$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer File: 358F4D417A1317CB220BBDC982D7F35D1540D51A.cer (raw, json) Hash identifier: IVncHmnPokJmrdvlPrtfkKwMH0iiNEFWZZa1fCfwLrA= Subject key identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 43F15F02CB4EE4220CA6334B54E67D5F5F69931A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft caRepository: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 11 Apr 2025 14:23:30 +0000 Certificate not after: Fri 10 Apr 2026 14:28:30 +0000 Subordinate resources: IP: 103.210.68.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:f1:5f:02:cb:4e:e4:22:0c:a6:33:4b:54:e6:7d:5f:5f:69:93:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 11 14:23:30 2025 GMT Not After : Apr 10 14:28:30 2026 GMT Subject: CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3f:44:0c:1b:e6:2f:b4:99:50:cc:6b:84:68: a8:f5:63:a1:38:9a:4c:ab:fb:78:3a:37:77:8e:fc: bb:fb:c1:9a:74:d0:be:e1:0c:35:55:24:01:de:3a: 46:2b:f1:f0:42:08:d0:84:a2:74:73:17:fe:7f:cc: 0c:8f:ec:ff:07:a6:66:43:75:f0:6d:4e:c9:cf:ae: 73:39:f6:2e:c6:51:62:9b:4f:5c:24:9e:3f:58:3d: f0:1c:aa:98:92:c3:45:ec:65:2c:e1:21:7c:41:f7: 23:ee:ee:d1:1d:27:24:9c:29:88:57:b0:21:c1:bb: d3:3b:5a:4b:68:c2:3a:6b:5b:96:69:ce:1d:a0:08: 96:8d:d8:fd:7b:82:cb:58:16:d7:d0:b3:00:71:26: 5c:28:25:f1:fc:c2:5a:26:69:d6:9f:87:d1:2f:5b: 8d:62:49:25:8b:53:cc:5d:f6:d7:cf:09:f6:aa:26: e3:fa:f0:98:b8:00:e4:f4:fc:d2:08:d1:6e:3f:6e: 2d:d4:6d:f4:d9:a8:8b:85:3a:5a:cd:d9:dd:ec:d6: 9e:b6:a5:1c:f7:c9:a7:3a:d4:2b:ad:8b:80:cd:0a: b1:f9:da:7e:47:44:c6:df:bf:71:05:11:31:0d:ca: 96:ab:32:fe:28:49:45:28:c7:3f:35:e3:b7:2f:f4: 80:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.210.68.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:51:53:46:88:9c:34:a2:37:03:a2:56:30:97:a1:f7:bb:ce: 03:51:03:5f:96:b0:3c:a8:15:73:e6:09:1a:89:b5:67:75:ac: 7e:df:6c:26:b4:16:d4:4f:69:8d:f0:58:4e:a7:7d:40:88:f2: 63:e3:5a:cf:13:eb:18:a3:fd:a1:e3:28:72:4f:b0:81:e9:83: c9:ba:48:e3:02:56:11:6f:96:a3:de:cf:56:b8:fe:33:85:c8: af:24:99:6d:ff:26:4b:78:41:00:a7:ac:b0:53:ca:b6:ef:2f: 7b:4d:09:1d:c2:25:51:d1:46:72:98:ae:b4:7a:80:f6:bb:e8: 18:43:45:8d:bf:9f:41:33:ad:0f:c0:82:fc:08:68:68:e5:40: ab:ea:9c:fa:c1:de:7d:5d:0c:13:a5:eb:45:cb:fb:c2:4c:05: 1a:ca:cb:28:b7:0b:af:22:e4:b9:9e:14:98:dd:b0:3a:b6:0b: cd:48:5c:06:20:5b:1b:c1:9f:25:15:0f:4a:47:9b:ce:b0:db: 19:6a:73:8a:bc:05:16:dd:7b:3f:b6:85:24:95:78:88:c8:ad: ab:85:4d:31:f2:37:6c:0a:a4:90:1d:1a:83:46:c5:10:8c:bf: d9:e3:6b:68:e0:20:48:94:e5:08:70:c4:e2:14:d4:22:1e:89: 8a:0e:36:a4 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQ/FfAstO5CIMpjNLVOZ9X19pkxowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxMTE0MjMzMFoX DTI2MDQxMDE0MjgzMFowMzExMC8GA1UEAxMoMzU4RjRENDE3QTEzMTdDQjIyMEJC REM5ODJEN0YzNUQxNTQwRDUxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKk/RAwb5i+0mVDMa4RoqPVjoTiaTKv7eDo3d478u/vBmnTQvuEMNVUkAd46 Rivx8EII0ISidHMX/n/MDI/s/wemZkN18G1Oyc+uczn2LsZRYptPXCSeP1g98Byq mJLDRexlLOEhfEH3I+7u0R0nJJwpiFewIcG70ztaS2jCOmtblmnOHaAIlo3Y/XuC y1gW19CzAHEmXCgl8fzCWiZp1p+H0S9bjWJJJYtTzF32188J9qom4/rwmLgA5PT8 0gjRbj9uLdRt9Nmoi4U6Ws3Z3ezWnralHPfJpzrUK62LgM0KsfnafkdExt+/cQUR MQ3Klqsy/ihJRSjHPzXjty/0gLkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDWPTUF6ExfLIgu9yYLX810VQNUaMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mNDM4YzE5NS00OTRhLTQ2YTItYjkzYy04ZTE1NjY4ZjA1YjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y0MzhjMTk1 LTQ5NGEtNDZhMi1iOTNjLThlMTU2NjhmMDViMi8wLzM1OEY0RDQxN0ExMzE3Q0Iy MjBCQkRDOTgyRDdGMzVEMTU0MEQ1MUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn0kQwDQYJKoZIhvcNAQELBQADggEBAFxRU0aInDSiNwOiVjCXofe7zgNRA1+W sDyoFXPmCRqJtWd1rH7fbCa0FtRPaY3wWE6nfUCI8mPjWs8T6xij/aHjKHJPsIHp g8m6SOMCVhFvlqPez1a4/jOFyK8kmW3/Jkt4QQCnrLBTyrbvL3tNCR3CJVHRRnKY rrR6gPa76BhDRY2/n0EzrQ/AgvwIaGjlQKvqnPrB3n1dDBOl60XL+8JMBRrKyyi3 C68i5LmeFJjdsDq2C81IXAYgWxvBnyUVD0pHm86w2xlqc4q8BRbdez+2hSSVeIjI rauFTTHyN2wKpJAdGoNGxRCMv9nja2jgIEiU5QhwxOIU1CIeiYoONqQ= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:13 2025 by rpki-client on console.sobornost.net