$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer File: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer (raw, json) Hash identifier: HyXBkIjB+6Usx65IxO6oADFPDSNCWPN4dRJcT9+f6lM= Subject key identifier: 7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6815F7548065C3F1625FA4A984E37F78D57FF38C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft caRepository: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 17 Apr 2025 22:13:30 +0000 Certificate not after: Thu 16 Apr 2026 22:18:30 +0000 Subordinate resources: IP: 103.167.104.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 15:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:15:f7:54:80:65:c3:f1:62:5f:a4:a9:84:e3:7f:78:d5:7f:f3:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 17 22:13:30 2025 GMT Not After : Apr 16 22:18:30 2026 GMT Subject: CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c2:b0:73:f4:e1:53:1f:3a:97:5b:17:a6:e1: 35:fd:15:8b:4a:7f:12:82:69:3a:e8:99:00:b1:fd: b2:7c:9e:bd:9a:df:f4:af:82:f1:ce:67:81:55:c8: 15:8b:b9:04:65:89:f9:55:2c:a1:da:a8:28:d4:f3: 90:1c:af:76:62:a8:2e:90:2e:aa:aa:dc:0b:ac:f6: 12:2a:15:e1:4c:1f:58:85:b9:c5:8a:ee:b8:6d:f2: 3f:d3:2c:e8:ab:ff:38:29:48:d5:2a:36:ef:70:29: 56:07:5f:41:07:89:0f:26:94:ba:0c:7b:4b:d0:b3: c3:27:f5:d8:1f:a0:72:8c:6f:04:63:1d:0f:c6:f5: 80:46:cb:dc:0a:8b:dc:f6:39:47:cb:ed:d1:18:54: da:d2:cd:6f:48:6e:a0:2f:aa:6f:01:5e:36:73:80: d7:4d:20:3b:8f:2f:f9:75:6e:26:22:4f:65:18:a3: dc:05:3a:56:85:90:59:18:9c:23:48:97:00:c7:da: f3:ef:6e:f4:87:c9:d3:09:52:f9:7d:a2:41:04:b8: 24:ab:8a:04:57:be:37:df:22:d1:43:ae:40:e7:a9: a3:39:c3:6c:92:ed:fc:ef:96:b9:06:83:f8:55:0b: b0:85:af:d2:2c:37:5d:a4:fa:29:ce:03:f3:5d:71: 6a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.104.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:31:49:b3:99:b2:08:41:f8:f8:b2:ba:39:35:ec:13:33:c6: 28:76:62:8f:0e:ba:30:a1:37:95:74:b4:4c:5d:ef:e8:52:ba: f1:1a:89:b5:be:b2:95:8e:92:36:ab:c9:d5:72:df:bd:dc:68: fa:48:32:e7:68:fd:ea:b2:30:8d:d8:c1:06:c3:ee:53:bb:8b: 26:d1:ec:fb:7f:c4:d3:8c:fb:da:3d:6d:7a:8e:b3:f4:4b:99: 99:42:2e:fd:f6:c8:bf:97:1d:b1:12:da:e9:cd:e6:e7:66:bc: c5:48:63:ed:44:ff:a0:cb:0b:6a:95:af:c2:e4:48:ba:6d:59: e7:4b:5a:c3:96:6c:e1:18:e8:59:16:6b:9f:58:3e:0c:50:b8: 73:ea:cd:e2:e8:30:f9:33:71:02:0d:db:2f:a5:13:43:ad:f8: 60:93:59:ad:b7:d9:7e:76:ff:c2:b7:13:91:79:33:c3:34:de: 47:c6:63:9d:07:10:67:a7:3b:7d:a4:ff:9f:b0:2d:5a:01:26: fe:43:df:bb:22:ab:81:61:bd:25:cf:73:31:4e:f6:7e:b3:5a: 86:76:94:24:7b:41:09:ce:27:98:f7:de:43:e3:3f:ce:e5:ef: ef:42:32:60:67:d3:33:73:3f:3f:03:bd:64:c7:4f:3c:a8:0b: 80:15:03:1d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUaBX3VIBlw/FiX6SphON/eNV/84wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxNzIyMTMzMFoX DTI2MDQxNjIyMTgzMFowMzExMC8GA1UEAxMoN0ZFRjZCRjUzRkEzMTIyQTBGMDlD RUY0QjQwOEUxMzc5MkExNDU0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN3CsHP04VMfOpdbF6bhNf0Vi0p/EoJpOuiZALH9snyevZrf9K+C8c5ngVXI FYu5BGWJ+VUsodqoKNTzkByvdmKoLpAuqqrcC6z2EioV4UwfWIW5xYruuG3yP9Ms 6Kv/OClI1So273ApVgdfQQeJDyaUugx7S9Czwyf12B+gcoxvBGMdD8b1gEbL3AqL 3PY5R8vt0RhU2tLNb0huoC+qbwFeNnOA100gO48v+XVuJiJPZRij3AU6VoWQWRic I0iXAMfa8+9u9IfJ0wlS+X2iQQS4JKuKBFe+N98i0UOuQOepoznDbJLt/O+WuQaD +FULsIWv0iw3XaT6Kc4D811xau0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH/va/U/oxIqDwnO9LQI4TeSoUVFMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zMDNlYmFiYi05OTlmLTRmM2UtODRjMS1iZjI3OWJmZTE3ODcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMwM2ViYWJi LTk5OWYtNGYzZS04NGMxLWJmMjc5YmZlMTc4Ny8wLzdGRUY2QkY1M0ZBMzEyMkEw RjA5Q0VGNEI0MDhFMTM3OTJBMTQ1NDUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnp2gwDQYJKoZIhvcNAQELBQADggEBAI8xSbOZsghB+Piyujk17BMzxih2Yo8O ujChN5V0tExd7+hSuvEaibW+spWOkjarydVy373caPpIMudo/eqyMI3YwQbD7lO7 iybR7Pt/xNOM+9o9bXqOs/RLmZlCLv32yL+XHbES2unN5udmvMVIY+1E/6DLC2qV r8LkSLptWedLWsOWbOEY6FkWa59YPgxQuHPqzeLoMPkzcQIN2y+lE0Ot+GCTWa23 2X52/8K3E5F5M8M03kfGY50HEGenO32k/5+wLVoBJv5D37siq4FhvSXPczFO9n6z WoZ2lCR7QQnOJ5j33kPjP87l7+9CMmBn0zNzPz8DvWTHTzyoC4AVAx0= -----END CERTIFICATE-----Generated at Sun Apr 27 12:40:14 2025 by rpki-client on console.sobornost.net