$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer File: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer (raw, json) Hash identifier: PB2Y7TJmoDsY7TWpBLu92z892fP9jKPZRAQzSAl2v5I= Subject key identifier: 43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5AAE0D722D9C0024990798D3FB9AF5AFD00E2AC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft caRepository: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 02 Apr 2025 15:54:36 +0000 Certificate not after: Wed 01 Apr 2026 15:59:36 +0000 Subordinate resources: IP: 103.187.90.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 20:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ae:0d:72:2d:9c:00:24:99:07:98:d3:fb:9a:f5:af:d0:0e:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 2 15:54:36 2025 GMT Not After : Apr 1 15:59:36 2026 GMT Subject: CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e6:b5:bf:a7:6f:49:aa:a0:42:61:37:2b:54: 17:27:a2:c4:c4:6c:97:e6:50:f8:d3:87:d6:43:25: e8:10:e2:be:0e:4d:21:63:15:8c:69:4a:2e:d4:52: f9:97:d9:5a:4a:a9:14:69:b8:97:f9:9e:75:13:19: ef:ac:0d:81:d6:20:ba:dd:fd:9f:c6:36:09:bd:fb: 75:c8:45:ab:6b:a1:fc:a5:98:22:65:f5:0d:0d:04: 6a:02:f5:55:fc:c7:5f:bd:fe:10:c9:30:74:6d:25: 9e:66:78:18:36:0c:84:a7:09:8b:91:54:c2:f9:07: af:22:7b:d6:45:8a:0d:4b:17:66:ad:b7:ab:c4:ba: 0b:8d:49:8a:5b:03:89:1b:11:36:8b:62:5c:db:16: a7:5d:21:87:02:20:7a:92:bb:fb:0c:01:8d:87:fb: 0d:f3:67:be:92:b2:8d:ae:47:98:3f:54:10:61:5d: 2a:6f:e7:19:fd:f9:9c:e3:2c:0e:cf:3d:65:84:73: e7:14:7d:6a:f1:b1:84:3d:be:72:65:6b:52:37:48: b4:8a:ee:9e:01:14:13:06:f6:5f:39:d5:cc:90:d8: 69:b9:fb:20:a5:37:98:c5:0d:5b:cd:ec:0a:a9:78: 4b:e4:36:47:45:ee:3e:08:ba:bd:82:b2:14:ea:a9: 19:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.187.90.0/24 Signature Algorithm: sha256WithRSAEncryption 78:22:4c:05:a8:98:bd:a8:be:f5:25:13:24:1b:f8:d8:f8:ea: 96:68:69:46:e3:6d:ca:cb:6a:40:50:e7:e2:80:75:09:d0:c0: 8b:17:e6:7e:b2:05:e6:2a:b5:09:0f:0d:02:bd:dd:a3:ad:01: 39:e7:63:71:33:2f:95:c1:1b:d8:ac:b9:9a:be:bb:78:2f:64: ba:2d:a1:c1:14:91:68:28:bc:fe:d8:7b:c8:5d:aa:d8:3b:ce: 8e:29:70:a3:4c:6e:05:ec:af:8b:1c:a8:2f:38:ca:f9:9c:5c: 57:ec:02:0a:44:8d:f9:9d:3d:76:41:9d:cc:03:da:2e:e1:95: b4:db:49:29:8a:9f:bf:bf:4a:49:c5:13:49:34:d0:66:c4:5c: 85:93:6d:7b:2d:a8:6a:45:58:e8:9f:10:af:08:65:00:15:80: a0:35:92:be:31:1b:bb:58:a2:c1:c6:60:59:f6:d2:87:69:0e: 0b:c7:03:eb:40:b2:12:d9:4d:da:b7:84:43:a2:3b:91:dc:c9: a0:38:64:23:b8:dd:19:ec:31:58:54:d1:33:c7:b4:84:98:60: e5:eb:a7:fe:21:99:c0:50:9f:83:4f:92:46:1f:0f:e1:73:d6: 00:d8:b7:d9:9a:78:5e:a9:62:21:b2:36:b7:48:cb:2a:91:54: 6a:b2:94:b9 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUWq4Nci2cACSZB5jT+5r1r9AOKsAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQwMjE1NTQzNloX DTI2MDQwMTE1NTkzNlowMzExMC8GA1UEAxMoNDM5RDE2RTAzRDA1RDVDRUNBMkI3 RjEzNUQyQkJCMUIzMDEwNTA1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALnmtb+nb0mqoEJhNytUFyeixMRsl+ZQ+NOH1kMl6BDivg5NIWMVjGlKLtRS +ZfZWkqpFGm4l/medRMZ76wNgdYgut39n8Y2Cb37dchFq2uh/KWYImX1DQ0EagL1 VfzHX73+EMkwdG0lnmZ4GDYMhKcJi5FUwvkHryJ71kWKDUsXZq23q8S6C41JilsD iRsRNotiXNsWp10hhwIgepK7+wwBjYf7DfNnvpKyja5HmD9UEGFdKm/nGf35nOMs Ds89ZYRz5xR9avGxhD2+cmVrUjdItIrungEUEwb2XznVzJDYabn7IKU3mMUNW83s Cql4S+Q2R0XuPgi6vYKyFOqpGS8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEOdFuA9BdXOyit/E10ruxswEFBXMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lOGYzYjM3ZC1mZTRkLTQzNmQtYTkzYi1lMWY2ZmNjOWZjNGQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4ZjNiMzdk LWZlNGQtNDM2ZC1hOTNiLWUxZjZmY2M5ZmM0ZC8wLzQzOUQxNkUwM0QwNUQ1Q0VD QTJCN0YxMzVEMkJCQjFCMzAxMDUwNTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnu1owDQYJKoZIhvcNAQELBQADggEBAHgiTAWomL2ovvUlEyQb+Nj46pZoaUbj bcrLakBQ5+KAdQnQwIsX5n6yBeYqtQkPDQK93aOtATnnY3EzL5XBG9isuZq+u3gv ZLotocEUkWgovP7Ye8hdqtg7zo4pcKNMbgXsr4scqC84yvmcXFfsAgpEjfmdPXZB ncwD2i7hlbTbSSmKn7+/SknFE0k00GbEXIWTbXstqGpFWOifEK8IZQAVgKA1kr4x G7tYosHGYFn20odpDgvHA+tAshLZTdq3hEOiO5HcyaA4ZCO43RnsMVhU0TPHtISY YOXrp/4hmcBQn4NPkkYfD+Fz1gDYt9maeF6pYiGyNrdIyyqRVGqylLk= -----END CERTIFICATE-----Generated at Sat Apr 26 15:54:00 2025 by rpki-client on console.sobornost.net