$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer File: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer (raw, json) Hash identifier: ygQnjrXxQRfF0T5iek40GjDBYVjrTRpAbZT7iyNX8ZI= Subject key identifier: F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7C798462D3E1BB70A3507621F3A8FA23438A2192 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft caRepository: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 10 Apr 2025 10:58:04 +0000 Certificate not after: Thu 09 Apr 2026 11:03:04 +0000 Subordinate resources: IP: 103.189.116.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:79:84:62:d3:e1:bb:70:a3:50:76:21:f3:a8:fa:23:43:8a:21:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 10 10:58:04 2025 GMT Not After : Apr 9 11:03:04 2026 GMT Subject: CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:96:5a:c9:7a:4f:04:32:e8:77:f3:a0:57: 26:38:d6:f0:f0:2d:10:63:b6:db:6b:48:1e:f5:c0: 1e:f9:7c:cf:a6:1b:87:43:81:4a:61:2e:8f:37:23: 15:df:55:48:aa:6a:15:ca:4c:ca:2b:c0:0c:bf:52: a0:bb:45:77:14:5a:d0:76:d1:22:ef:3d:1c:af:98: 16:42:71:98:1b:57:81:e5:05:c1:b2:66:08:e0:53: ab:a0:a6:5a:3a:42:52:8d:8f:90:bb:c7:85:98:4e: a8:f4:9f:c3:71:fc:2d:6a:b5:0e:4d:10:2f:ed:bf: ec:6c:3e:62:b2:1f:7c:df:70:01:6c:bc:18:0c:d9: 9a:28:b1:a7:85:f8:b5:52:eb:b4:ed:2f:7a:24:c4: 4b:25:f6:6d:e2:f2:3a:5f:94:39:2f:4d:93:f5:2a: b3:7b:c4:b4:49:a0:10:f1:0b:c8:6b:a3:34:3d:6f: 9f:62:ea:a5:a9:1e:a0:d5:fd:ea:41:f7:68:8b:06: ef:c3:e0:9c:eb:9c:47:22:4d:bd:4b:aa:b0:05:5c: 7f:e1:8a:b4:f9:0e:e3:df:ca:12:a6:2a:b3:35:3a: 05:c5:5a:2f:32:0c:59:67:be:ae:06:64:bd:ef:b4: d4:b5:48:80:e0:ed:5b:d0:bd:f5:01:1e:44:f1:3f: 57:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.116.0/23 Signature Algorithm: sha256WithRSAEncryption 51:4f:40:00:eb:a3:79:b1:34:fd:94:fb:41:3c:a2:22:22:79: b1:38:4e:d6:f9:e3:09:9d:df:54:bf:f2:e0:67:61:b6:24:49: 7d:3d:43:ed:da:87:d7:37:be:c8:04:f9:39:08:7e:4f:fd:39: 97:fa:3f:57:e9:5f:96:48:60:b8:83:0c:0f:8e:37:ee:d3:07: f0:95:4e:d3:48:ff:d4:ae:0c:b3:4a:73:ad:68:da:e4:89:fc: ea:75:e1:1a:e6:2a:f3:08:64:c9:3e:dd:1c:f9:56:5a:f0:b3: c0:fe:f4:e9:fc:2e:9e:2a:c3:59:84:46:2c:63:56:ef:19:2a: 79:18:67:d3:22:1d:a5:59:cd:32:db:67:b3:99:cf:be:22:0d: 36:95:a2:1e:f2:b6:95:eb:b1:fc:5e:c6:ce:d1:f2:03:a6:a7: f6:16:e6:5f:7f:28:76:b6:d2:50:eb:b7:92:f7:ae:c7:da:dd: 85:96:7d:f4:12:94:36:56:07:d3:09:66:3f:52:1e:b4:57:81: a3:33:62:0e:20:ac:be:0c:88:bf:4d:c4:73:e4:01:be:c3:77: 3c:c4:9d:9a:bf:e9:42:93:4c:ce:e7:15:d2:03:b2:00:ef:96: e8:ef:f0:b2:fc:d5:6a:4b:43:22:1a:96:86:c4:57:b1:43:cc: bc:78:de:78 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUfHmEYtPhu3CjUHYh86j6I0OKIZIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxMDEwNTgwNFoX DTI2MDQwOTExMDMwNFowMzExMC8GA1UEAxMoRjhCN0M4RTVEREJERDAzNjUxM0Yx MEI4N0YzOUE5NEJFMURCM0RDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4zllrJek8EMuh386BXJjjW8PAtEGO222tIHvXAHvl8z6Ybh0OBSmEujzcj Fd9VSKpqFcpMyivADL9SoLtFdxRa0HbRIu89HK+YFkJxmBtXgeUFwbJmCOBTq6Cm WjpCUo2PkLvHhZhOqPSfw3H8LWq1Dk0QL+2/7Gw+YrIffN9wAWy8GAzZmiixp4X4 tVLrtO0veiTESyX2beLyOl+UOS9Nk/Uqs3vEtEmgEPELyGujND1vn2LqpakeoNX9 6kH3aIsG78PgnOucRyJNvUuqsAVcf+GKtPkO49/KEqYqszU6BcVaLzIMWWe+rgZk ve+01LVIgODtW9C99QEeRPE/V7MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPi3yOXdvdA2UT8QuH85qUvh2z3KMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83MzA1YWIzMC01NjUzLTQyYmMtOWMzZi1hYWY1NjdlYWU3MDEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczMDVhYjMw LTU2NTMtNDJiYy05YzNmLWFhZjU2N2VhZTcwMS8wL0Y4QjdDOEU1RERCREQwMzY1 MTNGMTBCODdGMzlBOTRCRTFEQjNEQ0EubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvXQwDQYJKoZIhvcNAQELBQADggEBAFFPQADro3mxNP2U+0E8oiIiebE4Ttb5 4wmd31S/8uBnYbYkSX09Q+3ah9c3vsgE+TkIfk/9OZf6P1fpX5ZIYLiDDA+ON+7T B/CVTtNI/9SuDLNKc61o2uSJ/Op14RrmKvMIZMk+3Rz5Vlrws8D+9On8Lp4qw1mE RixjVu8ZKnkYZ9MiHaVZzTLbZ7OZz74iDTaVoh7ytpXrsfxexs7R8gOmp/YW5l9/ KHa20lDrt5L3rsfa3YWWffQSlDZWB9MJZj9SHrRXgaMzYg4grL4MiL9NxHPkAb7D dzzEnZq/6UKTTM7nFdIDsgDvlujv8LL81WpLQyIalobEV7FDzLx43ng= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:24 2025 by rpki-client on console.sobornost.net