$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer File: D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer (raw, json) Hash identifier: 8kDoKxnjPAKERwCn6bcvgcXQkJbzP3ZCkbN3w65fDtU= Subject key identifier: D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 21FA749CB215BCCF0E99D0BF7BE5751910D82AF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft caRepository: rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 25 Dec 2024 00:28:30 +0000 Certificate not after: Wed 24 Dec 2025 00:33:30 +0000 Subordinate resources: IP: 103.183.250.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:fa:74:9c:b2:15:bc:cf:0e:99:d0:bf:7b:e5:75:19:10:d8:2a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 25 00:28:30 2024 GMT Not After : Dec 24 00:33:30 2025 GMT Subject: CN=D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:df:7a:74:b2:08:6f:fd:3c:2e:37:13:e6:0b: c1:48:ab:ec:72:c8:5d:25:70:c2:35:0b:2a:e4:68: ef:cd:73:c4:0a:cc:93:71:89:99:b6:d5:10:e3:56: f0:41:1b:96:f4:b3:57:02:29:3a:e1:52:94:cf:88: 30:fd:3c:0b:26:0f:de:f9:05:07:84:d6:ed:e8:00: a2:37:f7:21:26:a8:ef:06:92:3e:c1:77:d2:cf:6a: 82:d3:99:78:1e:f4:7c:ca:e4:6d:00:62:76:47:54: 1c:ac:d5:16:e1:72:31:4a:00:da:07:5f:b5:99:d3: 15:a7:2b:79:2e:80:28:94:7f:4f:56:b0:b4:18:cd: d0:b3:ce:bf:56:76:aa:70:74:ac:14:f2:7f:02:8b: c4:6d:f9:22:35:cb:c4:15:19:3f:44:50:34:ba:cc: d5:ae:81:02:74:d7:5e:3d:88:3d:98:84:7e:de:71: 25:4c:ac:fc:1d:44:c9:bb:8e:76:4e:33:af:25:a3: 38:40:f1:8f:e2:41:b5:51:47:98:28:11:7e:3c:60: 03:5c:d1:4f:94:5a:56:4e:79:83:8c:cf:c3:19:57: eb:f9:9b:5f:df:7f:62:be:45:ad:7b:fe:3f:4b:02: 24:62:fb:68:e5:6d:28:9a:1d:e9:c0:bc:c7:68:85: cf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.183.250.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:5e:9b:c4:f4:ea:25:03:89:9a:7c:b4:d9:98:a4:34:4b:36: 1e:b3:16:6c:ec:58:61:9c:c8:11:4e:c1:b9:e7:d1:c5:c5:0f: 85:14:54:5a:26:4d:f7:63:32:c1:49:e5:a7:9a:73:42:cc:ac: 6d:1d:85:b9:ab:da:19:44:c6:d7:d3:05:1b:e3:d4:f4:8f:65: 19:59:da:86:86:4f:37:23:af:f9:a9:47:08:3d:73:d7:87:40: f2:67:dc:9b:fd:1f:af:2d:cb:de:06:d4:b0:05:4b:dd:8a:38: 35:47:f5:ee:ff:49:fe:a7:ac:8a:a2:2f:4b:cd:ca:21:49:bc: 68:32:25:3b:62:ae:e9:8e:76:9b:69:be:5b:18:9e:4c:ba:47: 78:7a:2c:4b:8d:3b:db:6f:15:db:d7:79:cf:c7:42:85:19:79: 2b:6f:72:b7:5d:ad:a5:67:df:55:a2:49:07:46:fb:fa:51:40: bc:6b:53:08:37:6a:70:cf:c4:42:ec:f4:5c:9e:06:76:70:8c: 53:d3:7c:2d:2f:94:3c:70:84:00:3c:ea:6f:4c:d0:77:18:d4: b6:a1:c6:5e:f7:6c:b6:bf:1d:4b:bd:66:e4:18:c0:74:cc:5d: 93:86:6d:82:3b:52:6d:d3:06:40:6a:ec:95:46:33:1d:4c:f3: fe:ad:09:21 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUIfp0nLIVvM8OmdC/e+V1GRDYKvMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIyNTAwMjgzMFoX DTI1MTIyNDAwMzMzMFowMzExMC8GA1UEAxMoRDlEMDczMERCNTEyOTVGRUM1QkQ0 ODBDREQ0MkI1RTg1MTdDOEZEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOnfenSyCG/9PC43E+YLwUir7HLIXSVwwjULKuRo781zxArMk3GJmbbVEONW 8EEblvSzVwIpOuFSlM+IMP08CyYP3vkFB4TW7egAojf3ISao7waSPsF30s9qgtOZ eB70fMrkbQBidkdUHKzVFuFyMUoA2gdftZnTFacreS6AKJR/T1awtBjN0LPOv1Z2 qnB0rBTyfwKLxG35IjXLxBUZP0RQNLrM1a6BAnTXXj2IPZiEft5xJUys/B1EybuO dk4zryWjOEDxj+JBtVFHmCgRfjxgA1zRT5RaVk55g4zPwxlX6/mbX99/Yr5FrXv+ P0sCJGL7aOVtKJod6cC8x2iFzyECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNnQcw21EpX+xb1IDN1CtehRfI/bMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81YWUyYjhiMy1kZWM4LTQxY2YtYTE2ZC1lMTE3MTU2MWQ3MjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhZTJiOGIz LWRlYzgtNDFjZi1hMTZkLWUxMTcxNTYxZDcyNS8wL0Q5RDA3MzBEQjUxMjk1RkVD NUJENDgwQ0RENDJCNUU4NTE3QzhGREIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnt/owDQYJKoZIhvcNAQELBQADggEBAIpem8T06iUDiZp8tNmYpDRLNh6zFmzs WGGcyBFOwbnn0cXFD4UUVFomTfdjMsFJ5aeac0LMrG0dhbmr2hlExtfTBRvj1PSP ZRlZ2oaGTzcjr/mpRwg9c9eHQPJn3Jv9H68ty94G1LAFS92KODVH9e7/Sf6nrIqi L0vNyiFJvGgyJTtirumOdptpvlsYnky6R3h6LEuNO9tvFdvXec/HQoUZeStvcrdd raVn31WiSQdG+/pRQLxrUwg3anDPxELs9FyeBnZwjFPTfC0vlDxwhAA86m9M0HcY 1Lahxl73bLa/HUu9ZuQYwHTMXZOGbYI7Um3TBkBq7JVGMx1M8/6tCSE= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:23 2025 by rpki-client on console.sobornost.net