$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer File: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer (raw, json) Hash identifier: BMepNws6RWFz4SQd2jLwg2y3thBDkJLqXoSgxCvaPhc= Subject key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 483DE5596C1A620F8728864EC455879CEC6A0624 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft caRepository: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 29 Mar 2025 00:17:42 +0000 Certificate not after: Sat 28 Mar 2026 00:22:42 +0000 Subordinate resources: IP: 103.189.206.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:3d:e5:59:6c:1a:62:0f:87:28:86:4e:c4:55:87:9c:ec:6a:06:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 29 00:17:42 2025 GMT Not After : Mar 28 00:22:42 2026 GMT Subject: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:48:77:07:6d:a9:6c:0d:1c:c1:39:8c:7d:a8: 4b:fc:6e:01:54:05:c7:44:ca:db:4d:30:a7:d6:6e: 67:12:d1:a7:7d:2e:4a:2a:8e:c0:85:8c:2b:14:12: d3:9f:60:33:63:e3:7c:71:06:54:62:e6:aa:fd:a6: 4a:58:ff:bb:c5:7c:7d:65:d7:56:fb:70:70:4c:cf: a8:42:c3:a4:2b:6e:0c:89:18:86:bc:4c:37:ea:ec: 2b:b7:e8:9e:fd:e4:7f:b6:c7:82:6a:f0:97:59:f3: 04:d8:6e:02:68:a6:57:64:35:d9:17:a3:15:12:f4: 44:9a:86:25:4a:72:cc:8e:b6:91:17:48:e4:50:7a: 5f:11:36:06:a2:f5:34:00:18:b8:97:c2:58:59:2f: 5d:df:2c:05:01:74:28:4d:ca:df:b6:4b:45:73:ce: 18:e0:a4:55:e6:ac:fd:e2:f0:eb:79:12:90:8e:96: b8:b7:d0:60:e6:07:88:1b:b9:fe:c4:c0:60:57:5e: 09:ac:b3:0f:1b:8a:0a:b7:c5:25:2a:1e:c9:f5:e7: ed:05:09:cd:0a:94:a1:8d:bf:a3:69:52:7e:4b:eb: 73:02:19:e8:cc:b8:e6:1d:5b:51:e4:6e:37:8b:2e: 6c:25:df:fe:04:ae:50:04:ac:3c:ae:bf:c5:a2:ef: 79:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.206.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:0a:97:fd:b0:00:80:28:b3:de:06:5a:7c:33:5d:e5:eb:32: 42:46:c0:a8:7f:f3:21:cb:72:6f:5d:dc:35:79:7d:61:23:41: 61:c9:49:49:b9:81:57:1b:54:13:70:79:18:be:29:7b:ea:35: 10:ab:5b:29:02:f8:4a:09:44:38:c6:32:83:e1:14:53:e6:7f: 3c:32:20:cf:6b:bc:3e:12:c3:34:61:a3:36:eb:0c:d6:34:8b: 66:3c:aa:2d:a4:ce:58:f1:05:51:0b:17:a1:dc:82:82:38:3d: 50:e8:4a:a1:8f:6c:b9:48:b8:3d:09:d5:44:04:61:77:b8:ba: 11:11:72:f6:d2:c5:d2:04:47:ce:f9:68:6f:ba:54:21:7f:53: 7e:7e:4f:cf:25:3e:da:7b:4f:d4:35:b2:7e:90:e5:af:b9:01: a0:0c:51:bd:d0:98:37:92:58:e2:78:3e:67:83:1c:a3:0a:69: 42:74:67:d1:df:6a:2c:a1:18:dd:57:41:7c:4e:03:0f:45:6d: f4:9f:2b:92:8d:5d:13:c8:fc:d9:66:81:98:96:fb:ba:5c:f9: 76:77:bc:34:e4:f0:d8:1d:c0:3b:e4:e9:06:10:8c:f6:af:c5: 6c:c7:46:c1:22:2a:6a:9a:80:ce:4d:a9:f0:dd:be:d8:60:3b: 81:96:97:85 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUSD3lWWwaYg+HKIZOxFWHnOxqBiQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMyOTAwMTc0MloX DTI2MDMyODAwMjI0MlowMzExMC8GA1UEAxMoNjk5NDVDMzg2OUIzRTQyOUQ0QjBB RUNFREY5OTk5RUE1REFFRTQyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOZIdwdtqWwNHME5jH2oS/xuAVQFx0TK200wp9ZuZxLRp30uSiqOwIWMKxQS 059gM2PjfHEGVGLmqv2mSlj/u8V8fWXXVvtwcEzPqELDpCtuDIkYhrxMN+rsK7fo nv3kf7bHgmrwl1nzBNhuAmimV2Q12RejFRL0RJqGJUpyzI62kRdI5FB6XxE2BqL1 NAAYuJfCWFkvXd8sBQF0KE3K37ZLRXPOGOCkVeas/eLw63kSkI6WuLfQYOYHiBu5 /sTAYFdeCayzDxuKCrfFJSoeyfXn7QUJzQqUoY2/o2lSfkvrcwIZ6My45h1bUeRu N4subCXf/gSuUASsPK6/xaLveQkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGmUXDhps+Qp1LCuzt+ZmepdruQpMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xODMxZWViNC1mMzU3LTQ1YTctOTI2NS00MjhiMDA3YTAyNzAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4MzFlZWI0 LWYzNTctNDVhNy05MjY1LTQyOGIwMDdhMDI3MC8wLzY5OTQ1QzM4NjlCM0U0MjlE NEIwQUVDRURGOTk5OUVBNURBRUU0MjkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvc4wDQYJKoZIhvcNAQELBQADggEBACsKl/2wAIAos94GWnwzXeXrMkJGwKh/ 8yHLcm9d3DV5fWEjQWHJSUm5gVcbVBNweRi+KXvqNRCrWykC+EoJRDjGMoPhFFPm fzwyIM9rvD4SwzRhozbrDNY0i2Y8qi2kzljxBVELF6HcgoI4PVDoSqGPbLlIuD0J 1UQEYXe4uhERcvbSxdIER875aG+6VCF/U35+T88lPtp7T9Q1sn6Q5a+5AaAMUb3Q mDeSWOJ4PmeDHKMKaUJ0Z9HfaiyhGN1XQXxOAw9FbfSfK5KNXRPI/NlmgZiW+7pc +XZ3vDTk8NgdwDvk6QYQjPavxWzHRsEiKmqagM5NqfDdvthgO4GWl4U= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:14 2025 by rpki-client on console.sobornost.net