$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer File: A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer (raw, json) Hash identifier: H0V7NbO+SnBUHvVuywMLxLQ+GJhEwgjpJf25cI9J/qs= Subject key identifier: A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2E963778A56FFCF8026D0500CAD07B682F81670E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft caRepository: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 10 Apr 2025 05:52:41 +0000 Certificate not after: Thu 09 Apr 2026 05:57:41 +0000 Subordinate resources: IP: 103.158.162.0/23 IP: 2001:df5:5c80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:96:37:78:a5:6f:fc:f8:02:6d:05:00:ca:d0:7b:68:2f:81:67:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 10 05:52:41 2025 GMT Not After : Apr 9 05:57:41 2026 GMT Subject: CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:71:2c:f2:c5:05:4b:2e:26:bd:b5:02:6c:18: 93:9f:ba:e7:ce:23:7b:fb:3c:12:45:f8:b9:bc:cb: 53:57:0d:12:f1:f4:b1:80:d4:17:1c:30:17:2e:b8: 71:76:b0:1f:e1:cc:28:54:32:5f:98:0f:48:70:77: 64:ca:34:ed:fe:4a:4b:1c:55:95:b5:92:4a:63:41: dc:f3:54:be:f3:1c:b9:ca:68:29:f7:03:88:c5:e3: c6:09:f8:97:c0:cc:08:e0:46:41:ee:91:82:91:9b: 96:35:7e:ad:8b:46:e5:d9:a6:96:3a:b4:34:d0:71: 15:19:19:db:a6:f4:16:ce:b9:e1:f3:05:7b:53:5b: c5:43:7a:89:af:33:4c:39:a4:9e:7a:07:ab:89:ee: 0d:41:a2:20:0b:c2:cc:17:15:34:3b:25:f6:fd:74: 65:59:d1:39:7b:40:81:c1:63:d4:79:9b:e9:61:3a: 3e:1e:77:22:2f:65:5b:36:86:9a:3e:9d:51:a2:de: 2e:04:4c:70:74:ca:4b:26:60:df:91:66:48:aa:de: 3e:f4:79:e0:74:6e:da:06:62:6b:ca:58:c2:44:50: 37:80:ea:33:95:1f:c9:6c:ad:ee:dc:9b:19:3c:8e: b5:55:f0:fb:e1:cb:a7:77:ac:a4:4f:64:bc:91:cc: 14:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.162.0/23 IPv6: 2001:df5:5c80::/48 Signature Algorithm: sha256WithRSAEncryption 66:3a:41:30:cc:2e:0c:56:e7:7b:36:3c:9c:82:6c:44:eb:87: 20:b3:4b:36:8b:59:04:98:12:6c:ba:b7:5e:3e:e8:1e:3d:60: 82:e0:89:b6:29:7f:33:29:3f:e4:7d:cc:38:13:97:23:2b:d2: 23:fc:c1:86:3a:dd:a6:5c:ad:9d:4b:44:cb:10:a3:8a:1c:f7: ce:64:e3:0c:46:36:24:a4:7f:6b:29:8b:11:ea:80:a5:74:9d: e1:7b:80:1f:ac:db:be:27:10:4b:bd:72:b4:2c:44:99:e2:7a: 14:12:d5:8b:95:00:b3:f4:2a:4c:33:f4:37:60:7a:28:62:0c: eb:35:17:b6:b3:22:10:72:f9:d2:93:63:4c:ef:63:32:91:c4: a9:88:e3:e2:b8:7b:f1:14:aa:1e:66:de:5b:14:b2:91:6c:00: 37:a3:c3:78:30:53:8d:8e:f6:0f:8b:78:ff:34:9f:61:07:b3: 72:fb:a8:31:3e:20:0d:c6:5f:e9:fe:92:15:1b:48:bd:21:37: ea:f4:42:2a:d2:77:dc:6a:69:8a:85:56:25:7a:b6:74:06:44: f0:33:25:40:e0:b3:3e:0c:09:30:4e:f3:9a:3b:e3:8e:f9:ba: e7:44:e7:fc:e2:5a:c7:18:86:c2:5d:c5:ef:8c:6b:c2:19:48: a6:5f:8e:db -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIULpY3eKVv/PgCbQUAytB7aC+BZw4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxMDA1NTI0MVoX DTI2MDQwOTA1NTc0MVowMzExMC8GA1UEAxMoQTM5OEZCREYzNTc3OTBDN0RDNjdD NkQ5MkExNUEzRDQ2MTc1NThBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANZxLPLFBUsuJr21AmwYk5+6584je/s8EkX4ubzLU1cNEvH0sYDUFxwwFy64 cXawH+HMKFQyX5gPSHB3ZMo07f5KSxxVlbWSSmNB3PNUvvMcucpoKfcDiMXjxgn4 l8DMCOBGQe6RgpGbljV+rYtG5dmmljq0NNBxFRkZ26b0Fs654fMFe1NbxUN6ia8z TDmknnoHq4nuDUGiIAvCzBcVNDsl9v10ZVnROXtAgcFj1Hmb6WE6Ph53Ii9lWzaG mj6dUaLeLgRMcHTKSyZg35FmSKrePvR54HRu2gZia8pYwkRQN4DqM5UfyWyt7tyb GTyOtVXw++HLp3espE9kvJHMFPcCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKOY+981d5DH3GfG2SoVo9RhdVimMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNmMxYzUyOS02MjQ0LTQ1MDMtYWY1Ni02OTQ1OWU0YTc2MGYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2YzFjNTI5 LTYyNDQtNDUwMy1hZjU2LTY5NDU5ZTRhNzYwZi8wL0EzOThGQkRGMzU3NzkwQzdE QzY3QzZEOTJBMTVBM0Q0NjE3NTU4QTYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnnqIwDwQCAAIwCQMHACABDfVcgDANBgkqhkiG9w0BAQsFAAOCAQEAZjpBMMwu DFbnezY8nIJsROuHILNLNotZBJgSbLq3Xj7oHj1gguCJtil/Myk/5H3MOBOXIyvS I/zBhjrdplytnUtEyxCjihz3zmTjDEY2JKR/aymLEeqApXSd4XuAH6zbvicQS71y tCxEmeJ6FBLVi5UAs/QqTDP0N2B6KGIM6zUXtrMiEHL50pNjTO9jMpHEqYjj4rh7 8RSqHmbeWxSykWwAN6PDeDBTjY72D4t4/zSfYQezcvuoMT4gDcZf6f6SFRtIvSE3 6vRCKtJ33GppioVWJXq2dAZE8DMlQOCzPgwJME7zmjvjjvm650Tn/OJaxxiGwl3F 74xrwhlIpl+O2w== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:17 2025 by rpki-client on console.sobornost.net