$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer File: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer (raw, json) Hash identifier: ACVvplsuUHtYmROrHFKQUoyyfPV/MinICd43YiYRAiQ= Subject key identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0DEB318C4EF47E99E80369254A90C45C40900E0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft caRepository: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 26 Dec 2024 23:26:02 +0000 Certificate not after: Thu 25 Dec 2025 23:31:02 +0000 Subordinate resources: IP: 103.162.141.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:eb:31:8c:4e:f4:7e:99:e8:03:69:25:4a:90:c4:5c:40:90:0e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 26 23:26:02 2024 GMT Not After : Dec 25 23:31:02 2025 GMT Subject: CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2d:6e:8b:32:86:32:7b:e8:2d:88:c0:ad:aa: 9b:46:01:b0:65:3a:a7:6b:9b:1b:bc:d7:d6:af:e2: b0:79:2c:07:a5:a9:0a:3c:23:72:63:ce:92:d8:a8: 10:4e:5a:2c:e2:96:70:94:dc:6f:7c:a9:a0:18:b3: 3f:c6:3f:10:57:45:42:08:58:71:8e:ad:7e:a6:dd: 9c:90:9f:86:de:99:e1:a8:3f:46:e4:47:41:ea:83: d1:90:df:56:5f:52:5a:b9:c9:ef:b4:ce:83:e5:1f: 43:d1:53:c5:45:d8:6a:bf:18:1b:72:dc:9f:07:6f: 43:0a:6e:89:27:ca:e2:17:3a:b4:23:20:2b:65:de: 94:2f:fc:4c:fe:41:77:62:1d:6d:80:eb:fe:13:fa: 60:27:8d:9f:dd:ac:2c:c9:96:f1:ae:ee:96:cd:29: d3:3f:cc:7f:ce:52:24:0a:d1:e8:6f:3a:a9:c0:98: da:b3:02:01:d3:db:63:00:d6:53:ca:2a:d4:1b:b7: a9:3d:e0:09:01:f4:8c:3f:62:23:aa:38:9a:61:ba: b9:46:af:f0:2e:f2:db:cb:94:19:b0:6b:8c:4f:d6: 36:b0:f2:f7:7e:ee:f8:a5:fb:0f:af:a8:94:17:0f: 13:85:18:d9:88:32:e9:c1:b3:37:d7:9f:fc:16:95: 83:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.141.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:ae:c7:65:b3:b8:eb:f2:86:cc:d5:d2:83:d7:88:21:05:b6: d5:75:1e:95:60:36:1b:32:df:b9:c6:46:31:6b:11:0f:7c:2b: cd:79:71:66:f6:a3:65:be:19:b0:bd:9a:32:bf:88:58:b3:db: a0:1a:7e:31:08:bd:83:24:1b:9c:b4:fb:b1:83:e1:60:54:bc: 6e:b4:7e:2c:5d:e5:4a:5e:53:ca:af:08:86:c0:7b:5f:07:9a: 9c:32:05:fe:4d:1a:eb:c1:6f:2e:08:18:a6:c6:32:aa:9b:eb: 04:7b:4c:38:24:b2:cd:cd:ca:e3:4b:bd:e1:11:77:96:8c:7a: 2c:b5:c6:e6:ce:99:c6:35:24:9e:ee:b5:ef:97:e3:b6:df:d0: 30:f5:3d:7a:9d:d4:5d:7a:ea:7d:2e:10:03:a7:e2:bd:ec:dc: f9:8d:58:0b:52:b4:d1:ee:66:de:fa:9d:83:06:be:5c:19:78: e6:f8:12:de:2a:87:8a:62:f1:85:cd:ae:21:80:fe:ca:ee:3c: 99:28:bd:52:99:01:e2:04:7b:5e:f0:0e:40:a8:81:4e:12:54: bb:1a:83:a0:d0:95:c3:c4:58:f0:cd:7d:70:ec:f7:a9:a9:ba: c5:d2:39:56:80:ca:08:73:bd:52:11:9a:da:d5:91:5d:a8:a6: a0:c9:9f:ea -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUDesxjE70fpnoA2klSpDEXECQDg4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIyNjIzMjYwMloX DTI1MTIyNTIzMzEwMlowMzExMC8GA1UEAxMoRkY5NDdCRTE4OEQzNTlFQTdFREY4 ODdEODZEQTJDN0NDNzQ2MEI3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8tbosyhjJ76C2IwK2qm0YBsGU6p2ubG7zX1q/isHksB6WpCjwjcmPOktio EE5aLOKWcJTcb3ypoBizP8Y/EFdFQghYcY6tfqbdnJCfht6Z4ag/RuRHQeqD0ZDf Vl9SWrnJ77TOg+UfQ9FTxUXYar8YG3LcnwdvQwpuiSfK4hc6tCMgK2XelC/8TP5B d2IdbYDr/hP6YCeNn92sLMmW8a7uls0p0z/Mf85SJArR6G86qcCY2rMCAdPbYwDW U8oq1Bu3qT3gCQH0jD9iI6o4mmG6uUav8C7y28uUGbBrjE/WNrDy937u+KX7D6+o lBcPE4UY2Ygy6cGzN9ef/BaVg2MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP+Ue+GI01nqft+IfYbaLHzHRgtwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lOGE5MjM3YS03MjZjLTRjMTktOWI0ZS03Yjk0YjE0MjRjNGIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4YTkyMzdh LTcyNmMtNGMxOS05YjRlLTdiOTRiMTQyNGM0Yi8wL0ZGOTQ3QkUxODhEMzU5RUE3 RURGODg3RDg2REEyQzdDQzc0NjBCNzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnoo0wDQYJKoZIhvcNAQELBQADggEBAHuux2WzuOvyhszV0oPXiCEFttV1HpVg Nhsy37nGRjFrEQ98K815cWb2o2W+GbC9mjK/iFiz26AafjEIvYMkG5y0+7GD4WBU vG60fixd5UpeU8qvCIbAe18HmpwyBf5NGuvBby4IGKbGMqqb6wR7TDgkss3NyuNL veERd5aMeiy1xubOmcY1JJ7ute+X47bf0DD1PXqd1F166n0uEAOn4r3s3PmNWAtS tNHuZt76nYMGvlwZeOb4Et4qh4pi8YXNriGA/sruPJkovVKZAeIEe17wDkCogU4S VLsag6DQlcPEWPDNfXDs96mpusXSOVaAyghzvVIRmtrVkV2opqDJn+o= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:24 2025 by rpki-client on console.sobornost.net