$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer File: 662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer (raw, json) Hash identifier: w/CSrr808hFEt52l35/5ZYYhlVA9FiR09YMcT2wkRAM= Subject key identifier: 66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2A7DF111D3FF60FB9C5B0A523711E7D027697A5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft caRepository: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 19:37:56 +0000 Certificate not after: Mon 30 Jun 2025 19:42:56 +0000 Subordinate resources: IP: 45.64.252.0/22 IP: 103.19.208.0/22 IP: 113.212.112.0/20 IP: 2404:6d00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:7d:f1:11:d3:ff:60:fb:9c:5b:0a:52:37:11:e7:d0:27:69:7a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 19:37:56 2024 GMT Not After : Jun 30 19:42:56 2025 GMT Subject: CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:59:e6:5b:fb:77:40:ce:ff:b9:bf:44:a2: 57:72:25:20:5e:33:47:c3:d5:10:c0:b6:9b:5c:65: 1a:25:6c:76:86:1e:32:24:25:68:0f:33:af:57:d3: 90:cf:1c:f0:cb:ad:33:e2:d1:f6:6b:0b:ef:08:e6: 47:4c:82:5d:a9:41:67:4e:37:7b:5d:a0:1e:92:6e: d3:85:6a:e6:98:16:8a:bd:d0:18:0f:f6:6e:dd:92: 63:40:83:55:aa:c7:54:72:c3:48:e8:1f:fc:02:43: 91:51:68:7c:b1:58:ad:3e:a9:1e:6d:ac:85:ed:a8: df:67:79:d2:63:08:89:1b:88:19:0d:56:72:b9:95: ef:73:83:1c:6f:e1:52:63:34:a6:da:a9:28:2d:9f: fe:6a:ff:b6:7a:6a:f5:e5:4a:b1:82:08:06:f6:32: 91:55:6d:3c:ef:b7:78:42:45:f0:40:6a:0c:58:96: 7f:c5:5a:3c:9d:27:c8:28:6c:fc:c5:47:35:10:57: 00:fd:d1:4a:ba:2c:78:ed:f2:f1:d9:0c:2f:9d:b5: 51:70:30:c6:f3:cb:75:e0:43:81:80:86:2f:5e:44: b6:12:41:d5:f0:4c:de:f9:7c:92:26:78:ee:47:44: 3a:7b:40:7a:7b:f7:8b:be:94:f7:74:7a:21:0a:fe: b5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.64.252.0/22 103.19.208.0/22 113.212.112.0/20 IPv6: 2404:6d00::/32 Signature Algorithm: sha256WithRSAEncryption 1e:22:ae:1d:6a:cc:98:b1:08:31:a5:a1:34:f5:f6:c3:d6:b0: 05:f1:b6:fe:1a:f6:be:33:4f:ff:d9:59:50:08:fe:a9:2e:f5: 35:1d:49:a6:cb:e9:2e:79:ac:73:1b:af:63:7c:4a:3b:ac:86: a4:f4:dc:10:0a:85:91:64:60:f3:ff:8c:98:5a:2c:3c:a3:af: 26:7d:ee:e1:c3:81:82:8d:b1:77:dd:dc:11:7a:73:c7:25:43: 94:6f:96:f9:88:b8:5f:5a:74:57:c8:fa:b4:d8:ee:8a:78:a8: 3c:14:dc:ec:f2:eb:f4:66:e6:32:6f:45:01:2e:79:61:b5:9f: e6:b2:26:f2:a8:51:67:21:5e:b9:3f:3d:73:2e:8e:48:81:4b: ac:52:34:fa:d6:d0:00:a8:d4:0e:98:b9:18:43:d0:f9:3d:ec: 8a:55:72:02:88:93:c6:c7:4f:04:e8:06:9d:20:3a:8b:42:bf: 70:27:d0:6c:f2:95:0e:c6:d1:89:3d:b4:fb:76:3f:cc:7d:53: 94:0d:a1:2c:3e:0e:b5:92:55:c1:f2:1b:85:70:3e:03:9a:51: ca:a6:b9:64:9b:53:2b:5d:82:d2:72:d2:5a:5e:46:2e:30:4d: ee:e3:25:39:fa:bd:f3:32:32:4c:e3:ba:4b:6f:df:eb:70:f0: c5:a7:ba:2d -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUKn3xEdP/YPucWwpSNxHn0Cdpel0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE5Mzc1NloX DTI1MDYzMDE5NDI1NlowMzExMC8GA1UEAxMoNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0 MDlGQzJFOUM4RDVDNkU2MThFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALu7WeZb+3dAzv+5v0SiV3IlIF4zR8PVEMC2m1xlGiVsdoYeMiQlaA8zr1fT kM8c8MutM+LR9msL7wjmR0yCXalBZ043e12gHpJu04Vq5pgWir3QGA/2bt2SY0CD VarHVHLDSOgf/AJDkVFofLFYrT6pHm2she2o32d50mMIiRuIGQ1WcrmV73ODHG/h UmM0ptqpKC2f/mr/tnpq9eVKsYIIBvYykVVtPO+3eEJF8EBqDFiWf8VaPJ0nyChs /MVHNRBXAP3RSroseO3y8dkML521UXAwxvPLdeBDgYCGL15EthJB1fBM3vl8kiZ4 7kdEOntAenv3i76U93R6IQr+tVMCAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGYq1ZMOxUpISSVAn8LpyNXG5hjiMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82NDgzMzA3NC0zMzBlLTRhYWEtOGMwMC0wNDA4OTBhNzFhMTEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0ODMzMDc0 LTMzMGUtNGFhYS04YzAwLTA0MDg5MGE3MWExMS8wLzY2MkFENTkzMEVDNTRBNDg0 OTI1NDA5RkMyRTlDOEQ1QzZFNjE4RTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BAItQPwDBAJnE9ADBARx1HAwDQQCAAIwBwMFACQEbQAwDQYJKoZIhvcNAQELBQAD ggEBAB4irh1qzJixCDGloTT19sPWsAXxtv4a9r4zT//ZWVAI/qku9TUdSabL6S55 rHMbr2N8SjushqT03BAKhZFkYPP/jJhaLDyjryZ97uHDgYKNsXfd3BF6c8clQ5Rv lvmIuF9adFfI+rTY7op4qDwU3Ozy6/Rm5jJvRQEueWG1n+ayJvKoUWchXrk/PXMu jkiBS6xSNPrW0ACo1A6YuRhD0Pk97IpVcgKIk8bHTwToBp0gOotCv3An0GzylQ7G 0Yk9tPt2P8x9U5QNoSw+DrWSVcHyG4VwPgOaUcqmuWSbUytdgtJy0lpeRi4wTe7j JTn6vfMyMkzjuktv3+tw8MWnui0= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:42 2024 by rpki-client on console-ams.rpki-client.org