$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer File: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer (raw, json) Hash identifier: af0yVUa+psU24hwcG02ey3ZhOnrYJwOI6tYRM78dFUY= Subject key identifier: C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1852A337F693CCA45722DD4D5346E8E080139365 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft caRepository: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 18 Dec 2024 23:05:50 +0000 Certificate not after: Wed 17 Dec 2025 23:10:50 +0000 Subordinate resources: IP: 203.14.18.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:52:a3:37:f6:93:cc:a4:57:22:dd:4d:53:46:e8:e0:80:13:93:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 18 23:05:50 2024 GMT Not After : Dec 17 23:10:50 2025 GMT Subject: CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:86:28:d6:88:4c:af:d5:89:59:ec:d6:0c:88: 3d:e6:d6:1d:de:ee:16:80:35:d9:ab:1d:c5:bf:c7: d6:a7:36:fd:02:fd:ae:fb:87:2a:f6:ea:34:85:4e: 57:00:85:44:0e:a3:59:8f:d9:96:4d:dd:97:57:dd: 29:15:0d:73:c6:be:57:ef:f1:5d:2a:6b:a1:f6:a1: 53:c3:aa:a2:5b:75:15:22:84:b7:30:0b:23:f9:85: 1e:7e:27:17:4e:05:9d:6d:ac:da:d6:17:57:13:7e: 1e:cf:ba:31:f5:29:67:26:8b:2d:84:12:4b:51:04: b8:ce:22:91:a5:45:ac:19:a6:44:5d:80:48:4a:0b: 95:db:09:84:70:42:a9:ac:56:e3:17:da:83:dd:f2: 5b:d3:1c:b8:b8:d9:45:15:6d:16:cb:2f:0e:8e:5d: 5a:c5:2b:75:8b:41:d9:d4:79:18:10:9c:14:0c:35: f0:dc:69:65:82:a4:98:9e:44:05:c8:02:70:f9:da: a6:6c:35:cf:15:70:84:e4:8a:99:b8:d2:de:b4:d9: 41:fd:3a:b6:0a:91:d3:0d:5e:f7:9a:bb:aa:04:61: 08:15:53:12:b0:98:c0:8d:b9:6a:7b:d8:08:52:03: 42:09:07:2d:c2:dd:29:9a:ef:6f:fe:e2:ac:b9:71: df:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.14.18.0/24 Signature Algorithm: sha256WithRSAEncryption 48:6a:27:0a:51:7b:00:fc:92:c7:85:91:f4:da:6d:a3:b6:dc: 81:93:00:3d:fe:a6:1f:9f:d9:9f:60:ea:71:37:42:d3:f7:82: 3b:f4:01:b2:fc:42:e5:93:b4:6f:b2:2e:09:2c:41:a6:c4:79: 37:96:de:58:69:1d:cc:ec:66:d4:c4:bc:5e:c6:03:df:fb:79: 37:af:12:23:43:d0:98:66:7d:81:1d:0b:8f:c5:cb:80:ae:e3: c8:d0:3a:c1:f7:28:6c:72:d5:8a:0e:37:d6:dd:64:d0:0b:8e: aa:bb:c3:83:0e:5c:22:1e:9a:74:b5:34:be:f5:4f:c4:fd:b1: 1c:b9:a9:ea:dc:c3:e0:62:31:8a:7c:9a:07:ab:b5:84:cc:33: ca:97:7a:79:cf:e9:a0:cc:31:b7:4f:10:c3:da:b1:71:b5:5d: 55:a3:5d:35:ee:52:86:0b:47:46:60:33:ad:c9:b7:c2:8e:7d: 85:5a:3d:f0:61:45:bb:ed:8f:cf:fe:66:8d:61:77:0f:11:ad: 7a:a9:d4:3c:ab:07:cc:5f:ac:b6:c3:8c:e4:c4:06:e9:cb:d4: 30:29:83:6f:c0:9e:83:22:8e:39:24:80:45:45:4d:85:d8:54: 5e:07:76:4e:c9:8c:75:32:93:ce:b1:05:49:d8:69:fe:c9:e9: 35:05:99:d5 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUGFKjN/aTzKRXIt1NU0bo4IATk2UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxODIzMDU1MFoX DTI1MTIxNzIzMTA1MFowMzExMC8GA1UEAxMoQzM1RUQ4NUIzNkY1RDUxOUQyQ0Qx RDQ3NEJFNTFDMTNGNDlBN0U0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKWGKNaITK/ViVns1gyIPebWHd7uFoA12asdxb/H1qc2/QL9rvuHKvbqNIVO VwCFRA6jWY/Zlk3dl1fdKRUNc8a+V+/xXSprofahU8Oqolt1FSKEtzALI/mFHn4n F04FnW2s2tYXVxN+Hs+6MfUpZyaLLYQSS1EEuM4ikaVFrBmmRF2ASEoLldsJhHBC qaxW4xfag93yW9McuLjZRRVtFssvDo5dWsUrdYtB2dR5GBCcFAw18NxpZYKkmJ5E BcgCcPnapmw1zxVwhOSKmbjS3rTZQf06tgqR0w1e95q7qgRhCBVTErCYwI25anvY CFIDQgkHLcLdKZrvb/7irLlx30kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMNe2Fs29dUZ0s0dR0vlHBP0mn5HMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85NTM2NjZlMS0xZTQxLTQyZWQtYWJiYy1hOGMwODdmM2YzMzkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1MzY2NmUx LTFlNDEtNDJlZC1hYmJjLWE4YzA4N2YzZjMzOS8wL0MzNUVEODVCMzZGNUQ1MTlE MkNEMUQ0NzRCRTUxQzEzRjQ5QTdFNDcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADLDhIwDQYJKoZIhvcNAQELBQADggEBAEhqJwpRewD8kseFkfTabaO23IGTAD3+ ph+f2Z9g6nE3QtP3gjv0AbL8QuWTtG+yLgksQabEeTeW3lhpHczsZtTEvF7GA9/7 eTevEiND0JhmfYEdC4/Fy4Cu48jQOsH3KGxy1YoON9bdZNALjqq7w4MOXCIemnS1 NL71T8T9sRy5qercw+BiMYp8mgertYTMM8qXennP6aDMMbdPEMPasXG1XVWjXTXu UoYLR0ZgM63Jt8KOfYVaPfBhRbvtj8/+Zo1hdw8RrXqp1DyrB8xfrLbDjOTEBunL 1DApg2/AnoMijjkkgEVFTYXYVF4Hdk7JjHUyk86xBUnYaf7J6TUFmdU= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:22 2025 by rpki-client on console.sobornost.net