$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer File: 282881E6B43D206FAFBD1879ED5678ECBA70A822.cer (raw, json) Hash identifier: nFAxpoThn+nbQCIlEOZzCiPaI2PI5ukawOMPVcBoiGM= Subject key identifier: 28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0DF98217C3A8B7B5851F8206D0B6535198629587 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft caRepository: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 09 Apr 2025 23:29:20 +0000 Certificate not after: Wed 08 Apr 2026 23:34:20 +0000 Subordinate resources: IP: 103.145.125.0/24 IP: 2001:df2:1280::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f9:82:17:c3:a8:b7:b5:85:1f:82:06:d0:b6:53:51:98:62:95:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 9 23:29:20 2025 GMT Not After : Apr 8 23:34:20 2026 GMT Subject: CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:65:cb:05:69:e9:4a:e1:e7:9e:4e:cd:83:e9: ae:b0:cb:86:75:13:f0:c3:18:04:30:f2:e8:84:70: d3:3e:88:20:05:f2:21:3b:91:54:d6:02:11:41:e3: 77:15:9a:07:6a:4a:2b:af:7e:eb:57:0f:9d:d8:c4: ee:1a:be:45:7e:05:60:37:f7:c6:d8:91:1c:7a:5e: 2d:e4:ce:5f:ed:de:94:a7:c8:60:8a:00:40:50:16: 6e:75:92:df:95:b6:1c:95:9a:9c:dc:a5:56:f7:14: 84:53:a3:5b:fd:c9:7c:09:a9:d3:5a:da:23:dc:f3: 07:51:81:87:28:2c:51:57:fc:f5:2d:cf:45:26:31: 91:91:f7:a9:17:37:ce:bf:43:7c:7c:be:51:8d:bd: b7:81:9f:8e:9a:d5:5b:53:9d:76:93:5a:a3:22:08: f2:09:13:4d:c8:8f:1d:3e:2c:40:ea:f5:d1:cf:74: 16:f4:2e:cd:88:68:04:74:2f:11:b8:35:9a:f5:cb: 4e:9e:1d:e0:f2:c2:b5:ae:47:73:a8:60:79:84:92: 31:25:1a:23:53:f1:39:72:74:a9:aa:a2:5c:75:d3: 6e:7c:ae:00:ce:65:f4:33:3c:b3:b1:cb:2f:5a:90: c2:c8:b7:6e:29:3b:3b:2c:46:2d:ba:19:bf:5a:1e: 07:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.125.0/24 IPv6: 2001:df2:1280::/48 Signature Algorithm: sha256WithRSAEncryption 19:d9:ab:20:2b:3c:ef:8b:68:b9:b3:52:f4:c4:07:6e:03:ae: 1c:ba:7a:89:1c:bb:e4:c2:86:d5:80:00:0d:7a:ae:eb:bf:22: b1:3e:22:31:d6:15:a9:b5:f0:6a:31:6d:8b:9e:24:d0:27:0e: 91:b0:48:1a:f0:03:9b:c8:12:ef:1e:e1:5b:f5:cd:0f:09:12: 31:3e:1c:c6:a8:7a:20:a3:c2:f3:a6:69:dd:5c:95:5e:fc:f4: 76:39:de:41:59:32:01:86:8a:35:55:dc:fd:f2:ae:b2:c1:fd: 3f:bc:55:d4:b7:14:65:e4:17:fe:5d:44:c1:d0:a9:7d:bb:da: 80:86:ee:fe:e0:9a:91:ca:ee:fb:09:33:ed:04:5a:87:6f:50: 63:29:3c:cd:89:3a:3b:55:19:20:ed:f6:1d:0e:72:2a:34:34: 16:e1:a0:df:32:57:0d:46:7e:86:c5:4d:1a:9a:91:5d:38:88: 00:02:fa:b2:21:53:09:5d:55:91:8e:1c:df:98:53:9a:37:f4: 6d:15:7a:3d:4d:b1:b7:ad:79:dc:db:9d:cc:84:53:c3:a5:1b: fa:42:40:1c:5d:a0:7c:b5:d1:e4:37:9d:97:41:bf:75:f8:dd: 7c:d1:04:7b:39:d8:3d:98:d0:88:44:9c:37:e4:33:b5:65:6f: 22:d1:6b:08 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUDfmCF8Oot7WFH4IG0LZTUZhilYcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQwOTIzMjkyMFoX DTI2MDQwODIzMzQyMFowMzExMC8GA1UEAxMoMjgyODgxRTZCNDNEMjA2RkFGQkQx ODc5RUQ1Njc4RUNCQTcwQTgyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKllywVp6Urh555OzYPprrDLhnUT8MMYBDDy6IRw0z6IIAXyITuRVNYCEUHj dxWaB2pKK69+61cPndjE7hq+RX4FYDf3xtiRHHpeLeTOX+3elKfIYIoAQFAWbnWS 35W2HJWanNylVvcUhFOjW/3JfAmp01raI9zzB1GBhygsUVf89S3PRSYxkZH3qRc3 zr9DfHy+UY29t4GfjprVW1OddpNaoyII8gkTTciPHT4sQOr10c90FvQuzYhoBHQv Ebg1mvXLTp4d4PLCta5Hc6hgeYSSMSUaI1PxOXJ0qaqiXHXTbnyuAM5l9DM8s7HL L1qQwsi3bik7OyxGLboZv1oeBy0CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCgogea0PSBvr70Yee1WeOy6cKgiMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wNTdkNGQ4MS0zYmU4LTQyMzAtODk1OS0yZGMyYWY5ZDA4NWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA1N2Q0ZDgx LTNiZTgtNDIzMC04OTU5LTJkYzJhZjlkMDg1ZS8wLzI4Mjg4MUU2QjQzRDIwNkZB RkJEMTg3OUVENTY3OEVDQkE3MEE4MjIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnkX0wDwQCAAIwCQMHACABDfISgDANBgkqhkiG9w0BAQsFAAOCAQEAGdmrICs8 74toubNS9MQHbgOuHLp6iRy75MKG1YAADXqu678isT4iMdYVqbXwajFti54k0CcO kbBIGvADm8gS7x7hW/XNDwkSMT4cxqh6IKPC86Zp3VyVXvz0djneQVkyAYaKNVXc /fKussH9P7xV1LcUZeQX/l1EwdCpfbvagIbu/uCakcru+wkz7QRah29QYyk8zYk6 O1UZIO32HQ5yKjQ0FuGg3zJXDUZ+hsVNGpqRXTiIAAL6siFTCV1VkY4c35hTmjf0 bRV6PU2xt6153NudzIRTw6Ub+kJAHF2gfLXR5Dedl0G/dfjdfNEEeznYPZjQiESc N+QztWVvItFrCA== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:12 2025 by rpki-client on console.sobornost.net