$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer (raw, json) Hash identifier: 6Tz3baKrpjR+g+t6FoioFtqDiqQpJA+RemwdPoBU3cM= Subject key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0F3FC377D3EBBA0FE0D1B6D68B08711BB9AFA0B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft caRepository: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 30 Dec 2024 11:07:55 +0000 Certificate not after: Mon 29 Dec 2025 11:12:55 +0000 Subordinate resources: IP: 202.47.160.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:3f:c3:77:d3:eb:ba:0f:e0:d1:b6:d6:8b:08:71:1b:b9:af:a0:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 30 11:07:55 2024 GMT Not After : Dec 29 11:12:55 2025 GMT Subject: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6b:62:c2:db:56:75:0e:73:b8:01:8d:1f:31: 4b:82:38:80:3a:ab:c6:f0:92:b7:ef:75:33:96:5d: ff:e8:1d:ce:72:43:ab:eb:50:66:6d:a7:32:4a:c0: 84:27:36:c4:cd:fb:81:f0:55:f8:4e:53:be:19:61: fa:b4:1c:d3:2a:98:c2:1c:32:b1:6b:36:43:76:ad: 0f:33:2a:a7:8e:44:18:5c:75:2f:90:6e:6b:de:e8: fa:0c:3e:2d:30:57:20:e1:e1:7e:f9:15:7d:79:5b: 26:eb:b8:3b:28:d2:69:28:a9:fd:5e:8a:36:82:b3: e3:ac:db:aa:c8:0c:1e:bc:4e:8c:3a:02:2b:9c:8c: b8:d0:46:3e:90:7d:11:fb:c7:93:6d:5b:70:00:de: a4:23:1a:fb:60:f0:3d:47:7f:79:02:cb:71:8e:66: f0:78:0a:69:e3:f1:4d:ec:38:54:ae:8e:b5:82:f3: f3:49:bb:b0:d3:20:cd:e7:d7:72:4f:b9:de:60:40: cb:2b:cc:90:f1:62:98:1b:4f:a1:2f:16:07:97:89: 83:09:6c:65:1d:92:61:8c:18:c2:77:af:f5:1b:f5: 40:9e:2b:fc:73:71:fc:03:99:ac:c4:d4:92:7d:c9: 04:3e:ef:2d:77:8f:12:8a:38:1e:c3:5d:0a:b8:d9: e8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.160.0/24 Signature Algorithm: sha256WithRSAEncryption 12:e6:af:c1:3f:9a:99:12:bd:03:4a:bd:7a:65:1b:d9:e8:30: 22:e2:1a:e8:97:26:27:35:c3:ff:39:ef:44:6b:27:9c:6b:7f: d7:11:58:7d:b6:bc:50:f7:ed:41:f6:36:71:9a:d7:3d:ea:ab: 8b:54:41:df:3d:53:88:d9:71:33:ba:6e:be:c0:a5:ec:f3:f0: 4f:6a:fe:48:62:e7:3e:8d:a0:1d:95:7c:ef:f3:dd:0f:c9:70: 84:3f:66:aa:cb:96:85:20:3c:c2:9d:2a:ec:ef:cc:a9:83:a2: 09:db:9b:a3:ba:02:06:72:c6:44:df:c0:1d:57:63:82:60:6c: e8:7a:94:3b:4f:a0:37:ff:2e:e9:e1:f5:fc:53:e8:1c:61:45: fa:fe:94:74:b8:20:da:e0:7f:2d:8f:d7:c8:16:55:b7:5f:35: d8:8d:83:74:20:bf:75:f3:30:b1:6d:7e:c4:e9:a8:d5:be:b2: 82:6c:12:8d:04:fe:fa:b5:03:1a:32:5a:92:c9:72:1e:c3:20: 43:26:7e:29:80:ab:53:54:be:57:66:6b:3e:70:c9:75:84:c8: d6:a3:b4:92:63:5e:5a:8a:28:f4:cc:f5:65:88:b3:bc:e0:67: d9:67:fc:bf:01:24:25:89:a8:1d:20:77:77:89:7c:30:3d:52: 73:86:c5:05 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUDz/Dd9Prug/g0bbWiwhxG7mvoLQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIzMDExMDc1NVoX DTI1MTIyOTExMTI1NVowMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0Qx N0YxQzVCNkYwQzU0QjBGNUYxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANFrYsLbVnUOc7gBjR8xS4I4gDqrxvCSt+91M5Zd/+gdznJDq+tQZm2nMkrA hCc2xM37gfBV+E5Tvhlh+rQc0yqYwhwysWs2Q3atDzMqp45EGFx1L5Bua97o+gw+ LTBXIOHhfvkVfXlbJuu4OyjSaSip/V6KNoKz46zbqsgMHrxOjDoCK5yMuNBGPpB9 EfvHk21bcADepCMa+2DwPUd/eQLLcY5m8HgKaePxTew4VK6OtYLz80m7sNMgzefX ck+53mBAyyvMkPFimBtPoS8WB5eJgwlsZR2SYYwYwnev9Rv1QJ4r/HNx/AOZrMTU kn3JBD7vLXePEoo4HsNdCrjZ6MECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIlY6x6gAi3veD0X8cW28MVLD18eMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQyODg3NjJj LTNmYzUtNDljYy05NDlhLTU5NGIzMzFhMTNhMS8wLzg5NThFQjFFQTAwMjJERUY3 ODNEMTdGMUM1QjZGMEM1NEIwRjVGMUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADKL6AwDQYJKoZIhvcNAQELBQADggEBABLmr8E/mpkSvQNKvXplG9noMCLiGuiX Jic1w/8570RrJ5xrf9cRWH22vFD37UH2NnGa1z3qq4tUQd89U4jZcTO6br7Apezz 8E9q/khi5z6NoB2VfO/z3Q/JcIQ/ZqrLloUgPMKdKuzvzKmDognbm6O6AgZyxkTf wB1XY4JgbOh6lDtPoDf/Lunh9fxT6BxhRfr+lHS4INrgfy2P18gWVbdfNdiNg3Qg v3XzMLFtfsTpqNW+soJsEo0E/vq1AxoyWpLJch7DIEMmfimAq1NUvldmaz5wyXWE yNajtJJjXlqKKPTM9WWIs7zgZ9ln/L8BJCWJqB0gd3eJfDA9UnOGxQU= -----END CERTIFICATE-----Generated at Mon Apr 28 22:47:25 2025 by rpki-client on console.sobornost.net