raw, json) Hash identifier: EV2j7I3drfC0EdI61GbTlRaaU5pLS8ScqO9sUxy43D0= Subject key identifier: 21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5D1C659BE91329FC9A8EE1441A189B4CC5DC1BAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft caRepository: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 21 Mar 2025 09:38:49 +0000 Certificate not after: Fri 20 Mar 2026 09:43:49 +0000 Subordinate resources: IP: 103.4.240.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:1c:65:9b:e9:13:29:fc:9a:8e:e1:44:1a:18:9b:4c:c5:dc:1b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 21 09:38:49 2025 GMT Not After : Mar 20 09:43:49 2026 GMT Subject: CN=21F8D88DCD7D814618247F203F04126E51C2D65E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a5:59:cc:ae:01:3e:e4:86:79:9c:6c:b6:58: 36:65:40:00:ed:01:21:85:d8:46:10:3e:81:3b:2b: 95:b3:0c:bd:2b:fe:91:a2:69:67:21:30:d3:f7:ca: f9:8f:08:32:45:92:41:0b:74:85:fd:bb:36:58:ea: 6c:5b:35:92:39:42:f0:be:4e:1a:4c:86:8c:f5:08: 12:34:3b:9c:63:2a:ed:73:46:73:69:94:30:f1:b8: 82:e3:cd:7d:4f:a2:72:66:a1:15:32:91:47:6f:d2: 7f:28:28:2c:97:f9:ef:b4:0a:9b:16:a7:92:11:94: 9b:a1:07:ce:24:bd:4a:ad:77:b4:8a:3e:2e:9a:a6: b2:60:b7:8b:c2:df:2f:e5:09:1b:25:a8:94:a1:ad: 4d:cb:1d:74:38:29:bd:57:bd:3e:5c:00:61:40:7f: b2:22:c9:6e:99:01:25:47:dc:24:16:12:d2:f0:9c: c7:b4:56:e4:e0:0e:cd:34:f1:30:2d:bd:80:b9:e7: c4:e2:1a:d4:23:16:e2:46:6c:df:f6:b6:b2:bf:a6: 28:65:6f:f4:db:25:ca:2c:6a:29:23:f9:76:de:74: ea:f7:c1:0d:1b:df:46:f5:81:74:1c:39:0c:fb:0d: 76:f4:3c:73:90:6e:e0:9b:66:5b:e8:3b:cb:4c:24: 14:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.240.0/22 Signature Algorithm: sha256WithRSAEncryption 10:1d:f8:5e:19:6a:a8:2f:71:44:8c:fc:ca:2f:e4:8a:65:86: fc:56:51:ae:4e:91:dd:16:69:7a:b5:19:56:ff:5d:b2:d4:c0: 98:db:3a:0d:22:78:a7:60:c9:8c:b1:f3:f5:b5:93:b0:6b:6d: 42:77:c0:58:be:0e:40:0c:77:90:c7:e8:61:88:3a:e6:05:35: e0:f0:36:16:a3:16:44:75:de:93:35:d7:60:13:56:37:1d:95: ed:bb:5e:09:51:72:e1:c5:75:a1:7a:be:28:1e:6e:f0:53:48: 15:64:af:9c:d2:11:b6:85:5e:07:28:f8:d2:09:28:cf:20:a2: 5b:59:fc:c3:f5:3a:9f:cb:f7:02:11:6f:4e:1a:2f:2b:57:1d: 03:b8:20:6f:0a:45:46:b4:6b:e6:08:0b:55:99:07:af:09:ab: 62:52:da:85:2a:7c:a2:74:dd:17:b7:9f:76:0e:5a:54:95:58: fb:4c:61:cf:5f:e3:49:52:77:4a:7a:19:22:d6:09:e4:13:56: a2:0c:8d:89:23:34:a5:67:f1:10:1e:2e:4e:91:f0:f3:cb:82: 59:f3:15:02:c5:00:c1:f6:53:e9:86:ae:4b:ac:94:81:c7:a6: 9a:8f:1f:7f:1d:66:1e:c4:fb:b2:e6:d3:72:6d:05:7a:47:a9: 5c:07:e7:3d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXRxlm+kTKfyajuFEGhibTMXcG6owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMyMTA5Mzg0OVoX DTI2MDMyMDA5NDM0OVowMzExMC8GA1UEAxMoMjFGOEQ4OERDRDdEODE0NjE4MjQ3 RjIwM0YwNDEyNkU1MUMyRDY1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWlWcyuAT7khnmcbLZYNmVAAO0BIYXYRhA+gTsrlbMMvSv+kaJpZyEw0/fK +Y8IMkWSQQt0hf27NljqbFs1kjlC8L5OGkyGjPUIEjQ7nGMq7XNGc2mUMPG4guPN fU+icmahFTKRR2/SfygoLJf577QKmxankhGUm6EHziS9Sq13tIo+LpqmsmC3i8Lf L+UJGyWolKGtTcsddDgpvVe9PlwAYUB/siLJbpkBJUfcJBYS0vCcx7RW5OAOzTTx MC29gLnnxOIa1CMW4kZs3/a2sr+mKGVv9NslyixqKSP5dt506vfBDRvfRvWBdBw5 DPsNdvQ8c5Bu4JtmW+g7y0wkFM8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCH42I3NfYFGGCR/ID8EEm5RwtZeMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xN2U4ZGQ0MC1iYjk0LTRkNDMtYjg4OS04YTA5OGQ3ZjQ1YWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3ZThkZDQw LWJiOTQtNGQ0My1iODg5LThhMDk4ZDdmNDVhYy8wLzIxRjhEODhEQ0Q3RDgxNDYx ODI0N0YyMDNGMDQxMjZFNTFDMkQ2NUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnBPAwDQYJKoZIhvcNAQELBQADggEBABAd+F4ZaqgvcUSM/Mov5IplhvxWUa5O kd0WaXq1GVb/XbLUwJjbOg0ieKdgyYyx8/W1k7BrbUJ3wFi+DkAMd5DH6GGIOuYF NeDwNhajFkR13pM112ATVjcdle27XglRcuHFdaF6vigebvBTSBVkr5zSEbaFXgco +NIJKM8goltZ/MP1Op/L9wIRb04aLytXHQO4IG8KRUa0a+YIC1WZB68Jq2JS2oUq fKJ03Re3n3YOWlSVWPtMYc9f40lSd0p6GSLWCeQTVqIMjYkjNKVn8RAeLk6R8PPL glnzFQLFAMH2U+mGrkuslIHHppqPH38dZh7E+7Lm03JtBXpHqVwH5z0= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:12 2025 by rpki-client on console.sobornost.net