$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer File: CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer (raw, json) Hash identifier: 7ik/opBjoo5vqNDS7OfZj8OdO5yAxeJLcA6WUk/qNWk= Subject key identifier: CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 53F1D8701CF90B4143C1C43D1D63F02C7C1BD6D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft caRepository: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 23:55:49 +0000 Certificate not after: Sat 07 Mar 2026 00:00:49 +0000 Subordinate resources: IP: 103.132.40.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f1:d8:70:1c:f9:0b:41:43:c1:c4:3d:1d:63:f0:2c:7c:1b:d6:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 7 23:55:49 2025 GMT Not After : Mar 7 00:00:49 2026 GMT Subject: CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:19:55:fa:3f:59:ef:6b:f4:58:19:7d:aa:00: 84:00:1f:bc:29:64:fc:82:4c:a8:43:5e:3c:70:fc: 6f:ee:5e:72:c8:52:fc:06:3e:f5:36:d4:fa:95:be: f7:52:f7:c3:a0:0e:8f:06:af:94:c4:b9:58:14:e1: 15:12:f8:8f:88:33:91:21:53:b3:fe:a4:41:2e:c2: 4c:b3:d0:98:0b:df:cb:08:0f:57:d8:05:6e:86:b3: 65:e5:4e:96:db:15:f0:92:1a:4d:be:99:d1:01:1f: 89:3f:cb:a7:a1:5e:b6:08:42:6c:23:20:64:e2:41: 9c:db:67:78:90:9b:b6:50:bc:0a:d5:62:78:88:54: f0:f2:d3:9b:11:94:f2:19:89:db:5e:b8:ca:d0:88: 1f:f7:62:52:f7:c8:50:c8:2b:b5:b6:f1:c2:d9:d8: 05:12:04:66:66:da:c5:5e:80:b8:26:be:8b:2a:e1: 93:5c:0d:ff:f5:e9:e0:b8:13:08:1b:b3:4e:f8:8b: a6:f4:04:2c:d7:fc:95:80:e6:d5:e1:11:39:9c:aa: 1c:8b:50:da:52:78:9d:09:e5:e9:6b:1a:b0:4d:3d: 42:dc:f9:29:fd:a1:1b:1f:b7:63:c6:20:cd:22:dd: 0b:5e:8d:7f:14:71:18:b6:4b:12:1e:87:3f:9a:b9: 16:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.132.40.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:25:9a:a6:6b:3a:22:15:9d:20:1a:93:35:bf:a7:bc:3b:06: 6c:2c:45:60:3a:11:89:db:e4:11:1b:2f:5f:e3:76:34:df:75: bd:3a:fe:88:49:47:36:d4:ab:0e:4a:19:de:1d:2d:82:0a:30: 1b:91:60:01:7b:1b:50:60:0e:78:a2:6b:f9:03:01:bf:34:0f: 85:11:c4:99:a4:8d:76:68:c1:b8:70:aa:a5:dc:8e:9a:2e:4c: 7a:0e:1c:07:c6:52:3b:a1:fc:db:25:e0:74:8e:0a:f3:5f:04: f4:d4:78:c6:2a:50:b0:a7:0c:19:51:3c:be:95:06:ed:58:3e: bc:9c:52:9b:5e:c9:52:b7:97:50:f8:6d:c4:e7:b5:0f:10:9f: 32:cd:fb:6c:0b:33:69:af:18:27:b7:9a:f6:47:8d:67:77:03: 11:55:ec:77:d3:43:fe:80:f9:53:35:1b:84:17:21:ab:81:11: e7:a8:46:b9:49:af:39:d5:8b:55:dd:0c:6e:96:db:21:b7:3b: af:5f:2b:5d:d0:3b:16:a5:f4:0c:0f:73:b8:e2:79:2c:f9:e0: d0:5b:29:82:86:79:08:b0:9f:34:83:b3:91:d6:b6:ef:d0:1c: 9d:10:51:97:4e:e1:b2:68:1f:fa:8f:d4:b9:ab:cc:08:49:83: a2:0b:f3:9e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUU/HYcBz5C0FDwcQ9HWPwLHwb1tQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMwNzIzNTU0OVoX DTI2MDMwNzAwMDA0OVowMzExMC8GA1UEAxMoQ0I5NjYyNzMzMTUzQzAyRTRDNDEx QjdEMkYyQjlFMjJEMkYwRUI4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMEZVfo/We9r9FgZfaoAhAAfvClk/IJMqENePHD8b+5ecshS/AY+9TbU+pW+ 91L3w6AOjwavlMS5WBThFRL4j4gzkSFTs/6kQS7CTLPQmAvfywgPV9gFboazZeVO ltsV8JIaTb6Z0QEfiT/Lp6FetghCbCMgZOJBnNtneJCbtlC8CtVieIhU8PLTmxGU 8hmJ2164ytCIH/diUvfIUMgrtbbxwtnYBRIEZmbaxV6AuCa+iyrhk1wN//Xp4LgT CBuzTviLpvQELNf8lYDm1eEROZyqHItQ2lJ4nQnl6WsasE09Qtz5Kf2hGx+3Y8Yg zSLdC16NfxRxGLZLEh6HP5q5FkkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMuWYnMxU8AuTEEbfS8rniLS8OuFMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZGYyZmZkYS0wNWQxLTQwODUtYTEzNS0wMzk4N2EwN2YzOWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RkZjJmZmRh LTA1ZDEtNDA4NS1hMTM1LTAzOTg3YTA3ZjM5ZS8wL0NCOTY2MjczMzE1M0MwMkU0 QzQxMUI3RDJGMkI5RTIyRDJGMEVCODUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnhCgwDQYJKoZIhvcNAQELBQADggEBAColmqZrOiIVnSAakzW/p7w7BmwsRWA6 EYnb5BEbL1/jdjTfdb06/ohJRzbUqw5KGd4dLYIKMBuRYAF7G1BgDniia/kDAb80 D4URxJmkjXZowbhwqqXcjpouTHoOHAfGUjuh/Nsl4HSOCvNfBPTUeMYqULCnDBlR PL6VBu1YPrycUpteyVK3l1D4bcTntQ8QnzLN+2wLM2mvGCe3mvZHjWd3AxFV7HfT Q/6A+VM1G4QXIauBEeeoRrlJrznVi1XdDG6W2yG3O69fK13QOxal9AwPc7jieSz5 4NBbKYKGeQiwnzSDs5HWtu/QHJ0QUZdO4bJoH/qP1LmrzAhJg6IL854= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:22 2025 by rpki-client on console.sobornost.net