$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer File: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer (raw, json) Hash identifier: v/kL9pRrm+mB1WSpoG+8T6yK9AqEMBIx0XDkUQXGMHA= Subject key identifier: F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 52B54AD9BBE93217D25E36F5DE0CC7D21ABD97EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft caRepository: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 09 Jan 2025 13:04:06 +0000 Certificate not after: Thu 08 Jan 2026 13:09:06 +0000 Subordinate resources: IP: 2001:df3:f3c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b5:4a:d9:bb:e9:32:17:d2:5e:36:f5:de:0c:c7:d2:1a:bd:97:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 13:04:06 2025 GMT Not After : Jan 8 13:09:06 2026 GMT Subject: CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c4:f3:58:6b:54:9f:11:49:b3:bd:cc:73:05: 0b:3b:15:57:f5:0c:08:c9:ec:9e:69:d2:42:a2:60: bd:01:de:29:d1:01:2a:b3:86:f8:d0:5d:94:fa:6c: 1d:31:a4:e0:1a:67:03:68:45:23:d8:00:3c:d0:c4: c1:e9:f0:de:9b:54:8b:64:fe:a0:d8:b8:5a:7a:1c: 66:52:84:9d:21:77:09:72:d9:cb:89:3b:f0:15:ae: f5:96:ce:5c:9d:53:7e:56:50:cb:b6:f8:e0:78:bd: 1e:82:8a:91:b5:d6:6a:f8:3c:5c:9f:01:16:47:45: fa:2f:66:05:a1:ae:be:75:dc:eb:94:44:0a:ab:04: f2:f1:6b:41:f5:b0:43:df:92:05:74:1b:b9:5d:0a: b8:d7:7d:18:4e:01:37:f6:e5:19:4b:ab:7b:d3:04: aa:79:14:23:25:cd:42:0b:79:bb:a7:09:a1:36:d2: b4:76:8c:ae:44:5a:7c:52:3b:bb:05:c2:99:e2:ad: a7:a9:da:b8:e2:30:bd:09:f1:ad:7a:9e:85:d7:e0: bd:bd:0b:76:94:ec:4f:f2:ef:fd:12:c9:1c:78:58: ea:b6:36:49:fd:a0:06:46:71:f4:01:8e:be:98:62: 81:47:23:6e:65:00:97:3f:d9:07:a9:b3:d9:38:1f: eb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:f3c0::/48 Signature Algorithm: sha256WithRSAEncryption 70:81:da:a1:a4:fc:a9:91:8d:48:53:2b:3c:9e:f2:ee:4b:04: 6f:26:9e:b5:d9:5d:34:a9:0d:52:5a:3a:83:8e:ba:49:45:38: 25:e3:12:fb:71:a8:ba:be:07:ea:c2:1e:c0:6c:32:1e:c9:ac: cd:d5:8b:85:ae:6f:d5:b6:59:ab:47:22:37:82:85:89:55:0d: bf:49:26:fd:dd:de:a4:95:73:31:cb:03:64:3e:a6:9b:7c:ca: d3:1f:bc:ab:31:a9:94:9f:6c:1c:01:ad:23:d8:61:c1:83:7a: 61:ff:e9:f9:7a:38:9e:fa:c4:e7:8f:20:c8:d1:0b:cf:ad:c8: 1a:20:29:e1:26:97:fa:16:94:5f:c0:87:9f:24:4f:3f:66:56: f3:e0:dd:75:78:06:ad:cf:b5:0e:33:dc:fe:e2:b9:31:1f:a3: b9:02:e2:03:ce:f8:5a:08:d8:35:a0:3a:e6:b4:c4:8c:22:29: af:15:af:17:0e:ca:33:8f:c9:4b:d7:35:15:be:86:41:d9:dc: 00:57:19:1c:d0:c6:90:91:80:55:56:c0:bb:b2:87:6c:40:44: 43:3a:68:9b:43:0f:6f:29:76:cd:5f:e7:71:a5:3d:15:2a:1c: 21:54:1a:62:da:ed:74:58:3f:03:21:cb:10:a9:3d:65:b0:81: 1c:58:ca:14 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUUrVK2bvpMhfSXjb13gzH0hq9l+wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEwOTEzMDQwNloX DTI2MDEwODEzMDkwNlowMzExMC8GA1UEAxMoRjJCNEQ1Qzk4QjA3MjRDRTc2RTIx MkRGQjY1NUI0OTI4QjRBQzMyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANbE81hrVJ8RSbO9zHMFCzsVV/UMCMnsnmnSQqJgvQHeKdEBKrOG+NBdlPps HTGk4BpnA2hFI9gAPNDEwenw3ptUi2T+oNi4WnocZlKEnSF3CXLZy4k78BWu9ZbO XJ1TflZQy7b44Hi9HoKKkbXWavg8XJ8BFkdF+i9mBaGuvnXc65RECqsE8vFrQfWw Q9+SBXQbuV0KuNd9GE4BN/blGUure9MEqnkUIyXNQgt5u6cJoTbStHaMrkRafFI7 uwXCmeKtp6nauOIwvQnxrXqehdfgvb0LdpTsT/Lv/RLJHHhY6rY2Sf2gBkZx9AGO vphigUcjbmUAlz/ZB6mz2Tgf6+ECAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPK01cmLByTOduIS37ZVtJKLSsMlMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkOGVmMTE5 LTdkZGYtNDVlNS04NjM0LTM4Yjc3MjU4Y2JjYy8xL0YyQjRENUM5OEIwNzI0Q0U3 NkUyMTJERkI2NTVCNDkyOEI0QUMzMjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ3z88AwDQYJKoZIhvcNAQELBQADggEBAHCB2qGk/KmRjUhTKzye8u5LBG8m nrXZXTSpDVJaOoOOuklFOCXjEvtxqLq+B+rCHsBsMh7JrM3Vi4Wub9W2WatHIjeC hYlVDb9JJv3d3qSVczHLA2Q+ppt8ytMfvKsxqZSfbBwBrSPYYcGDemH/6fl6OJ76 xOePIMjRC8+tyBogKeEml/oWlF/Ah58kTz9mVvPg3XV4Bq3PtQ4z3P7iuTEfo7kC 4gPO+FoI2DWgOua0xIwiKa8VrxcOyjOPyUvXNRW+hkHZ3ABXGRzQxpCRgFVWwLuy h2xAREM6aJtDD28pds1f53GlPRUqHCFUGmLa7XRYPwMhyxCpPWWwgRxYyhQ= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:24 2025 by rpki-client on console.sobornost.net