$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer File: 2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer (raw, json) Hash identifier: pr7ioAFu58MyQGUfJ9YegLry9KLmyHEyeVi1sKVE240= Subject key identifier: 25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 51507B4E6DEA5D7C2AA3C23FF38D8DB87D5BD87C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft caRepository: rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 20 Dec 2024 13:02:04 +0000 Certificate not after: Fri 19 Dec 2025 13:07:04 +0000 Subordinate resources: IP: 103.172.20.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:50:7b:4e:6d:ea:5d:7c:2a:a3:c2:3f:f3:8d:8d:b8:7d:5b:d8:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 20 13:02:04 2024 GMT Not After : Dec 19 13:07:04 2025 GMT Subject: CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:07:8b:fc:83:91:5f:80:c1:f3:d6:3e:98:4a: cc:41:89:08:23:bc:bd:3f:94:cc:93:12:00:14:ad: ec:d7:7b:35:f0:d3:7b:7e:2e:2e:09:32:ec:6e:f9: 9b:83:e5:47:e1:80:73:ac:6f:f5:a2:38:ac:8b:5a: c7:cf:a1:0d:60:7d:84:45:2b:82:9b:d4:48:73:f3: cd:26:2b:7a:7b:b9:eb:db:52:6e:0e:83:c9:4b:8a: 61:7a:7a:aa:85:40:48:2c:09:fb:82:6e:78:47:9b: 40:d0:11:46:cf:52:8b:18:4f:1c:7b:0c:8f:08:0e: c9:20:49:1d:02:e4:4b:ab:fa:cb:f0:38:f2:89:a3: 63:42:bf:c4:8b:a0:bd:b4:af:fc:1d:37:4b:1e:2f: cb:7b:86:0a:07:91:85:dc:29:ad:d2:5e:64:94:25: 34:44:e1:19:e3:d4:e1:ba:84:95:20:91:94:5e:0b: 8e:6d:a7:ee:38:15:8b:ff:10:f8:57:d6:75:ef:1e: dc:32:f9:23:7b:9d:53:40:49:aa:13:d9:ab:06:03: 92:15:3f:79:e1:9c:b6:05:68:9f:ec:be:e9:6f:f9: 5e:d4:91:bf:70:ad:93:94:0f:95:87:8d:1b:e3:98: 08:5b:5e:66:d4:85:59:08:7c:9b:94:c1:1d:d4:2b: 8d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.20.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:a9:a0:c9:e0:b6:c5:9b:3f:30:6c:ff:64:72:5e:a0:b8:9f: 0d:8e:97:b1:08:87:6e:86:1d:51:5a:89:74:4d:bd:c7:44:4b: 63:f6:70:7e:06:0d:f7:d9:76:db:1d:76:ca:6f:d4:d6:71:3f: 7e:4a:c0:f0:40:fd:af:38:49:9d:17:5f:97:ed:a8:40:a5:28: 57:85:fc:b2:43:bf:65:e9:65:5c:06:97:e6:ec:c1:02:6b:19: e1:5d:cd:0e:37:60:7e:5d:4e:13:82:6f:dd:b2:61:d7:ad:d8: f4:ad:e3:d0:64:6d:ac:90:ae:34:91:a9:4a:d4:1d:42:17:f6: 51:3b:1f:a1:b5:dc:90:0b:f9:a9:9b:47:83:2c:5f:5d:95:c0: 79:b1:56:84:67:91:78:f3:ea:ef:26:8c:34:0e:b3:70:68:8e: 11:42:a8:8a:df:96:91:ad:9d:e6:16:22:b9:67:58:69:f0:4f: d1:93:08:44:3c:f3:b1:36:5f:22:1a:21:5f:d1:c6:84:8c:40: 23:9f:b3:fe:b2:ab:5d:c9:e0:90:bd:17:26:5a:08:89:cc:9a: 3f:ef:ad:b2:d6:7c:0b:16:8e:14:b9:72:b8:ae:6f:25:b9:2f: 31:79:0e:60:4e:33:3b:bf:58:a1:b8:f7:f9:20:3f:b5:b2:da: 37:28:f7:9a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUUVB7Tm3qXXwqo8I/842NuH1b2HwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIyMDEzMDIwNFoX DTI1MTIxOTEzMDcwNFowMzExMC8GA1UEAxMoMjU2NkY0REY1QzA5RkZBOEU0RjRE Njk5OTk0MUI5QUJBMkI3MjI4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN0Hi/yDkV+AwfPWPphKzEGJCCO8vT+UzJMSABSt7Nd7NfDTe34uLgky7G75 m4PlR+GAc6xv9aI4rItax8+hDWB9hEUrgpvUSHPzzSYrenu569tSbg6DyUuKYXp6 qoVASCwJ+4JueEebQNARRs9SixhPHHsMjwgOySBJHQLkS6v6y/A48omjY0K/xIug vbSv/B03Sx4vy3uGCgeRhdwprdJeZJQlNEThGePU4bqElSCRlF4Ljm2n7jgVi/8Q +FfWde8e3DL5I3udU0BJqhPZqwYDkhU/eeGctgVon+y+6W/5XtSRv3Ctk5QPlYeN G+OYCFteZtSFWQh8m5TBHdQrjYECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCVm9N9cCf+o5PTWmZlBuauityKLMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kOTE2NDExZi03OGNhLTQ5MTYtODkxOS0zN2MxZDk5ZWZiZDgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5MTY0MTFm LTc4Y2EtNDkxNi04OTE5LTM3YzFkOTllZmJkOC8wLzI1NjZGNERGNUMwOUZGQThF NEY0RDY5OTk5NDFCOUFCQTJCNzIyOEIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnrBQwDQYJKoZIhvcNAQELBQADggEBACupoMngtsWbPzBs/2RyXqC4nw2Ol7EI h26GHVFaiXRNvcdES2P2cH4GDffZdtsddspv1NZxP35KwPBA/a84SZ0XX5ftqECl KFeF/LJDv2XpZVwGl+bswQJrGeFdzQ43YH5dThOCb92yYdet2PSt49BkbayQrjSR qUrUHUIX9lE7H6G13JAL+ambR4MsX12VwHmxVoRnkXjz6u8mjDQOs3BojhFCqIrf lpGtneYWIrlnWGnwT9GTCEQ887E2XyIaIV/RxoSMQCOfs/6yq13J4JC9FyZaCInM mj/vrbLWfAsWjhS5criubyW5LzF5DmBOMzu/WKG49/kgP7Wy2jco95o= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:12 2025 by rpki-client on console.sobornost.net