$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer File: 7433AB64571BE1827F0BC97ED291976B6E3429FA.cer (raw, json) Hash identifier: 4YIN4bi7yk4lReskzm9X1ftp8B97bmv0yMAyIATYQek= Subject key identifier: 74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4B5DF6F5CB3464F9B6CF0205DB74B756DCD77678 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft caRepository: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 18 Dec 2024 19:11:14 +0000 Certificate not after: Wed 17 Dec 2025 19:16:14 +0000 Subordinate resources: IP: 103.75.62.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5d:f6:f5:cb:34:64:f9:b6:cf:02:05:db:74:b7:56:dc:d7:76:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 18 19:11:14 2024 GMT Not After : Dec 17 19:16:14 2025 GMT Subject: CN=7433AB64571BE1827F0BC97ED291976B6E3429FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d0:7d:68:4f:0f:79:6f:c8:81:f7:89:dc:57: d1:5b:c0:d8:51:4c:08:c5:0a:78:b2:83:54:e6:3d: 67:aa:14:9c:90:29:4b:e4:e4:75:01:78:fd:03:fb: 99:d7:86:d4:31:59:aa:d2:fb:f4:31:21:da:9d:82: e3:b6:28:8c:ef:97:96:21:cd:ff:ed:ee:7a:8a:b4: 42:80:68:5d:87:20:70:da:90:b6:c0:1a:21:a1:38: 4e:88:68:f8:66:e8:be:61:b9:c7:d0:43:e8:8a:85: d8:96:da:3b:94:b4:63:82:c9:47:8a:9e:27:54:59: 76:5e:e2:7e:e9:f8:80:a7:d1:c4:da:5c:cb:ba:24: 82:45:ce:72:dc:62:1d:03:fc:8b:25:c5:bd:35:1c: 0d:97:f3:bd:e2:07:f5:ce:fe:ce:3e:2d:1b:d4:bb: d7:5f:31:ab:a2:0a:84:d8:62:6a:ec:d0:e0:be:4f: 50:c8:b8:ac:f6:e4:dd:63:d1:fb:fc:fb:1f:16:e5: 3d:3f:fb:5a:34:8b:45:07:d8:aa:10:35:70:c5:35: 83:a1:88:ae:c9:a0:dc:63:16:99:aa:77:9d:f9:a3: 7a:e7:5c:cc:91:ad:41:cf:43:ab:80:4d:e9:8a:56: 6b:5f:92:7e:2f:b4:39:bf:1d:8e:9f:9c:04:6d:42: 2c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.75.62.0/23 Signature Algorithm: sha256WithRSAEncryption 69:dc:22:28:93:4b:ff:dd:b9:72:46:6b:6d:4d:8f:fa:9e:85: fd:8e:cd:a3:41:43:12:ee:80:6f:6a:24:b9:9c:5d:33:f7:2c: d5:5a:e4:7e:e3:9c:87:23:b8:4c:3d:a8:a1:e6:4d:1f:de:6b: d7:fb:30:c3:22:96:b7:b9:ce:5a:83:0f:44:05:50:f4:b8:10: c5:3c:fc:a7:e7:87:56:33:9b:2f:d8:1a:14:27:db:e1:21:ec: dd:dc:4d:dc:e8:8a:2a:ed:57:e1:7f:24:ff:06:8a:73:5e:8c: 07:7e:ff:ef:a2:85:59:ca:da:bd:5a:76:65:b4:a8:d4:7d:66: 3e:c3:16:c5:6a:f4:c0:d8:e8:a8:43:52:49:f7:19:6b:22:b6: b6:a5:6a:96:c8:ac:a8:dc:46:58:db:47:7d:ed:70:22:73:dc: 54:e0:06:5c:47:3a:14:63:47:5f:53:88:58:08:ac:e6:c5:c7: 85:a6:53:35:6d:e5:2e:16:83:a1:f4:55:15:e5:24:5c:25:20: 26:be:a7:33:1b:51:a0:9b:ab:ca:ac:e3:a6:a5:e5:3e:37:18: f9:18:20:6d:c2:9e:f5:93:1d:ca:05:ec:c9:26:6b:34:7e:6a: d5:8d:aa:a3:b2:be:ac:fd:ee:31:3f:5a:51:da:e3:be:64:90: 2a:ed:b8:17 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUS1329cs0ZPm2zwIF23S3VtzXdngwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxODE5MTExNFoX DTI1MTIxNzE5MTYxNFowMzExMC8GA1UEAxMoNzQzM0FCNjQ1NzFCRTE4MjdGMEJD OTdFRDI5MTk3NkI2RTM0MjlGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbQfWhPD3lvyIH3idxX0VvA2FFMCMUKeLKDVOY9Z6oUnJApS+TkdQF4/QP7 mdeG1DFZqtL79DEh2p2C47YojO+XliHN/+3ueoq0QoBoXYcgcNqQtsAaIaE4Toho +GbovmG5x9BD6IqF2JbaO5S0Y4LJR4qeJ1RZdl7ifun4gKfRxNpcy7okgkXOctxi HQP8iyXFvTUcDZfzveIH9c7+zj4tG9S7118xq6IKhNhiauzQ4L5PUMi4rPbk3WPR +/z7HxblPT/7WjSLRQfYqhA1cMU1g6GIrsmg3GMWmap3nfmjeudczJGtQc9Dq4BN 6YpWa1+Sfi+0Ob8djp+cBG1CLDkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHQzq2RXG+GCfwvJftKRl2tuNCn6MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wN2M4YTBjMy0zN2Y1LTQ2NjctYTQzMC02ZmExMTFkMzQzYWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA3YzhhMGMz LTM3ZjUtNDY2Ny1hNDMwLTZmYTExMWQzNDNhYS8wLzc0MzNBQjY0NTcxQkUxODI3 RjBCQzk3RUQyOTE5NzZCNkUzNDI5RkEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnSz4wDQYJKoZIhvcNAQELBQADggEBAGncIiiTS//duXJGa21Nj/qehf2OzaNB QxLugG9qJLmcXTP3LNVa5H7jnIcjuEw9qKHmTR/ea9f7MMMilre5zlqDD0QFUPS4 EMU8/Kfnh1Yzmy/YGhQn2+Eh7N3cTdzoiirtV+F/JP8GinNejAd+/++ihVnK2r1a dmW0qNR9Zj7DFsVq9MDY6KhDUkn3GWsitralapbIrKjcRljbR33tcCJz3FTgBlxH OhRjR19TiFgIrObFx4WmUzVt5S4Wg6H0VRXlJFwlICa+pzMbUaCbq8qs46al5T43 GPkYIG3CnvWTHcoF7MkmazR+atWNqqOyvqz97jE/WlHa475kkCrtuBc= -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:44 2025 by rpki-client on console.sobornost.net