$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer File: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer (raw, json) Hash identifier: /SLX4GB25RH/ulCkdseZCyY+7lzbaYzWiABY36gDyjc= Subject key identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 33602E668FFD5B570FA9BEA4ABB64FB104ECEA4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft caRepository: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 22 Apr 2025 15:13:30 +0000 Certificate not after: Tue 21 Apr 2026 15:18:30 +0000 Subordinate resources: IP: 103.60.88.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:60:2e:66:8f:fd:5b:57:0f:a9:be:a4:ab:b6:4f:b1:04:ec:ea:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 22 15:13:30 2025 GMT Not After : Apr 21 15:18:30 2026 GMT Subject: CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2c:bc:d7:cf:d9:eb:88:25:a4:ff:5a:d2:63: 3a:2b:ef:f7:13:0c:af:ad:27:06:4e:3d:eb:6b:f9: d9:bc:55:33:1d:d7:da:59:8b:98:5a:e1:3c:62:46: 27:6c:6f:56:d1:c3:0f:86:e6:c0:d9:8d:d6:79:09: a6:8e:fc:82:c1:d6:26:40:08:5b:95:51:6a:3e:5c: 27:08:8b:c4:b7:9e:94:47:2f:77:9f:8f:07:b3:bf: d8:5f:77:ed:98:50:72:a0:04:45:e1:a0:8f:ac:5c: 62:e5:90:10:31:cc:dc:d7:6d:6e:fb:09:cb:de:75: 40:55:8b:fd:dc:c7:d5:44:8e:3a:ff:a5:b8:bb:30: 3c:10:87:81:d6:0c:30:65:ab:61:8a:48:38:15:f7: 08:fe:2c:16:ee:d9:c0:56:aa:ec:77:73:12:c7:04: db:75:e9:7d:e3:20:dc:08:50:bb:ec:29:80:f6:73: 7f:59:e6:4c:db:2d:7b:bc:f6:b3:73:2c:55:5f:7e: 05:d7:29:ac:2a:8d:f9:3a:aa:8f:12:ba:e0:1b:2c: 80:49:75:62:b3:97:c6:43:98:da:1a:10:53:b2:6d: e3:b4:be:d7:5e:a7:dc:92:84:12:98:b3:66:6f:1a: 33:35:1c:74:c6:64:76:43:50:43:be:10:c3:29:f6: de:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.60.88.0/23 Signature Algorithm: sha256WithRSAEncryption 83:9c:ee:e3:06:04:7d:4f:f5:6f:48:54:58:cf:3c:74:f3:09: 25:33:6f:c8:40:90:26:9f:24:7c:65:70:c5:12:f1:d5:6f:db: 98:c0:fa:a3:dc:f5:75:6c:a5:e7:e2:75:a9:2d:60:54:68:0e: 89:24:7e:66:6b:07:d5:1e:6e:13:71:3c:f0:0d:c0:69:c1:3a: 6e:17:4e:d1:db:b4:91:b0:ab:67:a4:0e:2c:1b:f6:e2:57:b6: 06:9d:da:da:7e:59:07:a9:f4:98:ed:50:b2:46:0d:7e:db:5c: 2e:2b:7a:67:9a:49:94:9c:4a:32:68:24:6d:de:fd:ad:d0:e9: 2f:3b:fe:6d:ae:ea:f3:db:7a:4f:ab:97:4d:fd:36:0d:5d:7e: 0a:f8:dd:b4:cd:f5:cb:24:12:ac:d5:a6:0b:cd:6d:de:1c:c9: 19:b0:e1:cf:34:be:16:c0:45:26:69:6e:d8:d0:71:cb:6b:bc: e5:01:8a:87:40:ea:e6:ec:4a:2f:84:43:33:e4:bd:b2:c7:3b: d9:77:b6:6e:2e:68:58:be:54:c5:55:53:65:a7:76:fa:f5:2d: 5c:2d:cb:1f:c1:f8:be:99:ce:62:e8:d9:25:08:b6:53:96:40: 1a:55:58:fe:fc:00:b6:e0:92:ea:7a:e0:09:58:93:68:c4:d1: cb:3a:1c:b7 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUM2AuZo/9W1cPqb6kq7ZPsQTs6kowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQyMjE1MTMzMFoX DTI2MDQyMTE1MTgzMFowMzExMC8GA1UEAxMoRTdDOUU0RTVDOEVBOTg5RjBGRjdE NkZFNkRCRDZBNEZFODIxMkRERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMAsvNfP2euIJaT/WtJjOivv9xMMr60nBk4962v52bxVMx3X2lmLmFrhPGJG J2xvVtHDD4bmwNmN1nkJpo78gsHWJkAIW5VRaj5cJwiLxLeelEcvd5+PB7O/2F93 7ZhQcqAEReGgj6xcYuWQEDHM3NdtbvsJy951QFWL/dzH1USOOv+luLswPBCHgdYM MGWrYYpIOBX3CP4sFu7ZwFaq7HdzEscE23XpfeMg3AhQu+wpgPZzf1nmTNste7z2 s3MsVV9+BdcprCqN+TqqjxK64BssgEl1YrOXxkOY2hoQU7Jt47S+116n3JKEEpiz Zm8aMzUcdMZkdkNQQ74Qwyn23l0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOfJ5OXI6pifD/fW/m29ak/oIS3eMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81NzExYWE0Ni1mMjhlLTRjNTUtYjliYS03ZDViZGM5NWI0ZjYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3MTFhYTQ2 LWYyOGUtNGM1NS1iOWJhLTdkNWJkYzk1YjRmNi8wL0U3QzlFNEU1QzhFQTk4OUYw RkY3RDZGRTZEQkQ2QTRGRTgyMTJEREUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnPFgwDQYJKoZIhvcNAQELBQADggEBAIOc7uMGBH1P9W9IVFjPPHTzCSUzb8hA kCafJHxlcMUS8dVv25jA+qPc9XVspefidaktYFRoDokkfmZrB9UebhNxPPANwGnB Om4XTtHbtJGwq2ekDiwb9uJXtgad2tp+WQep9JjtULJGDX7bXC4remeaSZScSjJo JG3e/a3Q6S87/m2u6vPbek+rl039Ng1dfgr43bTN9cskEqzVpgvNbd4cyRmw4c80 vhbARSZpbtjQcctrvOUBiodA6ubsSi+EQzPkvbLHO9l3tm4uaFi+VMVVU2Wndvr1 LVwtyx/B+L6ZzmLo2SUItlOWQBpVWP78ALbgkup64AlYk2jE0cs6HLc= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:23 2025 by rpki-client on console.sobornost.net