$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer File: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer (raw, json) Hash identifier: 2W0FFZKfSool2/TuAdhACE9ja/gr2OAwKT+KU4PBpU8= Subject key identifier: B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7EFFCD493485BC1600FA51D05B9134B77E98AA8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft caRepository: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 02 Dec 2024 07:43:49 +0000 Certificate not after: Mon 01 Dec 2025 07:48:49 +0000 Subordinate resources: IP: 2001:df4:64c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ff:cd:49:34:85:bc:16:00:fa:51:d0:5b:91:34:b7:7e:98:aa:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 2 07:43:49 2024 GMT Not After : Dec 1 07:48:49 2025 GMT Subject: CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8f:6b:25:1d:73:6e:a5:dd:3b:ae:84:19:15: 0d:e9:64:bb:6b:d7:04:34:69:6f:b3:ca:ff:b2:a2: 55:23:62:7a:40:12:6a:91:20:08:db:23:de:07:bf: 33:c5:b4:00:35:83:f4:04:ef:03:e6:9a:c7:98:e3: b1:ee:fb:1e:4b:18:f2:cc:09:73:fc:91:b6:da:b9: 5a:ba:19:04:cc:24:1a:67:34:19:23:35:fc:32:b5: 39:bc:d4:c9:7a:ae:83:bf:0e:e7:75:f0:a2:e6:12: ee:10:63:80:7a:75:90:7a:b6:59:fe:02:c6:0d:e6: e7:2c:0d:8a:d2:15:7f:ce:35:c6:e7:b6:59:84:10: 71:5c:a6:b5:59:37:a8:2d:e2:fd:e9:77:6e:5f:3d: 53:84:47:57:47:77:2c:80:61:12:af:19:c1:f6:49: b5:69:02:05:ad:1f:af:b4:46:3d:78:bd:16:d8:fa: 6e:7d:6e:cd:c9:f0:8c:9f:c5:10:f8:46:0f:40:b0: aa:da:da:20:b8:12:7a:29:2b:0f:a6:a6:f1:82:ad: 22:9e:39:9f:ac:30:65:8f:2a:31:e3:d8:b5:5e:67: b7:8e:f0:53:ef:63:77:e6:d2:85:a9:8c:0a:6d:c2: 91:cb:47:5a:a2:3c:c3:80:8f:e7:ef:8d:50:8a:e6: 43:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:64c0::/48 Signature Algorithm: sha256WithRSAEncryption 27:9f:20:c3:dc:8d:17:51:0d:7b:40:0c:86:10:55:df:99:50: 44:ea:d9:dc:9d:52:96:76:a9:62:ba:3a:9c:11:92:65:dc:de: 30:1d:00:64:40:d2:4e:f1:ed:e2:51:2c:30:b3:38:d6:40:ee: c1:40:ec:e6:f8:34:f4:4a:5e:82:4a:6f:1d:d4:3c:47:38:b5: cb:63:be:4f:b7:bb:0f:e8:14:3d:14:26:d8:61:45:4b:dc:22: b4:ed:eb:2d:3a:64:cd:58:1d:6b:6d:4f:5b:21:a6:c7:3c:3e: fb:87:78:d2:a2:f5:0c:86:f2:ca:c2:db:c1:1f:76:89:6d:13: e2:06:19:84:2a:33:28:f4:5c:c5:80:9d:77:0e:7d:c7:97:e1: 4c:d8:04:2f:89:9b:ea:50:16:9d:92:26:61:b2:41:d8:2c:e0: 23:0c:66:f3:07:79:37:e2:cd:7a:07:17:b6:91:30:f2:8e:bf: 06:59:a5:59:cb:29:c7:19:a1:42:20:4c:4f:09:15:9e:4f:7f: af:d4:44:2e:2d:d4:f5:b2:d5:b5:ad:9f:f5:3b:e3:a1:34:9d: 88:5f:93:bf:a5:f6:3b:50:85:d7:5a:c6:81:b2:04:57:59:70: e9:95:6f:57:35:aa:30:e9:53:58:8c:d9:6c:29:2c:99:82:2f: 5c:49:d7:5e -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUfv/NSTSFvBYA+lHQW5E0t36YqoowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIwMjA3NDM0OVoX DTI1MTIwMTA3NDg0OVowMzExMC8GA1UEAxMoQjkyRjBGQjNFMTQxRDUyRUQyQTcx RkE0ODNFRDNDNkQ3MjNGNjBFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANSPayUdc26l3TuuhBkVDelku2vXBDRpb7PK/7KiVSNiekASapEgCNsj3ge/ M8W0ADWD9ATvA+aax5jjse77HksY8swJc/yRttq5WroZBMwkGmc0GSM1/DK1ObzU yXqug78O53XwouYS7hBjgHp1kHq2Wf4Cxg3m5ywNitIVf841xue2WYQQcVymtVk3 qC3i/el3bl89U4RHV0d3LIBhEq8ZwfZJtWkCBa0fr7RGPXi9Ftj6bn1uzcnwjJ/F EPhGD0CwqtraILgSeikrD6am8YKtIp45n6wwZY8qMePYtV5nt47wU+9jd+bShamM Cm3CkctHWqI8w4CP5++NUIrmQ+ECAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLkvD7PhQdUu0qcfpIPtPG1yP2DiMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jYWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhZmNiZmJi LWJhM2YtNGQ1My1hMDRmLTE0ZDZmNGJlMGNiMS8xL0I5MkYwRkIzRTE0MUQ1MkVE MkE3MUZBNDgzRUQzQzZENzIzRjYwRTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ30ZMAwDQYJKoZIhvcNAQELBQADggEBACefIMPcjRdRDXtADIYQVd+ZUETq 2dydUpZ2qWK6OpwRkmXc3jAdAGRA0k7x7eJRLDCzONZA7sFA7Ob4NPRKXoJKbx3U PEc4tctjvk+3uw/oFD0UJthhRUvcIrTt6y06ZM1YHWttT1shpsc8PvuHeNKi9QyG 8srC28EfdoltE+IGGYQqMyj0XMWAnXcOfceX4UzYBC+Jm+pQFp2SJmGyQdgs4CMM ZvMHeTfizXoHF7aRMPKOvwZZpVnLKccZoUIgTE8JFZ5Pf6/URC4t1PWy1bWtn/U7 46E0nYhfk7+l9jtQhddaxoGyBFdZcOmVb1c1qjDpU1iM2WwpLJmCL1xJ114= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:21 2025 by rpki-client on console.sobornost.net