$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer File: BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer (raw, json) Hash identifier: 9Kdozh4i93I5d/m+3YuBtEMBF0g1bt8j/7foifD1IQ0= Subject key identifier: BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 619FB2BBC48A2CB2F9ACF43AB4E33BA012A09CCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft caRepository: rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 10 Oct 2024 18:49:21 +0000 Certificate not after: Thu 09 Oct 2025 18:54:21 +0000 Subordinate resources: IP: 202.80.112.0/20 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:9f:b2:bb:c4:8a:2c:b2:f9:ac:f4:3a:b4:e3:3b:a0:12:a0:9c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 10 18:49:21 2024 GMT Not After : Oct 9 18:54:21 2025 GMT Subject: CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6f:66:16:f5:77:8e:df:42:b5:f8:07:1d:ca: ff:75:9b:c5:57:0c:4a:ec:3a:12:d2:9f:fa:50:5f: 8e:80:59:8e:dc:f4:b1:2e:a9:a3:dc:b1:7d:8a:bb: 74:b1:dc:86:c0:20:af:a8:0f:fa:6e:87:73:78:eb: 4b:20:fb:fe:13:b4:ca:08:90:ad:28:fe:63:94:88: d1:ae:2e:b5:86:6b:f1:5a:a7:96:b0:aa:3e:b1:1e: 2b:df:04:b5:8b:9b:4f:68:b4:07:e5:da:4d:de:b5: ce:98:68:60:0e:57:78:70:cb:8b:56:b8:50:2c:94: 46:bd:e3:94:e5:b9:7b:08:24:3b:0e:7f:2d:51:3a: a7:f4:df:32:81:38:4e:76:59:91:cb:9b:82:da:c1: 62:57:c8:51:f3:7f:88:8f:8b:3b:43:6b:6e:7e:01: b0:7f:bd:22:2a:6e:aa:4c:0e:f0:c7:33:eb:04:fd: 3d:43:19:ba:e7:ea:ab:5f:3d:18:c4:2d:16:ca:3b: 79:3b:c8:a7:a5:80:ce:73:58:ee:ac:8b:c1:2f:ed: 2f:5c:6b:fd:f1:66:b6:b7:3b:c1:dc:7c:26:e4:86: ad:20:e8:60:b3:3b:61:9a:12:c3:a5:74:c9:b5:1c: df:21:46:3d:25:91:1e:8a:77:f5:43:d9:0c:7b:62: f3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.80.112.0/20 Signature Algorithm: sha256WithRSAEncryption 89:ba:7a:0a:fc:13:81:5f:8f:cb:6e:e3:a4:46:9b:62:6f:7a: a7:f9:4d:52:66:de:9a:30:57:22:cb:ea:96:24:11:8d:67:15: 54:80:4e:e9:50:6d:3d:aa:0d:b4:bf:4b:c2:57:4e:3d:93:6b: e5:46:90:30:f3:74:19:92:15:f1:97:16:fa:bf:2f:81:9d:ab: 64:50:15:7f:e4:06:9b:97:bf:5e:4d:ce:97:4f:ef:9d:64:63: ed:92:24:d9:3b:7e:a7:11:2c:31:f3:ef:d8:d1:b3:70:c4:d4: 2d:9f:63:60:44:42:1d:f9:07:cd:c3:3b:d0:67:3c:de:db:72: 55:5a:81:5a:af:71:24:c3:98:54:d1:c5:3d:4f:e9:fb:cd:ef: 2b:bb:ac:74:be:3b:0f:a2:d3:5c:f3:e3:75:7a:58:06:cb:4c: f6:b6:00:49:44:56:15:8a:f4:3a:11:61:47:7d:cb:83:d5:b0: 5a:cf:bc:e0:8d:2a:35:9d:a7:5f:18:1d:6f:e9:f2:18:51:26: 0f:74:16:a1:62:e5:3a:de:83:af:98:bf:bf:dc:fc:37:02:96: 55:ad:65:f8:4d:49:8b:1a:c3:1d:b2:83:02:02:77:a6:6b:ca: 01:65:17:7b:66:f7:26:d5:3e:4a:4b:a5:7d:b8:99:e7:1a:b5: fa:d7:83:13 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUYZ+yu8SKLLL5rPQ6tOM7oBKgnMowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAxMDE4NDkyMVoX DTI1MTAwOTE4NTQyMVowMzExMC8GA1UEAxMoQkU2OUU5RTI5OUNFMkRGRjE3NkM3 RUZBQjE0NTQ0MkQzQzc5MERDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALNvZhb1d47fQrX4Bx3K/3WbxVcMSuw6EtKf+lBfjoBZjtz0sS6po9yxfYq7 dLHchsAgr6gP+m6Hc3jrSyD7/hO0ygiQrSj+Y5SI0a4utYZr8VqnlrCqPrEeK98E tYubT2i0B+XaTd61zphoYA5XeHDLi1a4UCyURr3jlOW5ewgkOw5/LVE6p/TfMoE4 TnZZkcubgtrBYlfIUfN/iI+LO0Nrbn4BsH+9IipuqkwO8Mcz6wT9PUMZuufqq189 GMQtFso7eTvIp6WAznNY7qyLwS/tL1xr/fFmtrc7wdx8JuSGrSDoYLM7YZoSw6V0 ybUc3yFGPSWRHop39UPZDHti8zcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL5p6eKZzi3/F2x++rFFRC08eQ3IMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMzhhMjMxOS1iNGZmLTQ5NzMtOGRhOS1jNDFhZDJmNzMxZjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzOGEyMzE5 LWI0ZmYtNDk3My04ZGE5LWM0MWFkMmY3MzFmMy8wL0JFNjlFOUUyOTlDRTJERkYx NzZDN0VGQUIxNDU0NDJEM0M3OTBEQzgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATKUHAwDQYJKoZIhvcNAQELBQADggEBAIm6egr8E4Ffj8tu46RGm2Jveqf5TVJm 3powVyLL6pYkEY1nFVSATulQbT2qDbS/S8JXTj2Ta+VGkDDzdBmSFfGXFvq/L4Gd q2RQFX/kBpuXv15NzpdP751kY+2SJNk7fqcRLDHz79jRs3DE1C2fY2BEQh35B83D O9BnPN7bclVagVqvcSTDmFTRxT1P6fvN7yu7rHS+Ow+i01zz43V6WAbLTPa2AElE VhWK9DoRYUd9y4PVsFrPvOCNKjWdp18YHW/p8hhRJg90FqFi5Treg6+Yv7/c/DcC llWtZfhNSYsawx2ygwICd6ZrygFlF3tm9ybVPkpLpX24mecatfrXgxM= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:21 2025 by rpki-client on console.sobornost.net