$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer File: C45A558750D6CF5BE02532DDE80326AEF5012912.cer (raw, json) Hash identifier: RpOxHgN+Yl/rWPWbe8Wi+QGMlInLTBW57WYsPskZx5M= Subject key identifier: C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 63A766D46AFCA2B018E482313727A7F219C7A3A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft caRepository: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 06 Apr 2025 16:17:42 +0000 Certificate not after: Sun 05 Apr 2026 16:22:42 +0000 Subordinate resources: IP: 103.170.115.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a7:66:d4:6a:fc:a2:b0:18:e4:82:31:37:27:a7:f2:19:c7:a3:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 6 16:17:42 2025 GMT Not After : Apr 5 16:22:42 2026 GMT Subject: CN=C45A558750D6CF5BE02532DDE80326AEF5012912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d1:a4:2d:5a:02:87:31:85:9a:64:6a:74:4e: 54:1f:4f:78:62:57:d0:63:66:55:e4:6f:d0:1a:34: 79:a2:57:96:15:27:ef:3f:84:d7:69:5d:30:61:40: c9:29:79:a1:15:25:59:3c:15:36:fc:f4:8d:b9:bd: 7f:39:98:9b:49:1e:ed:ab:9f:5d:3c:9d:af:94:61: e7:9f:fa:1f:b5:04:7a:89:dd:9b:83:43:1d:39:7f: ba:7d:09:83:99:7f:20:b5:c0:65:0a:9e:dd:ce:04: 25:8e:d4:7f:07:75:bb:b0:2c:50:21:a6:bc:c3:cf: a6:ac:cb:51:ec:86:13:8a:56:2a:47:3a:5c:6f:0c: b0:ea:f9:d8:ad:e1:cc:3a:1f:7e:8d:1c:c2:e3:6b: fa:ed:07:16:07:56:24:7d:55:57:07:5a:e6:1e:c1: 2c:fb:b3:bf:db:ad:73:cd:c5:b0:b5:29:92:e7:13: 84:4c:51:42:82:c6:af:52:2f:3c:3d:1a:b4:29:5f: bc:95:e9:f2:7a:7d:57:95:80:1d:8b:43:c0:b0:86: b2:06:e9:6a:63:4d:46:72:5b:c1:72:be:11:36:10: 1e:b6:20:49:05:8d:21:95:7d:76:23:bf:88:33:52: 0b:bc:67:bc:94:6e:e6:87:45:e9:bb:bd:62:5a:68: db:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.115.0/24 Signature Algorithm: sha256WithRSAEncryption 31:96:0f:5c:4a:15:16:5f:1f:a6:ab:6e:dc:b9:b4:cc:82:66: 2b:e0:1f:42:8f:cb:4f:2c:1f:1b:29:d4:c7:9d:e1:83:86:04: c3:81:cd:b0:bc:f0:cb:de:0b:fb:2a:8c:9c:a6:16:50:b6:d4: eb:8b:fb:ea:c8:5f:44:40:59:2d:9e:7f:67:73:d8:8e:91:3f: 17:0f:ef:a2:30:33:04:89:58:70:c2:d4:10:2f:b1:5c:1b:28: 7b:ad:4d:ad:56:48:ad:c5:95:05:f1:c4:66:3d:40:f4:4f:41: e1:3c:b5:04:67:da:3c:0d:07:7e:32:02:33:53:18:41:b3:6f: 34:f6:9a:dd:cd:6a:31:67:fe:17:6f:f8:80:c4:02:2f:96:64: ba:61:0b:12:ed:80:f9:08:5f:ec:c0:a7:8e:c2:15:4c:1b:43: 2c:28:4a:6a:e4:35:0b:d8:14:24:6b:e9:1f:b9:65:cd:72:f8: d3:96:7c:d2:ff:91:01:6a:27:d4:b2:94:10:cd:b5:49:4e:cd: 78:8a:96:63:80:ac:bb:fd:e9:45:17:25:45:6e:2c:f2:2a:c9: 52:10:00:f4:4d:69:1e:31:2b:13:45:b8:b1:d7:2c:64:0a:72: 1d:4e:e5:47:08:7a:b6:d2:04:5f:a6:bb:58:0f:d6:48:bc:fd: b1:ff:0a:b9 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUY6dm1Gr8orAY5IIxNyen8hnHo6IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQwNjE2MTc0MloX DTI2MDQwNTE2MjI0MlowMzExMC8GA1UEAxMoQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUz MkRERTgwMzI2QUVGNTAxMjkxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMfRpC1aAocxhZpkanROVB9PeGJX0GNmVeRv0Bo0eaJXlhUn7z+E12ldMGFA ySl5oRUlWTwVNvz0jbm9fzmYm0ke7aufXTydr5Rh55/6H7UEeondm4NDHTl/un0J g5l/ILXAZQqe3c4EJY7Ufwd1u7AsUCGmvMPPpqzLUeyGE4pWKkc6XG8MsOr52K3h zDoffo0cwuNr+u0HFgdWJH1VVwda5h7BLPuzv9utc83FsLUpkucThExRQoLGr1Iv PD0atClfvJXp8np9V5WAHYtDwLCGsgbpamNNRnJbwXK+ETYQHrYgSQWNIZV9diO/ iDNSC7xnvJRu5odF6bu9Ylpo29kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMRaVYdQ1s9b4CUy3egDJq71ASkSMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jMWJjM2YyOS02ZjlkLTQ3ZDMtOWU3Ny1jMjg5ZTVmZWU3OGUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MxYmMzZjI5 LTZmOWQtNDdkMy05ZTc3LWMyODllNWZlZTc4ZS8wL0M0NUE1NTg3NTBENkNGNUJF MDI1MzJEREU4MDMyNkFFRjUwMTI5MTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnqnMwDQYJKoZIhvcNAQELBQADggEBADGWD1xKFRZfH6arbty5tMyCZivgH0KP y08sHxsp1Med4YOGBMOBzbC88MveC/sqjJymFlC21OuL++rIX0RAWS2ef2dz2I6R PxcP76IwMwSJWHDC1BAvsVwbKHutTa1WSK3FlQXxxGY9QPRPQeE8tQRn2jwNB34y AjNTGEGzbzT2mt3NajFn/hdv+IDEAi+WZLphCxLtgPkIX+zAp47CFUwbQywoSmrk NQvYFCRr6R+5Zc1y+NOWfNL/kQFqJ9SylBDNtUlOzXiKlmOArLv96UUXJUVuLPIq yVIQAPRNaR4xKxNFuLHXLGQKch1O5UcIerbSBF+mu1gP1ki8/bH/Crk= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:22 2025 by rpki-client on console.sobornost.net