$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer File: CEE21891B6F5736FAA7D9BED383243F3DF381781.cer (raw, json) Hash identifier: PpIYAWLCv65noj6M4CB+LorfbjkkIl3ppDZlDZDetV8= Subject key identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7DA317196A81C0D7B5EEEFF4C3AD3723AC744F7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft caRepository: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 24 Apr 2025 16:48:12 +0000 Certificate not after: Thu 23 Apr 2026 16:53:12 +0000 Subordinate resources: IP: 103.168.186.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a3:17:19:6a:81:c0:d7:b5:ee:ef:f4:c3:ad:37:23:ac:74:4f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 24 16:48:12 2025 GMT Not After : Apr 23 16:53:12 2026 GMT Subject: CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cf:62:ff:75:22:86:0c:02:84:8c:1e:94:22: d1:55:f2:89:5e:47:cb:cb:95:cf:31:f5:44:7c:0f: 87:8c:c1:96:c1:f7:48:95:59:59:5c:07:f7:b1:0f: d9:c6:8e:d3:81:50:ac:78:8f:fe:1d:24:19:4c:d8: 03:99:44:02:44:50:19:a8:7e:84:b7:36:92:7a:cf: 69:57:ed:aa:7d:c7:ca:a2:e6:39:eb:b7:ca:a0:ec: 63:76:77:97:21:b8:f1:e7:d3:14:c0:19:f7:f1:f4: d4:83:4c:f3:a5:c3:b0:af:60:ec:4b:40:4d:a7:67: 43:fe:f6:8b:1f:ff:2d:02:30:14:d2:0f:1f:41:66: 4e:76:c8:0c:53:d3:dd:d6:43:78:72:4a:81:8f:96: 97:4f:ec:d5:1d:67:7e:23:2a:3c:97:dd:1c:ff:bd: 49:de:ba:4b:b2:60:98:45:93:60:3a:2f:54:77:c5: d5:b7:d7:b5:cb:7e:3a:ed:b1:4f:2c:92:f7:ac:f0: 2d:95:54:7a:3f:c7:9d:c7:fe:fb:48:24:b6:4a:7a: b2:70:dd:b7:6e:18:4d:8f:4a:3e:8b:1e:36:e0:ae: ce:29:ef:20:21:67:6e:26:33:b9:96:1b:9e:f6:d2: 72:6e:76:2b:00:dc:87:b9:79:bd:9f:de:71:c5:bd: 59:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.186.0/23 Signature Algorithm: sha256WithRSAEncryption 18:6c:a8:da:92:57:d0:f8:24:dc:53:28:ad:ed:3f:63:eb:92: d0:13:84:40:be:8e:74:2f:8d:b5:7f:92:47:eb:a2:88:6b:fd: 48:77:92:49:ce:23:91:87:98:9a:d3:62:50:a3:17:1b:f6:08: 2e:69:55:e1:9d:dd:2d:0b:e0:09:8a:da:1a:5b:41:d1:db:f4: 1e:61:2d:29:94:e8:1e:20:80:f2:30:20:04:93:15:65:23:fc: 97:06:7e:6e:0e:da:7a:54:e4:17:d4:43:b2:ac:64:e4:a3:2b: b6:37:12:fd:a6:28:fb:aa:00:6f:46:ca:69:51:8a:5a:21:15: fa:62:cd:26:05:53:2a:eb:74:46:f9:c6:67:e9:bf:8a:d3:73: 26:bb:a4:30:1f:b8:07:60:b3:ee:12:c9:34:3e:f9:f2:44:42: 8c:e7:ba:74:81:36:76:c5:c2:c2:4d:65:c7:d2:59:24:79:78: d6:02:e1:c9:c5:2b:98:09:11:4b:30:36:ff:fc:a4:1b:7a:50: 15:0f:f4:e9:1b:03:df:89:25:ce:98:1c:33:5d:93:9e:c8:07: d7:c9:d0:93:05:bc:48:3c:7d:5f:51:af:45:43:a6:10:e0:19: 7f:2b:05:77:61:38:1a:a3:be:3d:b4:38:32:65:e0:b6:f2:6b: f7:5a:69:0b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUfaMXGWqBwNe17u/0w603I6x0T34wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQyNDE2NDgxMloX DTI2MDQyMzE2NTMxMlowMzExMC8GA1UEAxMoQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5 QkVEMzgzMjQzRjNERjM4MTc4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJTPYv91IoYMAoSMHpQi0VXyiV5Hy8uVzzH1RHwPh4zBlsH3SJVZWVwH97EP 2caO04FQrHiP/h0kGUzYA5lEAkRQGah+hLc2knrPaVftqn3HyqLmOeu3yqDsY3Z3 lyG48efTFMAZ9/H01INM86XDsK9g7EtATadnQ/72ix//LQIwFNIPH0FmTnbIDFPT 3dZDeHJKgY+Wl0/s1R1nfiMqPJfdHP+9Sd66S7JgmEWTYDovVHfF1bfXtct+Ou2x TyyS96zwLZVUej/Hncf++0gktkp6snDdt24YTY9KPoseNuCuzinvICFnbiYzuZYb nvbScm52KwDch7l5vZ/eccW9Wa8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM7iGJG29XNvqn2b7TgyQ/PfOBeBMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84YWYwMDMxZS0yYTllLTQ3Y2EtOTI4My00MGU5MjdlMzU5OTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhhZjAwMzFl LTJhOWUtNDdjYS05MjgzLTQwZTkyN2UzNTk5My8wL0NFRTIxODkxQjZGNTczNkZB QTdEOUJFRDM4MzI0M0YzREYzODE3ODEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqLowDQYJKoZIhvcNAQELBQADggEBABhsqNqSV9D4JNxTKK3tP2PrktAThEC+ jnQvjbV/kkfroohr/Uh3kknOI5GHmJrTYlCjFxv2CC5pVeGd3S0L4AmK2hpbQdHb 9B5hLSmU6B4ggPIwIASTFWUj/JcGfm4O2npU5BfUQ7KsZOSjK7Y3Ev2mKPuqAG9G ymlRilohFfpizSYFUyrrdEb5xmfpv4rTcya7pDAfuAdgs+4SyTQ++fJEQoznunSB NnbFwsJNZcfSWSR5eNYC4cnFK5gJEUswNv/8pBt6UBUP9OkbA9+JJc6YHDNdk57I B9fJ0JMFvEg8fV9Rr0VDphDgGX8rBXdhOBqjvj20ODJl4Lbya/daaQs= -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:50 2025 by rpki-client on console.sobornost.net