$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer File: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer (raw, json) Hash identifier: AY0gvBndOADK/ZbXcgL6Fc1FPXIlXwAd8KitLUJPpxA= Subject key identifier: 55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 72514F5FE056ED5AD9A5BCC207AB8232B54EDF8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft caRepository: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 03 Apr 2025 18:10:28 +0000 Certificate not after: Thu 02 Apr 2026 18:15:28 +0000 Subordinate resources: IP: 103.189.112.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:51:4f:5f:e0:56:ed:5a:d9:a5:bc:c2:07:ab:82:32:b5:4e:df:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 3 18:10:28 2025 GMT Not After : Apr 2 18:15:28 2026 GMT Subject: CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d0:39:7b:ed:3a:b4:ec:b0:28:13:24:15:9a: ca:41:23:07:fb:69:37:e2:b9:b0:4a:2f:a4:9c:92: fd:a2:6d:d0:95:fa:5f:16:e4:cf:6e:c3:e4:6d:9d: 50:84:ff:65:59:a2:b2:06:c0:b2:de:f2:32:6d:d8: 8b:9b:ad:ec:2b:56:14:f7:67:62:ba:30:25:48:3e: 3a:8f:24:84:c2:df:5f:ee:9e:e3:5c:1f:07:a7:8f: ed:83:46:13:e1:cc:95:9a:d1:9e:26:d4:1d:4d:c7: c8:e4:25:9c:24:37:bc:2b:14:26:f6:76:61:1c:33: 8f:3e:9f:18:44:72:6d:0d:3d:b8:54:9e:df:b5:13: 6e:6b:14:c3:e0:50:69:31:a5:6c:54:56:0a:ef:c6: 31:aa:71:e7:db:3a:b5:35:64:c6:26:f1:3f:88:46: ac:b5:89:4b:49:82:15:4a:ae:94:bc:c5:ed:3e:1c: ea:93:1e:dd:a8:2f:95:97:96:e4:85:00:83:62:3c: 6c:44:a2:ec:2c:92:00:76:5a:fa:a9:7c:8c:43:0b: 6c:30:4b:cf:16:27:47:aa:a6:77:ca:7b:ad:64:cc: 5c:24:57:ca:bd:b6:a0:57:03:a9:9b:a9:16:0e:68: ca:d3:a1:55:f9:d1:95:08:84:c4:2c:b4:2a:49:7f: b3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.112.0/23 Signature Algorithm: sha256WithRSAEncryption 03:05:9b:bf:9e:4a:15:c2:de:13:f9:ee:0a:17:d0:38:5e:e6: 9d:ff:53:b2:06:d8:d0:9a:55:79:f2:00:45:f1:eb:f2:65:e7: 67:6d:15:9a:4d:6d:ad:f1:98:fd:c6:26:dc:78:f2:fe:8d:87: 12:c5:8d:a6:49:23:cb:8c:f8:ec:27:5d:20:a0:fd:d5:78:3e: 74:6b:2c:34:80:0f:1c:a8:3b:d9:fa:fd:c6:e7:70:2e:cb:86: 26:86:1b:b1:ba:aa:36:44:b4:1d:09:43:2a:5f:dd:8c:8e:68: 01:7e:18:f8:9f:16:43:ff:da:33:8f:23:6e:5b:75:db:a7:79: ad:e7:5b:17:71:07:17:2c:56:20:db:00:40:ef:d2:01:74:4b: 5d:31:41:a2:19:e7:a8:a3:76:96:cb:97:9b:bd:01:09:7f:17: 63:1e:48:a1:77:8f:e2:c9:e3:99:9d:5c:3f:48:8e:31:10:ca: 8b:de:68:db:2b:d5:b8:63:cb:86:0f:cd:ce:a1:2d:60:6c:47: db:08:9b:63:ed:7e:9d:27:aa:d9:e9:4a:2b:40:c7:a2:6a:93: 31:3f:9f:dc:72:b3:81:6b:51:e8:64:47:52:54:36:3d:bf:d2: e0:65:51:ab:30:68:26:99:11:a2:2c:0b:0f:98:e1:10:de:4a: 48:8b:49:45 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUclFPX+BW7VrZpbzCB6uCMrVO34swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQwMzE4MTAyOFoX DTI2MDQwMjE4MTUyOFowMzExMC8GA1UEAxMoNTU0NkU5RjFDRjJDRjU4Mjc4QzVC REI1MzBFOTFFRkQxQkVDRUYwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK7QOXvtOrTssCgTJBWaykEjB/tpN+K5sEovpJyS/aJt0JX6Xxbkz27D5G2d UIT/ZVmisgbAst7yMm3Yi5ut7CtWFPdnYrowJUg+Oo8khMLfX+6e41wfB6eP7YNG E+HMlZrRnibUHU3HyOQlnCQ3vCsUJvZ2YRwzjz6fGERybQ09uFSe37UTbmsUw+BQ aTGlbFRWCu/GMapx59s6tTVkxibxP4hGrLWJS0mCFUqulLzF7T4c6pMe3agvlZeW 5IUAg2I8bESi7CySAHZa+ql8jEMLbDBLzxYnR6qmd8p7rWTMXCRXyr22oFcDqZup Fg5oytOhVfnRlQiExCy0Kkl/s1sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFVG6fHPLPWCeMW9tTDpHv0b7O8EMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hMTQ4NmNjZC0wYzk1LTQ5MWEtYjllNi02NjdjZWU0NDU5NGYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExNDg2Y2Nk LTBjOTUtNDkxYS1iOWU2LTY2N2NlZTQ0NTk0Zi8wLzU1NDZFOUYxQ0YyQ0Y1ODI3 OEM1QkRCNTMwRTkxRUZEMUJFQ0VGMDQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvXAwDQYJKoZIhvcNAQELBQADggEBAAMFm7+eShXC3hP57goX0Dhe5p3/U7IG 2NCaVXnyAEXx6/Jl52dtFZpNba3xmP3GJtx48v6NhxLFjaZJI8uM+OwnXSCg/dV4 PnRrLDSADxyoO9n6/cbncC7LhiaGG7G6qjZEtB0JQypf3YyOaAF+GPifFkP/2jOP I25bddunea3nWxdxBxcsViDbAEDv0gF0S10xQaIZ56ijdpbLl5u9AQl/F2MeSKF3 j+LJ45mdXD9IjjEQyoveaNsr1bhjy4YPzc6hLWBsR9sIm2Ptfp0nqtnpSitAx6Jq kzE/n9xys4FrUehkR1JUNj2/0uBlUaswaCaZEaIsCw+Y4RDeSkiLSUU= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:14 2025 by rpki-client on console.sobornost.net