$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.cer File: F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.cer (raw, json) Hash identifier: BfBCjsU9w9mmzJrhnm1k3nBhz1Sg5zlDBBNIO2JYiCA= Subject key identifier: F5:56:42:EA:EB:D8:3D:2B:9D:92:B6:DB:79:87:FB:E6:D3:68:39:C6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 45E1C7275454B9E4A0275A45BCA3D03B907880C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft caRepository: rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 21 Mar 2025 14:22:13 +0000 Certificate not after: Fri 20 Mar 2026 14:27:13 +0000 Subordinate resources: IP: 103.193.144.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e1:c7:27:54:54:b9:e4:a0:27:5a:45:bc:a3:d0:3b:90:78:80:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 21 14:22:13 2025 GMT Not After : Mar 20 14:27:13 2026 GMT Subject: CN=F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f1:c7:3c:09:ee:b0:13:e9:ec:a8:8c:03:47: 83:d4:9d:05:9e:77:e8:1a:a4:68:c4:9c:3d:71:55: f5:27:96:c0:b0:cc:d9:b7:c6:ed:72:0a:4c:7c:41: 5e:32:ef:bd:6a:38:db:fe:01:02:84:0b:82:c0:04: 8b:12:6d:3b:f0:6d:f2:d9:0a:3d:b2:06:f2:0a:10: 25:29:b5:69:6a:76:57:4a:ec:8c:23:28:b0:d4:18: c6:c9:77:4f:ff:86:fe:e2:bf:c3:2d:d9:6d:60:e2: 23:6a:8b:a6:2d:e0:06:49:ac:65:80:0c:d9:65:16: 48:32:85:a1:d7:32:b4:ac:97:e6:11:bd:c2:97:bf: 7f:37:63:c4:c2:89:4d:fb:84:f6:cd:f6:c5:6b:29: 05:1a:b2:8f:f4:36:e8:43:56:fa:44:bf:e3:b6:a1: 70:36:2c:92:3a:1c:b5:ff:dd:64:de:cb:97:f6:38: bf:46:68:3c:4f:d4:c9:2a:b8:9a:0b:ba:a2:8a:6a: 70:c2:6c:d3:b5:f2:4b:00:ab:5a:a0:4e:23:51:3a: 42:4e:e6:60:84:cf:08:45:74:d0:70:83:63:81:99: d0:97:86:9a:3f:b7:17:25:20:a7:52:1b:54:39:47: ae:49:d5:58:67:9d:15:1e:17:80:77:bd:d3:ca:1c: b5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F5:56:42:EA:EB:D8:3D:2B:9D:92:B6:DB:79:87:FB:E6:D3:68:39:C6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.193.144.0/23 Signature Algorithm: sha256WithRSAEncryption 76:fc:32:9a:57:5f:71:6b:95:3f:99:c0:68:ae:b7:c0:e6:95: 81:df:1c:04:56:cf:26:fe:f2:8d:1c:43:e7:04:b4:9e:69:59: d7:8b:1f:af:59:4b:91:73:c0:d4:24:43:ae:c2:cb:b7:c2:a7: c5:3b:20:e2:44:31:2e:b1:af:88:b6:b4:53:81:bd:f8:25:41: 89:ad:9c:a9:03:3d:9f:ba:ad:39:09:7d:2d:99:7d:28:56:09: 50:01:be:de:a7:d2:bc:65:01:7b:d6:2e:ef:46:ca:15:4d:d6: f7:db:bf:65:c4:0c:14:04:9e:d1:8d:0e:3d:56:b1:64:27:16: d1:ca:43:87:b0:d6:3b:88:de:c3:da:c1:22:7b:5f:76:b2:05: ea:e2:b3:3b:9f:0f:70:34:f9:0a:7a:71:52:38:1a:24:ac:17: 7e:4b:8f:56:4e:f3:4d:7a:9b:20:49:5e:6d:45:ca:2f:57:cc: a3:c8:5f:1b:6b:e5:58:91:48:27:1c:9b:23:09:9c:f3:9c:05: af:e1:18:4a:21:5f:8f:3f:a2:8d:b3:34:91:76:07:12:9c:6f: 40:4e:be:1d:08:0d:e0:dd:93:af:c1:25:11:da:b5:47:e6:1d: 90:7d:28:2e:04:05:93:cf:32:6c:da:38:f7:20:28:23:c2:b6: fd:33:c3:73 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUReHHJ1RUueSgJ1pFvKPQO5B4gMQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMyMTE0MjIxM1oX DTI2MDMyMDE0MjcxM1owMzExMC8GA1UEAxMoRjU1NjQyRUFFQkQ4M0QyQjlEOTJC NkRCNzk4N0ZCRTZEMzY4MzlDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMLxxzwJ7rAT6eyojANHg9SdBZ536BqkaMScPXFV9SeWwLDM2bfG7XIKTHxB XjLvvWo42/4BAoQLgsAEixJtO/Bt8tkKPbIG8goQJSm1aWp2V0rsjCMosNQYxsl3 T/+G/uK/wy3ZbWDiI2qLpi3gBkmsZYAM2WUWSDKFodcytKyX5hG9wpe/fzdjxMKJ TfuE9s32xWspBRqyj/Q26ENW+kS/47ahcDYskjoctf/dZN7Ll/Y4v0ZoPE/UySq4 mgu6oopqcMJs07XySwCrWqBOI1E6Qk7mYITPCEV00HCDY4GZ0JeGmj+3FyUgp1Ib VDlHrknVWGedFR4XgHe908octfcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPVWQurr2D0rnZK223mH++bTaDnGMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jODgzZmU3NS05MWU0LTQ5ODktYmM1ZS02YTI2MDgyZGMzMzQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4ODNmZTc1 LTkxZTQtNDk4OS1iYzVlLTZhMjYwODJkYzMzNC8wL0Y1NTY0MkVBRUJEODNEMkI5 RDkyQjZEQjc5ODdGQkU2RDM2ODM5QzYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnwZAwDQYJKoZIhvcNAQELBQADggEBAHb8MppXX3FrlT+ZwGiut8DmlYHfHARW zyb+8o0cQ+cEtJ5pWdeLH69ZS5FzwNQkQ67Cy7fCp8U7IOJEMS6xr4i2tFOBvfgl QYmtnKkDPZ+6rTkJfS2ZfShWCVABvt6n0rxlAXvWLu9GyhVN1vfbv2XEDBQEntGN Dj1WsWQnFtHKQ4ew1juI3sPawSJ7X3ayBeriszufD3A0+Qp6cVI4GiSsF35Lj1ZO 8016myBJXm1Fyi9XzKPIXxtr5ViRSCccmyMJnPOcBa/hGEohX48/oo2zNJF2BxKc b0BOvh0IDeDdk6/BJRHatUfmHZB9KC4EBZPPMmzaOPcgKCPCtv0zw3M= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:24 2025 by rpki-client on console.sobornost.net