$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer File: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer (raw, json) Hash identifier: nC67vY+qQtmsCFEj0HWbPZJgpozpcAyGYPMWuEmz5jE= Subject key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3C7F87844293A0D64C7473DC187331D54A5192FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft caRepository: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 07 Nov 2024 02:52:03 +0000 Certificate not after: Thu 06 Nov 2025 02:57:03 +0000 Subordinate resources: IP: 114.120.0.0/13 IP: 182.0.0.0/12 IP: 202.3.208.0/20 IP: 221.132.192.0/18 IP: 2404:c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:7f:87:84:42:93:a0:d6:4c:74:73:dc:18:73:31:d5:4a:51:92:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 7 02:52:03 2024 GMT Not After : Nov 6 02:57:03 2025 GMT Subject: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:31:bb:4c:a9:47:a9:52:bf:87:bb:3e:22: ad:c0:d7:1f:c3:a6:aa:3d:87:b2:95:40:3e:30:72: f6:4d:65:54:ce:96:71:2e:d7:6c:bf:b3:f5:59:d5: e0:5e:8c:73:cc:f5:b7:dc:31:17:d2:4c:08:20:6b: fc:15:67:d5:7c:33:7c:d1:85:a6:de:cd:ac:dc:d7: 55:31:68:c7:c5:38:5e:77:05:27:6e:ff:77:8e:b1: a6:c8:c7:2d:4a:63:1c:91:6b:b6:8d:29:38:19:0a: 6c:64:ef:fa:d3:15:73:29:d0:18:4b:ed:6d:d5:d6: 83:74:3e:45:87:1c:d7:a6:c4:21:03:5a:0b:15:13: 8c:ae:12:57:51:ae:1c:c9:5f:74:9f:7f:62:13:fe: 82:60:0f:3d:93:72:bf:42:7d:85:91:83:3e:c3:a7: 1e:04:5c:ae:02:fc:68:fb:9d:2e:a4:0e:30:9e:a6: dc:22:d9:ef:6d:f5:74:ed:65:c2:3a:1c:eb:19:ce: 8e:d9:57:04:18:d5:b9:6e:28:12:c6:6a:48:2f:a2: bc:e7:25:20:25:3a:2b:02:c8:96:6c:75:66:e9:38: 80:ca:2c:3e:94:44:a9:ce:54:00:ae:39:a4:72:82: 6e:0a:25:f6:d3:dd:ce:94:4d:d8:78:03:7a:fc:86: dc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.120.0.0/13 182.0.0.0/12 202.3.208.0/20 221.132.192.0/18 IPv6: 2404:c0::/32 Signature Algorithm: sha256WithRSAEncryption 41:f1:44:9f:51:e3:a2:e7:5b:01:87:95:8f:5d:10:f4:21:6e: 56:03:75:64:de:24:18:fd:01:98:30:b6:f3:dc:37:36:96:c3: a7:e6:ca:bc:c6:29:03:aa:5f:3b:95:76:c6:69:65:48:ff:67: d0:74:5e:66:72:ce:62:30:b4:6c:12:aa:15:86:b3:50:d0:27: 10:14:5a:e0:0e:23:54:33:94:16:5f:db:67:f9:79:1a:48:e0: 78:24:28:d5:da:56:36:20:3a:70:ae:db:7e:1f:a9:21:e4:da: f6:c9:96:80:73:c9:93:d3:24:9e:06:2b:e6:17:9e:c3:72:05: e5:91:43:86:38:28:2d:41:05:83:11:2d:8c:fc:54:08:72:fa: cf:fe:5f:70:c4:72:83:54:29:ee:7d:81:d2:7f:81:7b:a1:3b: 07:15:68:2f:9b:93:af:cf:68:15:6e:00:97:ac:76:01:4e:e3: da:fa:06:9f:86:f3:b1:37:0f:85:ff:f2:bd:ec:eb:2b:36:14: 18:5b:f0:50:c7:8e:41:67:6d:80:d3:7c:3b:05:30:ee:c2:8a: 64:29:69:0b:cd:bd:26:11:1e:db:4f:21:dd:e6:ed:22:c7:ed: 33:90:1b:95:d4:a3:8c:74:ff:a2:ed:83:f4:08:9a:59:6e:1e: 21:b9:92:fe -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgIUPH+HhEKToNZMdHPcGHMx1UpRkvswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEwNzAyNTIwM1oX DTI1MTEwNjAyNTcwM1owMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRG NzJBOEM3Qjk3QTE2QjlDOUYzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALEMMbtMqUepUr+Huz4ircDXH8Omqj2HspVAPjBy9k1lVM6WcS7XbL+z9VnV 4F6Mc8z1t9wxF9JMCCBr/BVn1XwzfNGFpt7NrNzXVTFox8U4XncFJ27/d46xpsjH LUpjHJFrto0pOBkKbGTv+tMVcynQGEvtbdXWg3Q+RYcc16bEIQNaCxUTjK4SV1Gu HMlfdJ9/YhP+gmAPPZNyv0J9hZGDPsOnHgRcrgL8aPudLqQOMJ6m3CLZ7231dO1l wjoc6xnOjtlXBBjVuW4oEsZqSC+ivOclICU6KwLIlmx1Zuk4gMosPpREqc5UAK45 pHKCbgol9tPdzpRN2HgDevyG3O8CAwEAAaOCAtcwggLTMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGZEK4VjtaWQ7YT3Kox7l6FrnJ86MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zMzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzMjhmMjRl LWRjN2YtNDU2Mi1hNTFkLWUyZTM4YzM2NzdkMS8wLzY2NDQyQjg1NjNCNUE1OTBF RDg0RjcyQThDN0I5N0ExNkI5QzlGM0EubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPgYIKwYBBQUHAQcBAf8ELzAtMBwEAgABMBYD AwNyeAMDBLYAAwQEygPQAwQG3YTAMA0EAgACMAcDBQAkBADAMA0GCSqGSIb3DQEB CwUAA4IBAQBB8USfUeOi51sBh5WPXRD0IW5WA3Vk3iQY/QGYMLbz3Dc2lsOn5sq8 xikDql87lXbGaWVI/2fQdF5mcs5iMLRsEqoVhrNQ0CcQFFrgDiNUM5QWX9tn+Xka SOB4JCjV2lY2IDpwrtt+H6kh5Nr2yZaAc8mT0ySeBivmF57DcgXlkUOGOCgtQQWD ES2M/FQIcvrP/l9wxHKDVCnufYHSf4F7oTsHFWgvm5Ovz2gVbgCXrHYBTuPa+gaf hvOxNw+F//K97OsrNhQYW/BQx45BZ22A03w7BTDuwopkKWkLzb0mER7bTyHd5u0i x+0zkBuV1KOMdP+i7YP0CJpZbh4huZL+ -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:49 2024 by rpki-client on console-fra.rpki-client.org