$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer File: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer (raw, json) Hash identifier: zKg+4rI9/6STE4iXhXSBWeJMToVnzmo+4zvt9j2we3o= Subject key identifier: 8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 72F1A3186E85817029F4527D4F1C32CC5A88F26F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft caRepository: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 08 Apr 2025 16:01:17 +0000 Certificate not after: Tue 07 Apr 2026 16:06:17 +0000 Subordinate resources: IP: 103.184.56.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f1:a3:18:6e:85:81:70:29:f4:52:7d:4f:1c:32:cc:5a:88:f2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 8 16:01:17 2025 GMT Not After : Apr 7 16:06:17 2026 GMT Subject: CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a4:9f:dc:49:37:06:e8:3c:47:cb:d6:8a:14: bb:ee:18:b6:15:00:b7:e8:23:f4:6f:03:e4:7e:11: a4:dd:55:5c:d2:b6:5a:fc:3e:66:d5:b4:4b:2f:21: 3a:bb:5f:1a:28:b0:ff:a7:c9:a1:4c:43:6c:5e:ae: f3:9e:69:7d:25:6b:d7:82:61:0a:2c:29:de:ac:32: bb:8a:db:b8:3d:12:a7:40:42:66:5d:60:1c:aa:93: 3d:20:ce:d6:ae:ad:82:64:83:86:11:53:77:ac:18: c1:be:c7:d1:4b:4d:77:8c:84:aa:1f:a4:9d:a4:6d: f3:5c:42:b2:84:08:b6:aa:8a:ff:9d:44:1c:f1:4b: 9e:e8:e2:07:62:84:44:52:15:a8:85:68:92:d3:7f: dc:0f:b4:88:ee:91:4c:4f:a3:30:6f:d9:7e:8d:37: 05:68:52:4f:df:0c:18:22:c9:6f:e7:69:c0:22:21: 36:14:59:91:2a:22:38:8e:4d:56:0d:ed:ad:0e:3b: 97:f6:36:4a:a5:83:31:49:ea:6b:01:b1:c5:13:42: f5:81:44:de:f1:74:eb:d4:6b:be:79:fc:66:2a:0b: f5:f0:f9:8e:9d:e2:1c:5d:6d:0a:72:f2:55:b2:19: 39:cf:09:71:9c:e0:02:2d:58:48:8f:1b:1a:9f:fa: 80:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.56.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:ef:1c:48:2d:89:e8:67:ed:fa:2b:3c:79:29:d3:6d:64:ca: 6f:ac:9c:14:e9:fe:5e:03:bd:af:7b:e8:ba:f4:ad:ef:67:55: 7d:98:70:da:80:3b:0e:33:fa:b3:4c:f3:e7:66:89:08:95:56: 70:e1:a5:19:e2:a3:5d:28:bd:ce:85:e3:05:02:3a:be:f7:d4: 4f:81:28:b8:6d:14:bb:a1:6c:1f:9e:92:8e:f2:c6:32:2d:17: ff:da:07:13:b6:09:f1:b1:75:b0:6f:f7:f2:89:76:1d:d5:58: 0a:1a:81:29:c0:4b:62:75:6d:ee:27:c7:c3:05:0c:dd:81:ca: ed:6b:c9:51:ab:88:ef:0c:e5:eb:5c:82:fe:b3:11:94:ed:9a: 66:5c:33:08:2b:4f:25:85:eb:e4:c3:04:03:57:58:bf:11:79: 20:af:ab:ab:e3:37:55:e3:b6:eb:92:9e:f6:42:a9:52:e3:39: a6:1f:d7:8a:65:f7:41:b1:93:7e:60:76:46:94:ab:23:4e:ae: 12:41:2b:d9:d4:bd:82:38:0d:db:d9:02:ae:15:6c:59:d2:24: e1:4f:af:f4:c8:56:b7:ea:7d:26:af:f7:dc:a7:b6:1d:34:44: aa:1e:d0:87:34:d6:8f:5b:e3:2c:8c:b0:31:67:32:e8:b6:45: 8f:59:99:44 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUcvGjGG6FgXAp9FJ9TxwyzFqI8m8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQwODE2MDExN1oX DTI2MDQwNzE2MDYxN1owMzExMC8GA1UEAxMoOEIwREUxNDFBQ0I4MTFFMEZFNjUw ODVDRjIzMzlFRTRDN0VFMDVBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKkn9xJNwboPEfL1ooUu+4YthUAt+gj9G8D5H4RpN1VXNK2Wvw+ZtW0Sy8h OrtfGiiw/6fJoUxDbF6u855pfSVr14JhCiwp3qwyu4rbuD0Sp0BCZl1gHKqTPSDO 1q6tgmSDhhFTd6wYwb7H0UtNd4yEqh+knaRt81xCsoQItqqK/51EHPFLnujiB2KE RFIVqIVoktN/3A+0iO6RTE+jMG/Zfo03BWhST98MGCLJb+dpwCIhNhRZkSoiOI5N Vg3trQ47l/Y2SqWDMUnqawGxxRNC9YFE3vF069Rrvnn8ZioL9fD5jp3iHF1tCnLy VbIZOc8JcZzgAi1YSI8bGp/6gMcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIsN4UGsuBHg/mUIXPIznuTH7gWiMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZTZhNTdjNS1kZjczLTQzZjUtODY1ZC02YmQyNDhjMjJmYmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RlNmE1N2M1 LWRmNzMtNDNmNS04NjVkLTZiZDI0OGMyMmZiYS8wLzhCMERFMTQxQUNCODExRTBG RTY1MDg1Q0YyMzM5RUU0QzdFRTA1QTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnuDgwDQYJKoZIhvcNAQELBQADggEBAJvvHEgtiehn7forPHkp021kym+snBTp /l4Dva976Lr0re9nVX2YcNqAOw4z+rNM8+dmiQiVVnDhpRnio10ovc6F4wUCOr73 1E+BKLhtFLuhbB+eko7yxjItF//aBxO2CfGxdbBv9/KJdh3VWAoagSnAS2J1be4n x8MFDN2Byu1ryVGriO8M5etcgv6zEZTtmmZcMwgrTyWF6+TDBANXWL8ReSCvq6vj N1XjtuuSnvZCqVLjOaYf14pl90Gxk35gdkaUqyNOrhJBK9nUvYI4DdvZAq4VbFnS JOFPr/TIVrfqfSav99ynth00RKoe0Ic01o9b4yyMsDFnMui2RY9ZmUQ= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:16 2025 by rpki-client on console.sobornost.net