$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer File: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer (raw, json) Hash identifier: M9E1eiPhylSrv4qEh0zqma6HvhaUH0S3Pqz8HbGA0zw= Subject key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1EE53D6D66672A3C747FCA86926D723CE03E20C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft caRepository: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 19 Dec 2023 16:10:54 +0000 Certificate not after: Tue 17 Dec 2024 16:15:54 +0000 Subordinate resources: IP: 103.209.248.0/22 IP: 2405:6380::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e5:3d:6d:66:67:2a:3c:74:7f:ca:86:92:6d:72:3c:e0:3e:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 19 16:10:54 2023 GMT Not After : Dec 17 16:15:54 2024 GMT Subject: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ed:5c:d2:7b:10:7b:1b:00:97:56:c5:82:ee: bd:0e:b9:96:9e:70:60:1a:d8:c3:83:42:aa:01:f3: 18:27:b8:13:ed:da:b5:a0:50:c4:72:00:39:3d:55: 63:67:3f:9b:0a:5e:b8:d3:06:fe:91:24:0b:65:89: 86:85:d4:30:d2:9b:d2:8a:d4:41:e4:b0:95:75:04: ce:30:05:e7:13:4d:6b:f6:9b:f8:59:a2:d5:4a:f8: c3:bc:00:01:e0:bb:50:72:de:d6:00:d6:1e:45:fb: 6c:f2:6a:e7:cf:70:8c:18:6f:9c:b0:9f:f1:91:81: cb:7f:c4:c0:65:0f:5a:3f:74:99:e8:44:f5:d0:08: d3:68:0f:62:a5:ff:2d:88:9b:3d:9c:2f:1a:31:5d: 4e:3c:d2:d7:8f:a3:03:11:9a:b7:27:df:9b:8e:9a: e7:80:6e:93:38:1b:4b:1e:fa:bb:70:f3:35:4b:3a: 60:a4:d6:78:4a:d5:f7:9c:50:8f:7f:79:6a:a9:44: 2b:77:94:80:5b:1c:4e:21:62:8a:1b:87:02:77:ee: ea:5d:48:40:ef:d5:55:e8:d4:3c:71:a5:8b:01:0f: aa:96:4a:07:82:6f:8f:2c:1e:de:04:9b:64:4f:cb: ce:d6:f0:69:2b:9b:58:2e:83:80:ba:ec:8e:f1:4b: c1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.209.248.0/22 IPv6: 2405:6380::/32 Signature Algorithm: sha256WithRSAEncryption 15:00:be:16:b8:7b:8b:19:2f:8c:90:b6:cd:d2:62:fe:bb:6a: 84:90:6e:54:82:79:1f:42:8b:4e:c3:59:f6:54:ab:0b:38:0a: 9e:82:b7:5b:55:d4:99:ce:cc:9e:4e:f3:ca:84:fd:42:cb:9c: da:85:fd:ff:e4:16:16:6f:e6:ab:06:82:b2:24:e7:35:84:72: ee:d5:d5:48:d6:1e:e4:9e:12:e9:99:97:b9:60:10:3b:5c:e7: 73:7a:b6:b8:de:8c:74:3c:f0:38:78:35:12:12:cf:90:a3:7d: 98:ff:97:d7:30:54:c8:c8:bf:f5:e6:1f:a9:09:ae:dd:96:b1: 5b:84:d7:c3:0e:c7:55:44:04:a8:40:3b:12:65:3d:d0:01:e7: 7c:93:e6:2b:a1:be:62:de:1a:a4:81:dc:8f:61:95:3f:7d:e1: 76:a5:a6:34:d5:8c:a0:60:35:04:ab:5b:ce:da:dc:a5:7e:7d: 05:b1:74:75:9e:b5:b8:f5:9c:35:c6:ba:3e:ac:91:af:ed:6c: 12:02:a3:44:fb:94:89:46:75:3f:9a:c6:14:15:07:c9:59:71: 31:68:08:6a:cf:14:ef:23:e7:3b:a9:62:75:c0:10:05:4d:c3: a3:35:08:a5:22:6f:bc:ed:19:a2:8b:cb:95:53:44:b1:95:97: ed:10:8c:2a -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUHuU9bWZnKjx0f8qGkm1yPOA+IMAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIxOTE2MTA1NFoX DTI0MTIxNzE2MTU1NFowMzExMC8GA1UEAxMoNjZBNkI2MENFMDBGMzlEM0QzQzIy ODAyNEM4N0QyNzk5QkU1NzBFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMftXNJ7EHsbAJdWxYLuvQ65lp5wYBrYw4NCqgHzGCe4E+3ataBQxHIAOT1V Y2c/mwpeuNMG/pEkC2WJhoXUMNKb0orUQeSwlXUEzjAF5xNNa/ab+Fmi1Ur4w7wA AeC7UHLe1gDWHkX7bPJq589wjBhvnLCf8ZGBy3/EwGUPWj90mehE9dAI02gPYqX/ LYibPZwvGjFdTjzS14+jAxGatyffm46a54BukzgbSx76u3DzNUs6YKTWeErV95xQ j395aqlEK3eUgFscTiFiihuHAnfu6l1IQO/VVejUPHGliwEPqpZKB4Jvjywe3gSb ZE/LztbwaSubWC6DgLrsjvFLwdkCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGamtgzgDznT08IoAkyH0nmb5XDnMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83YzA3NGNkOC0yODMwLTRlYWItYmRkNC1hODA3ZWM1MTE1ZGEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdjMDc0Y2Q4 LTI4MzAtNGVhYi1iZGQ0LWE4MDdlYzUxMTVkYS8wLzY2QTZCNjBDRTAwRjM5RDNE M0MyMjgwMjRDODdEMjc5OUJFNTcwRTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJn0fgwDQQCAAIwBwMFACQFY4AwDQYJKoZIhvcNAQELBQADggEBABUAvha4e4sZ L4yQts3SYv67aoSQblSCeR9Ci07DWfZUqws4Cp6Ct1tV1JnOzJ5O88qE/ULLnNqF /f/kFhZv5qsGgrIk5zWEcu7V1UjWHuSeEumZl7lgEDtc53N6trjejHQ88Dh4NRIS z5CjfZj/l9cwVMjIv/XmH6kJrt2WsVuE18MOx1VEBKhAOxJlPdAB53yT5iuhvmLe GqSB3I9hlT994XalpjTVjKBgNQSrW87a3KV+fQWxdHWetbj1nDXGuj6ska/tbBIC o0T7lIlGdT+axhQVB8lZcTFoCGrPFO8j5zupYnXAEAVNw6M1CKUib7ztGaKLy5VT RLGVl+0QjCo= -----END CERTIFICATE-----Generated at Tue May 7 18:07:10 2024 by rpki-client on console-fra.rpki-client.org