$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer File: EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer (raw, json) Hash identifier: 168D6rIdc1kOLbCTc4Se65Wz/AceuEL6OR5Co9jYNn0= Subject key identifier: EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4966BF752FE85A09963C1046C1E597D7E73F8681 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft caRepository: rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 19 Apr 2025 21:43:24 +0000 Certificate not after: Sat 18 Apr 2026 21:48:24 +0000 Subordinate resources: IP: 103.85.52.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 01:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:66:bf:75:2f:e8:5a:09:96:3c:10:46:c1:e5:97:d7:e7:3f:86:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 19 21:43:24 2025 GMT Not After : Apr 18 21:48:24 2026 GMT Subject: CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5d:29:0b:99:0a:c4:a1:38:a8:4b:be:38:1e: fb:4c:9c:58:f2:45:4e:cd:12:6b:f2:cd:44:e9:b3: d9:0d:45:fb:16:ee:99:8b:7b:b2:54:7d:59:20:43: 38:98:18:50:4a:46:13:8e:2b:34:20:a0:9c:44:6c: 70:81:59:6f:81:49:44:d9:03:9e:a3:59:7d:53:b4: 01:fb:e0:90:0d:d7:b7:51:a2:52:23:79:e9:d1:7d: a1:15:c5:c9:9e:29:4f:4a:af:f9:52:59:68:b0:21: 9b:96:a9:ea:c2:1b:6d:e2:77:61:a4:a0:8b:87:cb: 37:66:83:74:c3:8e:f1:13:dc:2a:f5:73:f6:5c:08: c5:c7:91:0a:85:d4:99:e6:5a:34:d7:17:c0:d8:91: d5:34:79:7a:11:bb:2d:ef:3f:c0:c1:79:5b:02:12: ec:1b:17:f5:a8:e1:67:49:c6:b3:dd:00:f4:72:4f: f4:4e:48:db:52:f5:90:16:25:e7:35:b4:af:5b:fc: c2:7d:ea:9a:69:78:f6:f4:a4:0e:b0:6e:8b:88:46: cb:04:62:79:2e:c6:fb:05:95:b0:51:af:1b:96:7f: 49:3b:60:06:db:be:f2:e7:b3:4a:17:55:77:fe:da: b3:56:1e:bb:07:8d:9b:9b:bd:bb:16:7d:3e:66:39: e3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.85.52.0/23 Signature Algorithm: sha256WithRSAEncryption 93:d7:b3:4a:7d:ec:8a:33:97:56:56:27:6f:9d:1c:0b:79:ea: c5:bb:73:2a:9d:ed:bc:f6:76:f9:ed:58:c1:37:cd:61:84:c8: ad:79:1a:73:f5:88:b0:47:9d:8d:0a:39:e3:f2:c6:18:40:8e: f8:ee:da:56:b7:c9:bb:14:9e:a5:76:e8:ed:f5:15:20:3d:96: bc:17:ab:69:47:8e:21:a6:cc:46:24:d8:d7:37:95:e9:7d:cc: 67:be:f5:43:34:55:ce:45:59:61:5a:37:68:33:ef:38:6d:27: 8f:70:90:fe:da:d5:a3:2f:a8:a9:60:76:57:5d:26:a9:90:80: d6:59:09:9b:f0:0d:f4:04:ad:eb:ac:85:7c:4a:0f:a5:aa:9a: 79:d5:ee:bf:dc:ea:63:43:f7:57:a3:1a:9d:7c:12:53:0b:1c: 55:07:97:70:ff:86:66:75:af:d4:83:bc:fc:35:92:88:3a:c2: 27:95:6e:13:63:67:83:5d:41:7b:d8:38:b5:79:e9:30:cf:fc: a9:b0:36:bb:5e:52:dd:f5:90:a5:5d:8b:77:bd:14:6e:cc:2b: 2c:24:83:ec:74:bc:62:d3:6a:32:55:c8:19:51:6e:4a:1a:37: 95:8b:42:36:40:8a:07:86:6f:01:a6:22:e9:6d:30:93:ae:ea: 6b:f7:e2:3b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUSWa/dS/oWgmWPBBGweWX1+c/hoEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxOTIxNDMyNFoX DTI2MDQxODIxNDgyNFowMzExMC8GA1UEAxMoRUUxMkYxNzlBNUQxRjUyRUMwMzM2 NzcyODJBRTdFMkU3MkUwRjJDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNdKQuZCsShOKhLvjge+0ycWPJFTs0Sa/LNROmz2Q1F+xbumYt7slR9WSBD OJgYUEpGE44rNCCgnERscIFZb4FJRNkDnqNZfVO0AfvgkA3Xt1GiUiN56dF9oRXF yZ4pT0qv+VJZaLAhm5ap6sIbbeJ3YaSgi4fLN2aDdMOO8RPcKvVz9lwIxceRCoXU meZaNNcXwNiR1TR5ehG7Le8/wMF5WwIS7BsX9ajhZ0nGs90A9HJP9E5I21L1kBYl 5zW0r1v8wn3qmml49vSkDrBui4hGywRieS7G+wWVsFGvG5Z/STtgBtu+8uezShdV d/7as1YeuweNm5u9uxZ9PmY547ECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO4S8Xml0fUuwDNncoKufi5y4PLDMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hMGQxZjRjZS0xNjliLTQzMWEtODI4Ni1jNWYzYTA3YmJiZTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwZDFmNGNl LTE2OWItNDMxYS04Mjg2LWM1ZjNhMDdiYmJlMy8wL0VFMTJGMTc5QTVEMUY1MkVD MDMzNjc3MjgyQUU3RTJFNzJFMEYyQzMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnVTQwDQYJKoZIhvcNAQELBQADggEBAJPXs0p97Iozl1ZWJ2+dHAt56sW7cyqd 7bz2dvntWME3zWGEyK15GnP1iLBHnY0KOePyxhhAjvju2la3ybsUnqV26O31FSA9 lrwXq2lHjiGmzEYk2Nc3lel9zGe+9UM0Vc5FWWFaN2gz7zhtJ49wkP7a1aMvqKlg dlddJqmQgNZZCZvwDfQEreushXxKD6WqmnnV7r/c6mND91ejGp18ElMLHFUHl3D/ hmZ1r9SDvPw1kog6wieVbhNjZ4NdQXvYOLV56TDP/KmwNrteUt31kKVdi3e9FG7M Kywkg+x0vGLTajJVyBlRbkoaN5WLQjZAigeGbwGmIultMJOu6mv34js= -----END CERTIFICATE-----Generated at Sun Apr 27 19:11:58 2025 by rpki-client on console.sobornost.net