$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer File: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer (raw, json) Hash identifier: 49Kk/he3iwkY32Xsf9ZWL+6HfuveE2nHY6YBD/9kd0E= Subject key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 610A28372D6A1222F809AEDE6BC8947CBAAFBE14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft caRepository: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 22:19:24 +0000 Certificate not after: Thu 05 Mar 2026 22:24:24 +0000 Subordinate resources: IP: 103.186.202.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:0a:28:37:2d:6a:12:22:f8:09:ae:de:6b:c8:94:7c:ba:af:be:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 6 22:19:24 2025 GMT Not After : Mar 5 22:24:24 2026 GMT Subject: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:31:19:50:66:d6:5f:e3:89:e4:db:3f:48: 6f:40:c3:0e:53:c0:c6:d8:09:ea:6e:69:65:6e:91: 05:05:cf:d2:15:42:28:78:13:d5:50:96:43:fa:72: 5e:3a:2c:7a:08:49:43:bf:d8:da:2c:4e:99:7b:c8: 9c:92:85:ee:29:df:8c:ec:b7:6b:87:ca:b5:c8:31: 5a:a9:d1:0a:1b:10:f4:08:cf:1d:91:97:95:e7:d8: 67:7a:c5:01:45:77:45:ac:10:26:ae:dd:f6:c3:40: 04:e5:c3:02:67:ab:e7:e4:c3:62:a4:c0:70:9d:e1: e7:f4:42:80:70:03:99:b5:38:55:79:e6:9a:46:41: 68:9e:1d:2f:35:f2:99:f3:0f:63:b4:cf:77:ef:16: 60:17:76:a0:f3:24:1f:81:5e:a8:eb:83:22:a0:49: b3:5d:5e:b3:8a:dd:9a:e6:8b:22:00:30:ee:2c:e9: ac:55:52:c6:6d:4f:9f:68:69:3d:b4:94:e2:ee:14: 43:3c:52:ee:69:32:81:7e:76:14:ad:ec:a1:51:e1: aa:c7:11:df:b9:7c:bd:4a:6c:62:8d:0c:0e:fc:7e: fc:10:84:59:a1:15:9e:48:5d:bf:5f:39:92:0d:8e: 97:28:c4:85:81:2f:fe:46:90:5e:b6:54:a0:1b:1b: d2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.202.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:0a:25:71:54:13:00:a1:5b:82:18:11:d4:09:85:e9:c9:3c: 0d:8d:c4:ad:8a:5d:78:dd:08:3d:73:03:b1:09:6a:47:5b:1f: d5:fd:4b:4c:b8:dc:fb:9f:76:b1:5f:c4:2e:fe:3a:36:f7:c8: e6:41:65:d0:6e:9c:5a:e8:0c:96:51:54:77:52:18:a4:1b:61: fc:7e:01:15:b7:5b:c0:ad:fb:c4:80:84:25:a2:3a:1a:69:77: 69:c4:05:aa:40:6c:fd:4f:f0:9c:df:99:79:5b:75:79:75:df: 43:3a:15:4d:aa:62:a6:6b:21:37:20:fa:bb:b7:60:a4:4a:fe: ac:20:7a:34:e5:91:8c:0d:06:28:f5:e2:ff:1e:cd:fc:c7:0e: 64:7a:0c:9e:d9:9f:9b:16:33:4c:fd:06:d6:07:a2:16:f2:f2: f3:ba:e3:3a:1f:fc:f3:ea:9d:22:56:c3:f2:1d:d9:75:ac:4b: c3:fa:4e:19:f4:18:c2:e7:0d:9a:15:c7:48:82:12:85:d5:93: d6:83:a7:58:3f:2c:c4:86:b6:cc:d9:2d:96:4a:fc:c4:4d:00: 73:5d:15:a5:58:f0:81:c3:e6:b1:75:57:e7:b3:08:01:1a:5c: 3d:f7:82:de:9c:6f:10:1e:5b:e3:b7:07:39:39:08:6d:88:fe: 71:f2:1f:2b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUYQooNy1qEiL4Ca7ea8iUfLqvvhQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMwNjIyMTkyNFoX DTI2MDMwNTIyMjQyNFowMzExMC8GA1UEAxMoQjM0N0JCQTZCRDExQkZDNUU1NUY3 RkYzMzRDMTY1RTlGRDIxRkE1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALG3MRlQZtZf44nk2z9Ib0DDDlPAxtgJ6m5pZW6RBQXP0hVCKHgT1VCWQ/py XjoseghJQ7/Y2ixOmXvInJKF7infjOy3a4fKtcgxWqnRChsQ9AjPHZGXlefYZ3rF AUV3RawQJq7d9sNABOXDAmer5+TDYqTAcJ3h5/RCgHADmbU4VXnmmkZBaJ4dLzXy mfMPY7TPd+8WYBd2oPMkH4FeqOuDIqBJs11es4rdmuaLIgAw7izprFVSxm1Pn2hp PbSU4u4UQzxS7mkygX52FK3soVHhqscR37l8vUpsYo0MDvx+/BCEWaEVnkhdv185 kg2OlyjEhYEv/kaQXrZUoBsb0j0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLNHu6a9Eb/F5V9/8zTBZen9IfpcMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kOTEwNjgyNy04NjZlLTRhYzMtOGY3OS1hNmUzMjBiMjBkZTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5MTA2ODI3 LTg2NmUtNGFjMy04Zjc5LWE2ZTMyMGIyMGRlNy8wL0IzNDdCQkE2QkQxMUJGQzVF NTVGN0ZGMzM0QzE2NUU5RkQyMUZBNUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnusowDQYJKoZIhvcNAQELBQADggEBAGsKJXFUEwChW4IYEdQJhenJPA2NxK2K XXjdCD1zA7EJakdbH9X9S0y43PufdrFfxC7+Ojb3yOZBZdBunFroDJZRVHdSGKQb Yfx+ARW3W8Ct+8SAhCWiOhppd2nEBapAbP1P8JzfmXlbdXl130M6FU2qYqZrITcg +ru3YKRK/qwgejTlkYwNBij14v8ezfzHDmR6DJ7Zn5sWM0z9BtYHohby8vO64zof /PPqnSJWw/Id2XWsS8P6Thn0GMLnDZoVx0iCEoXVk9aDp1g/LMSGtszZLZZK/MRN AHNdFaVY8IHD5rF1V+ezCAEaXD33gt6cbxAeW+O3Bzk5CG2I/nHyHys= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:21 2025 by rpki-client on console.sobornost.net