$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer File: 66A8E197E4C920094E2675B2E732B2984C78192F.cer (raw, json) Hash identifier: 2CqpYFPjKFaBiKmQxgvLJLi3Yj5V7sL4v+y44XszP0E= Subject key identifier: 66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4BD37D459C969CE46B325979A17F5306B834CF29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft caRepository: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 21 May 2024 18:12:17 +0000 Certificate not after: Tue 20 May 2025 18:17:17 +0000 Subordinate resources: IP: 2001:df3:98c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d3:7d:45:9c:96:9c:e4:6b:32:59:79:a1:7f:53:06:b8:34:cf:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 21 18:12:17 2024 GMT Not After : May 20 18:17:17 2025 GMT Subject: CN=66A8E197E4C920094E2675B2E732B2984C78192F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3f:d3:e7:63:49:3a:30:ec:ab:4e:75:b1:fc: 98:8b:91:1b:e6:e7:94:19:3e:ca:4b:67:9e:0b:95: 57:2c:73:7d:92:f9:e3:c6:c2:dd:99:06:f2:e9:7e: 0a:d6:be:87:e5:15:f1:6d:d4:6c:57:74:1a:ca:cd: 86:85:77:9b:cc:ec:b1:f6:5b:51:fb:b9:3b:39:bd: 97:6e:6d:86:59:31:2b:0b:35:6d:a5:26:11:40:9e: 71:92:33:98:83:1f:dc:2d:48:c1:3b:b4:0c:89:e3: 77:09:8e:e9:01:4c:00:82:da:88:c2:54:44:83:c1: 54:ea:4a:97:22:18:fc:ae:81:bf:6b:80:ba:93:b7: 6f:f9:6a:24:71:c1:58:57:3c:b5:e2:f9:0e:1f:da: 7e:48:ed:03:59:41:fc:97:82:f1:89:50:e0:8f:40: b3:4c:c7:08:a1:b1:08:60:fe:4b:bb:49:c7:fb:87: 53:be:5a:05:4f:9b:6b:cc:52:5d:af:1a:c2:57:7c: a6:51:78:41:2c:26:70:d6:78:36:75:b1:2a:7e:33: 74:e3:94:5d:ec:7c:51:2d:3b:83:df:6a:1a:c5:1a: 31:fb:84:cb:cd:d7:d4:9f:88:2e:6c:f0:e0:0e:33: 44:1d:9b:d2:5f:38:0e:d9:62:e1:52:e9:79:3f:e5: e2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:98c0::/48 Signature Algorithm: sha256WithRSAEncryption 95:43:a4:cd:f2:10:e7:e2:bb:0a:1a:9a:ae:65:18:8c:52:84: 66:b8:c1:8a:92:e5:28:c5:18:f1:25:3a:ea:45:1f:f4:1f:59: 4a:3f:af:ff:0b:01:40:6b:1e:be:a6:8a:c5:fd:c9:8f:9e:47: d7:46:2b:32:07:20:fd:49:bc:26:76:32:53:ae:e3:7e:c7:b0: 4a:0d:8b:ec:81:35:96:c9:58:a9:20:60:bd:4c:eb:77:77:4e: 92:81:47:82:89:0e:2a:85:66:39:e8:46:99:94:e1:80:8e:60: 48:6a:51:d0:f6:69:88:3b:1b:a5:ce:2b:f3:da:93:db:0a:92: 24:b9:d7:fe:ad:2e:86:b9:86:12:1f:3e:6e:05:9a:58:96:ff: 1a:6c:e7:a0:67:7b:9c:1e:5f:4e:3b:57:83:21:35:9a:40:91: be:5a:7f:37:da:79:ff:b6:c2:ed:e5:a8:3e:b1:f1:43:3e:3a: 3a:d7:51:2b:39:32:c0:24:79:2a:63:b3:6d:3d:d5:a0:38:b3: b5:82:fe:f1:c8:da:40:8a:a7:33:6d:ae:60:27:13:47:e3:eb: db:92:f5:81:21:ab:b5:17:a8:1c:09:a1:97:c4:ed:5f:79:88: 19:a9:42:26:84:b2:25:be:22:df:82:12:c1:e7:ea:25:1d:b5: f2:43:4a:66 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUS9N9RZyWnORrMll5oX9TBrg0zykwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyMTE4MTIxN1oX DTI1MDUyMDE4MTcxN1owMzExMC8GA1UEAxMoNjZBOEUxOTdFNEM5MjAwOTRFMjY3 NUIyRTczMkIyOTg0Qzc4MTkyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMc/0+djSTow7KtOdbH8mIuRG+bnlBk+yktnnguVVyxzfZL548bC3ZkG8ul+ Cta+h+UV8W3UbFd0GsrNhoV3m8zssfZbUfu5Ozm9l25thlkxKws1baUmEUCecZIz mIMf3C1IwTu0DInjdwmO6QFMAILaiMJURIPBVOpKlyIY/K6Bv2uAupO3b/lqJHHB WFc8teL5Dh/afkjtA1lB/JeC8YlQ4I9As0zHCKGxCGD+S7tJx/uHU75aBU+ba8xS Xa8awld8plF4QSwmcNZ4NnWxKn4zdOOUXex8US07g99qGsUaMfuEy83X1J+ILmzw 4A4zRB2b0l84Dtli4VLpeT/l4tcCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGao4ZfkySAJTiZ1sucysphMeBkvMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4MmI4ZjU2 LThlODItNDY0NC1iMDQ5LTJjNWMyZmZiNGQ5OS8xLzY2QThFMTk3RTRDOTIwMDk0 RTI2NzVCMkU3MzJCMjk4NEM3ODE5MkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ3zmMAwDQYJKoZIhvcNAQELBQADggEBAJVDpM3yEOfiuwoamq5lGIxShGa4 wYqS5SjFGPElOupFH/QfWUo/r/8LAUBrHr6misX9yY+eR9dGKzIHIP1JvCZ2MlOu 437HsEoNi+yBNZbJWKkgYL1M63d3TpKBR4KJDiqFZjnoRpmU4YCOYEhqUdD2aYg7 G6XOK/Pak9sKkiS51/6tLoa5hhIfPm4FmliW/xps56Bne5weX047V4MhNZpAkb5a fzfaef+2wu3lqD6x8UM+OjrXUSs5MsAkeSpjs2091aA4s7WC/vHI2kCKpzNtrmAn E0fj69uS9YEhq7UXqBwJoZfE7V95iBmpQiaEsiW+It+CEsHn6iUdtfJDSmY= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:49 2024 by rpki-client on console-fra.rpki-client.org