$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer File: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer (raw, json) Hash identifier: RsMhq/xeaKXhXJ9421xMynDr8VnFll3d25zD4x6WG9E= Subject key identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0E0F90248281FEEC234C863FFAC7AFFCAB110194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft caRepository: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 25 Dec 2024 13:17:57 +0000 Certificate not after: Wed 24 Dec 2025 13:22:57 +0000 Subordinate resources: IP: 121.50.128.0/20 IP: 202.50.200.0/22 IP: 203.190.184.0/21 IP: 2400:c900::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:0f:90:24:82:81:fe:ec:23:4c:86:3f:fa:c7:af:fc:ab:11:01:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 25 13:17:57 2024 GMT Not After : Dec 24 13:22:57 2025 GMT Subject: CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3c:ac:84:81:b0:86:c4:c1:84:b7:9e:30:b4: 5a:4c:b2:64:8d:a3:fc:40:19:da:89:d5:e0:a6:44: 23:84:86:0d:29:e5:94:81:ca:99:d0:79:93:04:de: ed:5c:21:9c:16:ea:b7:2a:be:b8:31:4f:0e:05:82: 12:8e:e7:15:e4:06:b4:3c:85:5a:96:f2:b6:a6:70: 66:f3:d5:e1:6b:c4:42:4c:65:9d:8d:53:52:9f:fb: 05:f5:43:21:de:bb:ae:17:86:b4:25:2f:6d:6d:64: 71:32:a1:09:b4:e0:8a:09:c5:d3:fa:ed:92:57:7f: 62:70:31:ef:7e:04:07:93:04:01:1e:be:a8:69:24: 88:1c:c5:c7:30:5b:23:39:e9:89:f3:25:59:86:f9: f9:4a:06:c2:ac:6f:25:03:e7:a8:a1:5e:88:f2:0c: 2e:d1:f6:6a:d0:8c:a3:fc:d6:72:f2:78:95:f6:f2: 32:5e:4c:3b:35:44:e5:62:0f:e3:2b:0e:33:7b:6c: f9:1b:3f:14:e6:99:55:26:26:73:b1:1f:5d:e7:51: 16:ec:ae:92:3e:f4:2e:b2:02:fc:b1:bf:83:b3:5b: 5a:84:55:d3:59:48:05:bc:75:dd:f7:68:dc:80:f3: a4:b1:9e:86:75:a5:b0:73:4d:16:46:19:11:2f:d8: 8b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.50.128.0/20 202.50.200.0/22 203.190.184.0/21 IPv6: 2400:c900::/32 Signature Algorithm: sha256WithRSAEncryption 37:c2:8e:84:03:79:bc:25:30:c6:ea:db:9f:02:49:04:fa:d0: f4:fb:43:b6:7a:54:b0:17:4f:aa:e9:20:8d:14:26:d8:9f:b6: be:08:a8:72:af:69:19:65:d2:07:8e:14:c2:a0:ba:6b:77:74: a5:94:90:d0:3c:2c:85:f9:e5:14:79:39:7c:55:5a:04:06:7f: 8d:06:5e:7c:b7:3c:0c:c6:ff:0d:38:f8:2d:8c:08:bc:6a:5e: be:6c:ba:d3:0f:ab:ef:57:73:c5:28:7b:68:ea:32:52:b0:7f: 3a:dc:07:de:01:ed:b8:b2:f0:5e:e0:9e:9a:21:61:38:ec:00: f5:f1:1d:fe:59:a3:e5:44:64:bc:d2:f0:82:5d:fd:92:a8:33: f1:73:e7:ee:32:e4:1f:f4:27:b6:59:a8:2c:7f:b0:43:3e:a8: 92:5e:33:0c:b3:54:fb:18:b6:b5:dc:22:bf:9e:89:ff:6e:84: bf:d3:a1:92:82:3f:67:e7:54:b2:85:84:75:93:fb:18:9f:f7: fd:9c:f6:7b:80:fb:b2:2e:67:cb:2e:42:95:68:12:00:ec:b9: 2a:c2:53:77:1c:cd:3a:b4:2a:36:9d:ae:0f:d8:9f:bb:e6:4f: 6e:4d:35:52:5f:0d:ac:0d:42:f4:ba:0b:a4:59:a6:83:73:73: a1:44:2b:80 -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUDg+QJIKB/uwjTIY/+sev/KsRAZQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIyNTEzMTc1N1oX DTI1MTIyNDEzMjI1N1owMzExMC8GA1UEAxMoQjNGMURBQTY3NzA5QTA2NTYxREM5 RUFDNUE4NzIxMDM1RUVBQUI1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ08rISBsIbEwYS3njC0WkyyZI2j/EAZ2onV4KZEI4SGDSnllIHKmdB5kwTe 7VwhnBbqtyq+uDFPDgWCEo7nFeQGtDyFWpbytqZwZvPV4WvEQkxlnY1TUp/7BfVD Id67rheGtCUvbW1kcTKhCbTgignF0/rtkld/YnAx734EB5MEAR6+qGkkiBzFxzBb IznpifMlWYb5+UoGwqxvJQPnqKFeiPIMLtH2atCMo/zWcvJ4lfbyMl5MOzVE5WIP 4ysOM3ts+Rs/FOaZVSYmc7EfXedRFuyukj70LrIC/LG/g7NbWoRV01lIBbx13fdo 3IDzpLGehnWlsHNNFkYZES/Yi00CAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLPx2qZ3CaBlYdyerFqHIQNe6qtbMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81Mjg4MGRlZS03YWEyLTRiZTQtYmYzNS1jZGJkMTFkNzk1MDcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyODgwZGVl LTdhYTItNGJlNC1iZjM1LWNkYmQxMWQ3OTUwNy8wL0IzRjFEQUE2NzcwOUEwNjU2 MURDOUVBQzVBODcyMTAzNUVFQUFCNUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BAR5MoADBALKMsgDBAPLvrgwDQQCAAIwBwMFACQAyQAwDQYJKoZIhvcNAQELBQAD ggEBADfCjoQDebwlMMbq258CSQT60PT7Q7Z6VLAXT6rpII0UJtiftr4IqHKvaRll 0geOFMKgumt3dKWUkNA8LIX55RR5OXxVWgQGf40GXny3PAzG/w04+C2MCLxqXr5s utMPq+9Xc8Uoe2jqMlKwfzrcB94B7biy8F7gnpohYTjsAPXxHf5Zo+VEZLzS8IJd /ZKoM/Fz5+4y5B/0J7ZZqCx/sEM+qJJeMwyzVPsYtrXcIr+eif9uhL/ToZKCP2fn VLKFhHWT+xif9/2c9nuA+7IuZ8suQpVoEgDsuSrCU3cczTq0Kjadrg/Yn7vmT25N NVJfDawNQvS6C6RZpoNzc6FEK4A= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:21 2025 by rpki-client on console.sobornost.net