$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer File: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer (raw, json) Hash identifier: AhnlGqBGveQOyJLoc0hmzHDE3/SBJm53rvI9l92mEL8= Subject key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 55580A45BD0068CA7919F6055E2CEE64C9BF1D37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft caRepository: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 21 Mar 2025 13:21:29 +0000 Certificate not after: Fri 20 Mar 2026 13:26:29 +0000 Subordinate resources: IP: 202.51.16.0/20 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:58:0a:45:bd:00:68:ca:79:19:f6:05:5e:2c:ee:64:c9:bf:1d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 21 13:21:29 2025 GMT Not After : Mar 20 13:26:29 2026 GMT Subject: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c4:8c:9f:6e:0c:0e:1e:ce:10:c9:e0:c8:3d: 35:12:19:93:f7:39:7d:5e:0c:2f:68:41:02:48:9f: c9:fe:d1:b8:2e:e7:dc:94:d9:8a:da:7a:b7:7a:34: 0c:41:ad:7b:79:46:59:d0:35:2d:42:6d:9e:78:fe: 0e:d4:17:91:f2:4c:44:59:a3:5f:e7:a7:02:22:e7: 00:17:0e:15:bc:75:2a:1b:a7:a6:5f:c7:74:06:bf: 2b:06:f8:13:a4:15:51:6c:10:55:0f:e4:71:dc:7d: 1f:5e:cc:76:48:56:f3:02:a0:0e:23:31:66:8a:25: 79:4d:d5:9c:0e:4f:5a:29:ee:91:06:b6:dd:59:fb: 99:42:2b:86:a4:70:7d:a3:d5:1e:af:62:ec:69:80: 46:2b:ab:06:6d:38:88:29:cc:7e:2b:a8:95:45:d2: d3:e1:db:04:57:4b:24:38:e8:c4:1b:9b:b4:5b:d2: c4:42:13:ee:ea:d5:3c:14:7e:4f:cf:99:d3:ea:5e: 6b:46:ca:94:fc:6f:09:b5:d5:03:c0:98:28:10:61: f4:f5:88:80:84:a1:53:99:75:ce:b2:89:14:5a:c0: a9:0b:4d:a7:87:fe:b1:29:bd:71:94:b6:9f:66:c1: b6:60:e3:26:4c:18:17:53:f7:ea:b2:02:95:d8:bb: 75:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.16.0/20 Signature Algorithm: sha256WithRSAEncryption 55:20:d6:91:e7:38:c4:f8:90:35:2c:b1:a6:f2:27:ad:69:16: f4:db:0b:a3:93:3b:6e:0f:97:6b:31:df:62:29:55:ee:80:b5: 63:cf:07:ac:4c:9f:b9:50:aa:44:99:fe:fe:1f:91:60:87:e9: 90:bb:90:2e:39:c9:db:c6:72:27:82:8c:6d:df:ed:eb:08:60: 11:35:90:42:f9:76:b6:86:12:25:f9:ad:83:43:5d:7a:e9:ad: 24:81:9f:86:19:9b:19:73:2f:03:08:b0:e3:79:b0:c4:a6:7d: ff:39:4c:8b:b0:01:17:12:f7:3c:b8:ed:81:e8:e8:9e:0b:23: 81:0c:f7:8c:32:1a:7c:71:5c:b5:d2:dc:d9:8e:96:6b:f3:6d: 79:7e:18:49:a8:b9:a0:15:3c:cd:05:94:fd:41:d8:09:6d:fa: 7a:3d:b1:3b:0b:77:be:ba:26:1e:10:6f:a7:92:4e:62:f3:61: 99:ba:ef:a7:10:9b:8b:a4:89:8d:85:2b:4b:66:38:1b:f1:4b: 94:01:a3:41:d0:cc:d8:70:d0:8d:c4:8e:37:32:0a:a9:df:54: 1c:f0:da:c1:b6:65:d8:1f:b5:4b:28:a9:03:f8:5e:b3:13:a2: 0a:ff:6f:fe:6f:8d:e4:85:0c:7c:5f:bd:07:1d:21:2f:e6:0f: b1:d0:0b:f7 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUVVgKRb0AaMp5GfYFXizuZMm/HTcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMyMTEzMjEyOVoX DTI2MDMyMDEzMjYyOVowMzExMC8GA1UEAxMoOUU2QTY3RDVCOUQ3MjVDMUY0MDlB OUZCM0JGMzVBMDcxQUI0MjBBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3EjJ9uDA4ezhDJ4Mg9NRIZk/c5fV4ML2hBAkifyf7RuC7n3JTZitp6t3o0 DEGte3lGWdA1LUJtnnj+DtQXkfJMRFmjX+enAiLnABcOFbx1Khunpl/HdAa/Kwb4 E6QVUWwQVQ/kcdx9H17MdkhW8wKgDiMxZooleU3VnA5PWinukQa23Vn7mUIrhqRw faPVHq9i7GmARiurBm04iCnMfiuolUXS0+HbBFdLJDjoxBubtFvSxEIT7urVPBR+ T8+Z0+pea0bKlPxvCbXVA8CYKBBh9PWIgIShU5l1zrKJFFrAqQtNp4f+sSm9cZS2 n2bBtmDjJkwYF1P36rICldi7dc0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ5qZ9W51yXB9Amp+zvzWgcatCCgMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85OTRlNmIyZC0zZGRiLTQ2ZWItODNlZi1jOTliMjAwMzc4M2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5NGU2YjJk LTNkZGItNDZlYi04M2VmLWM5OWIyMDAzNzgzZi8wLzlFNkE2N0Q1QjlENzI1QzFG NDA5QTlGQjNCRjM1QTA3MUFCNDIwQTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATKMxAwDQYJKoZIhvcNAQELBQADggEBAFUg1pHnOMT4kDUssabyJ61pFvTbC6OT O24Pl2sx32IpVe6AtWPPB6xMn7lQqkSZ/v4fkWCH6ZC7kC45ydvGcieCjG3f7esI YBE1kEL5draGEiX5rYNDXXrprSSBn4YZmxlzLwMIsON5sMSmff85TIuwARcS9zy4 7YHo6J4LI4EM94wyGnxxXLXS3NmOlmvzbXl+GEmouaAVPM0FlP1B2Alt+no9sTsL d766Jh4Qb6eSTmLzYZm676cQm4ukiY2FK0tmOBvxS5QBo0HQzNhw0I3EjjcyCqnf VBzw2sG2ZdgftUsoqQP4XrMTogr/b/5vjeSFDHxfvQcdIS/mD7HQC/c= -----END CERTIFICATE-----Generated at Sat Apr 26 06:13:38 2025 by rpki-client on console.sobornost.net