$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer File: B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer (raw, json) Hash identifier: uErx6/kA1+oxIbDStCCqf6ePHh/Hanus5yxbVwohZ7k= Subject key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6BA7DB89BB2679D56C74BCE43A40F73978B18A12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft caRepository: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 11 Feb 2025 23:47:10 +0000 Certificate not after: Tue 10 Feb 2026 23:52:10 +0000 Subordinate resources: AS: 59153 IP: 103.253.212.0/22 IP: 202.10.32.0/20 IP: 2001:df1:7800::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 05:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a7:db:89:bb:26:79:d5:6c:74:bc:e4:3a:40:f7:39:78:b1:8a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 11 23:47:10 2025 GMT Not After : Feb 10 23:52:10 2026 GMT Subject: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:33:fe:91:78:fe:87:f0:5a:30:67:6b:5d:7d: da:30:18:76:a7:98:15:3d:be:47:a8:a4:4c:b9:fc: 83:85:03:b7:8d:a4:94:60:e3:51:e4:0d:40:93:c4: 75:fb:0e:2b:26:53:c0:1d:e4:33:28:4f:2a:88:00: cd:09:24:2e:50:2c:cb:94:2a:fd:ef:a1:9e:93:82: 23:12:22:69:10:a9:1c:0f:29:46:1c:7e:2f:80:8f: c0:88:16:82:40:b1:36:35:28:da:eb:74:cf:65:fd: c4:2b:12:3c:50:1e:0a:9f:f2:44:cc:6a:82:24:51: 9c:c9:29:db:fc:d4:9d:ca:25:91:fe:8c:4d:bc:56: 40:04:6c:5e:82:7b:71:0a:39:ab:80:21:38:67:14: ac:e5:df:70:74:2d:70:f5:96:39:22:59:2b:08:5d: ce:94:d3:46:c6:7e:a4:77:d9:d8:d9:7f:7a:cd:51: bb:72:15:3b:85:44:a5:6f:67:47:3f:7f:df:35:c9: 0d:5b:e1:b0:54:26:4f:3b:47:6d:88:4a:38:f0:45: 16:f9:5e:e7:d2:f1:c3:76:64:8c:4d:d2:82:f0:70: 54:8a:49:00:67:c3:be:37:2e:56:63:60:69:ed:40: 06:c0:0c:e5:c9:44:58:4d:0f:7a:1e:93:1f:70:e2: 2d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.253.212.0/22 202.10.32.0/20 IPv6: 2001:df1:7800::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59153 Signature Algorithm: sha256WithRSAEncryption 01:86:3a:aa:fc:2d:7b:1b:dc:96:c4:50:2e:26:ea:af:53:b3: b2:25:25:00:09:c5:b0:d9:1e:bd:4b:a4:6c:e2:1b:f2:be:a9: 1d:e9:f1:e4:81:32:18:79:57:4a:c9:2f:c8:0d:d0:db:ee:1a: 49:d0:43:6d:01:3b:e4:09:9c:ce:08:ee:ae:ad:78:8a:06:41: c8:e0:07:e9:88:f7:ab:8a:83:5b:33:5a:cf:59:88:87:3e:cc: 3c:d3:0e:aa:00:2b:70:46:e8:d2:06:d7:40:70:c0:6d:c7:fa: ff:30:99:39:40:39:41:b8:1d:ef:ba:29:11:19:22:cc:f4:87: bc:c8:80:26:e1:02:83:43:81:15:0b:98:fb:8b:ca:2c:98:80: e2:8f:e4:d1:61:be:79:f9:d4:cd:54:0e:57:fb:fe:5c:10:d3: 7b:cb:b3:49:72:e5:8e:61:97:c6:8b:ef:ed:db:01:ab:08:e0: c9:83:8c:e2:85:27:fe:c2:f6:1c:54:c5:eb:5d:3c:5d:f7:ac: a1:51:25:4d:d6:84:91:6f:a8:f3:72:3d:4c:c1:fe:7f:db:8c: 07:26:6d:00:e9:eb:13:d7:8d:d9:08:85:d3:ab:d0:e5:66:b1: 44:5f:45:d6:24:39:54:5a:ba:d1:25:9e:f8:4b:b2:c8:b1:a6: ff:6f:8a:5d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa6fbibsmedVsdLzkOkD3OXixihIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIxMTIzNDcxMFoX DTI2MDIxMDIzNTIxMFowMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2 QzJDMEIyOTdBMTA5MkFBQkU2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANQz/pF4/ofwWjBna1192jAYdqeYFT2+R6ikTLn8g4UDt42klGDjUeQNQJPE dfsOKyZTwB3kMyhPKogAzQkkLlAsy5Qq/e+hnpOCIxIiaRCpHA8pRhx+L4CPwIgW gkCxNjUo2ut0z2X9xCsSPFAeCp/yRMxqgiRRnMkp2/zUncolkf6MTbxWQARsXoJ7 cQo5q4AhOGcUrOXfcHQtcPWWOSJZKwhdzpTTRsZ+pHfZ2Nl/es1Ru3IVO4VEpW9n Rz9/3zXJDVvhsFQmTztHbYhKOPBFFvle59Lxw3ZkjE3SgvBwVIpJAGfDvjcuVmNg ae1ABsAM5clEWE0Peh6TH3DiLRkCAwEAAaOCAuswggLnMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLbxMiMhQS79BBpsLAspehCSqr5uMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBm LWU0YjMtNGE0ZS05N2ZkLWY2MWFiMTdkZWVlZC8wL0I2RjEzMjIzMjE0MTJFRkQw NDFBNkMyQzBCMjk3QTEwOTJBQUJFNkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BAJn/dQDBATKCiAwDwQCAAIwCQMHACABDfF4ADAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMA5xEwDQYJKoZIhvcNAQELBQADggEBAAGGOqr8LXsb3JbEUC4m6q9Ts7Il JQAJxbDZHr1LpGziG/K+qR3p8eSBMhh5V0rJL8gN0NvuGknQQ20BO+QJnM4I7q6t eIoGQcjgB+mI96uKg1szWs9ZiIc+zDzTDqoAK3BG6NIG10BwwG3H+v8wmTlAOUG4 He+6KREZIsz0h7zIgCbhAoNDgRULmPuLyiyYgOKP5NFhvnn51M1UDlf7/lwQ03vL s0ly5Y5hl8aL7+3bAasI4MmDjOKFJ/7C9hxUxetdPF33rKFRJU3WhJFvqPNyPUzB /n/bjAcmbQDp6xPXjdkIhdOr0OVmsURfRdYkOVRautElnvhLssixpv9vil0= -----END CERTIFICATE-----Generated at Sun Apr 27 05:33:04 2025 by rpki-client on console.sobornost.net