$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer File: ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer (raw, json) Hash identifier: JAuzbcX/MsozworoilT8zsDY6WNhj/hmF5N5Zxzywg4= Subject key identifier: AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 773096ECEB5C82095FE415667B4174C94198D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft caRepository: rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 31 Jan 2025 19:28:08 +0000 Certificate not after: Fri 30 Jan 2026 19:33:08 +0000 Subordinate resources: IP: 116.58.192.0/21 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:30:96:ec:eb:5c:82:09:5f:e4:15:66:7b:41:74:c9:41:98:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 31 19:28:08 2025 GMT Not After : Jan 30 19:33:08 2026 GMT Subject: CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:43:bd:56:81:5c:b3:76:3c:20:de:a6:b1:7b: 25:dc:24:d5:43:d2:21:ef:90:04:e1:b9:e0:fa:68: e8:b4:7b:4e:24:be:02:8b:43:2c:89:c0:4e:0b:77: e7:6d:13:08:81:42:65:ff:ee:74:ab:9c:2e:6a:0e: 22:a6:e9:e3:c3:1d:f5:fb:9b:16:08:81:3b:a0:86: c6:93:51:ad:44:7b:f5:e4:1b:4d:6d:92:72:cd:99: 6f:b2:6b:de:9c:73:24:dc:a3:c0:ca:51:f2:0b:70: 05:76:a0:20:62:e7:9a:e0:2b:d7:42:7e:53:1c:ae: 27:78:ed:b4:69:66:ed:7d:f4:ca:b8:61:9b:de:01: 35:d9:eb:1e:8c:96:1a:9a:34:28:b5:ee:21:c1:d9: 62:57:e5:eb:08:bb:fb:ef:1e:5d:f2:f9:47:75:28: 78:11:f2:77:07:a6:48:f4:52:3e:5b:1f:f2:c2:5b: ee:77:9f:2d:9f:f6:e4:6f:ad:a9:73:5b:b0:08:79: d3:c0:61:14:06:f9:89:1b:b3:27:a6:b0:b2:f8:3c: 48:10:c5:d6:38:b3:14:54:00:2e:8b:2d:63:88:dd: ac:a1:f1:5f:91:96:6c:1d:71:1e:4a:bc:9d:a6:37: 1f:50:46:34:b3:ec:a1:d0:07:76:ca:c1:63:ef:a6: 5b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.58.192.0/21 Signature Algorithm: sha256WithRSAEncryption 70:81:15:ec:0c:23:8a:aa:24:dd:17:74:15:a5:df:b8:e7:67: 45:73:2b:f7:fc:a8:f6:4d:3e:aa:ce:d0:42:61:79:2f:87:bd: fe:3c:d5:d9:c7:1b:0f:a3:30:73:0e:a9:59:09:94:84:d8:5c: e4:a7:a8:92:f4:f9:c0:db:43:56:66:e4:ba:8e:70:51:dd:63: f3:73:a5:ae:73:02:a9:40:0c:a0:e4:62:72:eb:7a:48:fc:76: ae:e0:81:58:13:31:a1:97:ce:ba:3e:11:9d:2d:e5:c6:c8:5a: a7:05:9f:83:05:2f:c4:79:a0:73:49:cd:a4:65:b8:e1:18:ac: 29:1d:1f:0c:a4:4d:9d:bc:5b:3c:3a:92:79:05:7e:ee:fe:9f: b0:c1:96:ef:3e:81:e2:3c:c7:84:ec:6c:e1:6c:0a:7e:73:e7: 44:be:a8:4a:57:95:3f:23:2e:0e:19:0e:78:be:91:fa:18:47: 35:41:08:fb:26:1d:21:58:c8:5c:77:a3:a1:5e:88:e2:3a:e4: 49:8f:4a:52:4b:2b:71:91:38:c5:c6:0d:c1:31:f2:ae:2c:48: d6:55:8a:da:45:39:5f:ee:ac:4b:fc:87:77:d3:24:47:09:6e: 22:aa:4b:0b:b2:47:b6:3c:e1:43:b3:33:33:b9:72:89:c6:d5: 9f:f9:de:22 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgITdzCW7Otcgglf5BVme0F0yUGY2DANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKEJBOEY3N0QyMUU1 OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIwHhcNMjUwMTMxMTkyODA4WhcN MjYwMTMwMTkzMzA4WjAzMTEwLwYDVQQDEyhBQ0RBMDIyRjdGM0UyOEE2RTEzMURB ODBENEM0MThFODNDRDA3QzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkO9VoFcs3Y8IN6msXsl3CTVQ9Ih75AE4bng+mjotHtOJL4Ci0MsicBOC3fn bRMIgUJl/+50q5wuag4ipunjwx31+5sWCIE7oIbGk1GtRHv15BtNbZJyzZlvsmve nHMk3KPAylHyC3AFdqAgYuea4CvXQn5THK4neO20aWbtffTKuGGb3gE12esejJYa mjQote4hwdliV+XrCLv77x5d8vlHdSh4EfJ3B6ZI9FI+Wx/ywlvud58tn/bkb62p c1uwCHnTwGEUBvmJG7MnprCy+DxIEMXWOLMUVAAuiy1jiN2sofFfkZZsHXEeSryd pjcfUEY0s+yh0Ad2ysFj76ZbYQIDAQABo4ICuDCCArQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUrNoCL38+KKbhMdqA1MQY6DzQfHMwHwYDVR0jBBgwFoAUuo93 0h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgEGMGkGA1UdHwRiMGAwXqBc oFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzIv QkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgzMzc2Qi5jcmwwfgYI KwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0 L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvdW85 MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCCASkGCCsGAQUFBwELBIIBGzCC ARcwUwYIKwYBBQUHMAWGR3JzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv LzZmZWJiNjhhLThhNWQtNDExYy04YmIzLTgzMzQyMzEwMGI2ZS8wMIGABggrBgEF BQcwCoZ0cnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZlYmI2OGEt OGE1ZC00MTFjLThiYjMtODMzNDIzMTAwYjZlLzAvQUNEQTAyMkY3RjNFMjhBNkUx MzFEQTgwRDRDNDE4RTgzQ0QwN0M3My5tZnQwPQYIKwYBBQUHMA2GMWh0dHBzOi8v cmVwby1ycGtpLmlkbmljLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME A3Q6wDANBgkqhkiG9w0BAQsFAAOCAQEAcIEV7Awjiqok3Rd0FaXfuOdnRXMr9/yo 9k0+qs7QQmF5L4e9/jzV2ccbD6Mwcw6pWQmUhNhc5KeokvT5wNtDVmbkuo5wUd1j 83OlrnMCqUAMoORicut6SPx2ruCBWBMxoZfOuj4RnS3lxshapwWfgwUvxHmgc0nN pGW44RisKR0fDKRNnbxbPDqSeQV+7v6fsMGW7z6B4jzHhOxs4WwKfnPnRL6oSleV PyMuDhkOeL6R+hhHNUEI+yYdIVjIXHejoV6I4jrkSY9KUksrcZE4xcYNwTHyrixI 1lWK2kU5X+6sS/yHd9MkRwluIqpLC7JHtjzhQ7MzM7lyicbVn/neIg== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:17 2025 by rpki-client on console.sobornost.net