$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.cer (raw, json) Hash identifier: KaAWUmG8fE1A6kmRz13sxmg7olNGEdRGrQaHJKGpCFg= Subject key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5BFCFFB46B00BFBB1139B9309E7ED68C7A6C00F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft caRepository: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 08 Mar 2025 07:38:55 +0000 Certificate not after: Sat 07 Mar 2026 07:43:55 +0000 Subordinate resources: IP: 103.122.121.0/24 IP: 2001:df6:af00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:fc:ff:b4:6b:00:bf:bb:11:39:b9:30:9e:7e:d6:8c:7a:6c:00:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 8 07:38:55 2025 GMT Not After : Mar 7 07:43:55 2026 GMT Subject: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:16:10:45:1f:7d:00:f2:d9:17:da:91:30: 69:d6:ce:dd:ed:c1:d5:a8:9d:41:c6:ce:9c:b0:8b: 01:85:dc:29:0b:68:ff:d7:df:17:64:68:b4:a0:26: 15:72:d3:36:50:78:0f:e7:7d:e8:57:58:0e:65:a2: df:7b:05:5f:5e:e8:c3:4f:06:62:65:a2:97:c6:33: ce:10:06:9a:2c:fe:df:11:59:ec:69:a5:26:ae:79: 67:a4:b6:4b:f1:05:ea:c6:e9:c3:fb:d5:7e:0b:ca: 21:ae:82:53:a3:d0:91:e5:fb:fd:db:8d:97:6c:c6: 37:74:9b:c2:19:46:2b:a8:18:96:2c:d3:d5:e6:24: 93:30:43:95:db:a4:a3:23:77:c9:10:e9:10:7b:2c: 1e:73:38:67:5a:ea:4c:87:5d:d3:d5:1d:f6:63:46: be:42:a9:a8:59:32:6b:3a:b7:f9:06:90:8d:b5:11: 99:b5:e2:95:8d:32:ae:8d:6c:81:ba:10:18:2e:cb: b9:26:2f:1d:7a:a4:1b:be:82:77:ee:0a:41:18:89: 79:ac:90:c0:53:68:ac:37:f4:78:34:d9:bc:75:d9: 6b:6a:ef:bf:ec:26:d7:72:55:80:3d:8d:54:85:da: 2d:91:82:4b:42:bd:42:48:06:42:a4:fd:0d:60:2e: 1a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.122.121.0/24 IPv6: 2001:df6:af00::/48 Signature Algorithm: sha256WithRSAEncryption 5f:e9:76:2d:7c:7b:5b:1d:82:58:84:da:f7:2d:a4:86:fb:c1: 3c:51:59:25:d6:69:2d:32:53:61:3d:b5:2e:cb:76:97:a7:dd: 9c:a3:1e:21:32:ab:bb:87:f7:7a:af:3b:af:2d:44:5c:92:77: a9:c5:6f:70:6c:fe:fc:36:99:86:ea:f7:b3:0c:d0:0f:62:ca: 73:1f:ba:5c:55:3c:79:73:f7:69:5c:9e:44:b3:23:bf:14:44: 8c:7e:fb:c1:84:fb:84:43:1a:39:85:e8:c9:3e:e6:9e:b1:14: b2:cf:8b:a3:b2:a2:47:d7:ef:8a:f8:f6:40:5d:42:30:38:04: f9:a7:f6:60:a9:19:83:7d:3c:27:63:f8:e8:bd:54:a6:9b:da: f1:da:3a:ee:18:1f:00:c8:98:41:f9:e9:63:2f:f4:43:a8:24: 08:b4:ea:c0:f8:90:9e:c6:7d:45:e7:d0:4a:56:29:1a:11:02: ef:2f:c9:bb:fa:68:a5:58:fd:5a:f4:01:d5:fe:58:0a:d3:a2: 68:ed:d5:d1:4e:4d:c3:b6:06:cd:5d:16:1c:f6:41:af:ee:c5: 0e:a1:de:a1:cc:ea:ee:54:b2:25:23:a8:bf:97:0a:45:76:ff: 80:ac:05:19:d8:ed:1d:1b:d4:54:19:a6:e8:25:52:bf:4a:77: 51:cb:5b:b0 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUW/z/tGsAv7sRObkwnn7WjHpsAPMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMwODA3Mzg1NVoX DTI2MDMwNzA3NDM1NVowMzExMC8GA1UEAxMoNDA4NTg1QzFENjJBNEY2MThDMDQy NEU5QkVEQzNCOTE0MTFDMjI3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALXVFhBFH30A8tkX2pEwadbO3e3B1aidQcbOnLCLAYXcKQto/9ffF2RotKAm FXLTNlB4D+d96FdYDmWi33sFX17ow08GYmWil8YzzhAGmiz+3xFZ7GmlJq55Z6S2 S/EF6sbpw/vVfgvKIa6CU6PQkeX7/duNl2zGN3SbwhlGK6gYlizT1eYkkzBDlduk oyN3yRDpEHssHnM4Z1rqTIdd09Ud9mNGvkKpqFkyazq3+QaQjbURmbXilY0yro1s gboQGC7LuSYvHXqkG76Cd+4KQRiJeayQwFNorDf0eDTZvHXZa2rvv+wm13JVgD2N VIXaLZGCS0K9QkgGQqT9DWAuGosCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFECFhcHWKk9hjAQk6b7cO5FBHCJ2MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iN2UyNmM4My01ZWQyLTRjOGItOGEwMy02Y2IwMGQxZWQzMzgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I3ZTI2Yzgz LTVlZDItNGM4Yi04YTAzLTZjYjAwZDFlZDMzOC8wLzQwODU4NUMxRDYyQTRGNjE4 QzA0MjRFOUJFREMzQjkxNDExQzIyNzYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnenkwDwQCAAIwCQMHACABDfavADANBgkqhkiG9w0BAQsFAAOCAQEAX+l2LXx7 Wx2CWITa9y2khvvBPFFZJdZpLTJTYT21Lst2l6fdnKMeITKru4f3eq87ry1EXJJ3 qcVvcGz+/DaZhur3swzQD2LKcx+6XFU8eXP3aVyeRLMjvxREjH77wYT7hEMaOYXo yT7mnrEUss+Lo7KiR9fvivj2QF1CMDgE+af2YKkZg308J2P46L1Uppva8do67hgf AMiYQfnpYy/0Q6gkCLTqwPiQnsZ9RefQSlYpGhEC7y/Ju/popVj9WvQB1f5YCtOi aO3V0U5Nw7YGzV0WHPZBr+7FDqHeoczq7lSyJSOov5cKRXb/gKwFGdjtHRvUVBmm 6CVSv0p3UctbsA== -----END CERTIFICATE-----Generated at Mon Apr 28 22:47:22 2025 by rpki-client on console.sobornost.net