Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer
File:                     66A8E197E4C920094E2675B2E732B2984C78192F.cer (raw, json)
Hash identifier:          2CqpYFPjKFaBiKmQxgvLJLi3Yj5V7sL4v+y44XszP0E=
Subject key identifier:   66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4BD37D459C969CE46B325979A17F5306B834CF29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 21 May 2024 18:12:17 +0000
Certificate not after:    Tue 20 May 2025 18:17:17 +0000
Subordinate resources:    IP: 2001:df3:98c0::/48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d3:7d:45:9c:96:9c:e4:6b:32:59:79:a1:7f:53:06:b8:34:cf:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May 21 18:12:17 2024 GMT
            Not After : May 20 18:17:17 2025 GMT
        Subject: CN=66A8E197E4C920094E2675B2E732B2984C78192F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3f:d3:e7:63:49:3a:30:ec:ab:4e:75:b1:fc:
                    98:8b:91:1b:e6:e7:94:19:3e:ca:4b:67:9e:0b:95:
                    57:2c:73:7d:92:f9:e3:c6:c2:dd:99:06:f2:e9:7e:
                    0a:d6:be:87:e5:15:f1:6d:d4:6c:57:74:1a:ca:cd:
                    86:85:77:9b:cc:ec:b1:f6:5b:51:fb:b9:3b:39:bd:
                    97:6e:6d:86:59:31:2b:0b:35:6d:a5:26:11:40:9e:
                    71:92:33:98:83:1f:dc:2d:48:c1:3b:b4:0c:89:e3:
                    77:09:8e:e9:01:4c:00:82:da:88:c2:54:44:83:c1:
                    54:ea:4a:97:22:18:fc:ae:81:bf:6b:80:ba:93:b7:
                    6f:f9:6a:24:71:c1:58:57:3c:b5:e2:f9:0e:1f:da:
                    7e:48:ed:03:59:41:fc:97:82:f1:89:50:e0:8f:40:
                    b3:4c:c7:08:a1:b1:08:60:fe:4b:bb:49:c7:fb:87:
                    53:be:5a:05:4f:9b:6b:cc:52:5d:af:1a:c2:57:7c:
                    a6:51:78:41:2c:26:70:d6:78:36:75:b1:2a:7e:33:
                    74:e3:94:5d:ec:7c:51:2d:3b:83:df:6a:1a:c5:1a:
                    31:fb:84:cb:cd:d7:d4:9f:88:2e:6c:f0:e0:0e:33:
                    44:1d:9b:d2:5f:38:0e:d9:62:e1:52:e9:79:3f:e5:
                    e2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:98c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:43:a4:cd:f2:10:e7:e2:bb:0a:1a:9a:ae:65:18:8c:52:84:
         66:b8:c1:8a:92:e5:28:c5:18:f1:25:3a:ea:45:1f:f4:1f:59:
         4a:3f:af:ff:0b:01:40:6b:1e:be:a6:8a:c5:fd:c9:8f:9e:47:
         d7:46:2b:32:07:20:fd:49:bc:26:76:32:53:ae:e3:7e:c7:b0:
         4a:0d:8b:ec:81:35:96:c9:58:a9:20:60:bd:4c:eb:77:77:4e:
         92:81:47:82:89:0e:2a:85:66:39:e8:46:99:94:e1:80:8e:60:
         48:6a:51:d0:f6:69:88:3b:1b:a5:ce:2b:f3:da:93:db:0a:92:
         24:b9:d7:fe:ad:2e:86:b9:86:12:1f:3e:6e:05:9a:58:96:ff:
         1a:6c:e7:a0:67:7b:9c:1e:5f:4e:3b:57:83:21:35:9a:40:91:
         be:5a:7f:37:da:79:ff:b6:c2:ed:e5:a8:3e:b1:f1:43:3e:3a:
         3a:d7:51:2b:39:32:c0:24:79:2a:63:b3:6d:3d:d5:a0:38:b3:
         b5:82:fe:f1:c8:da:40:8a:a7:33:6d:ae:60:27:13:47:e3:eb:
         db:92:f5:81:21:ab:b5:17:a8:1c:09:a1:97:c4:ed:5f:79:88:
         19:a9:42:26:84:b2:25:be:22:df:82:12:c1:e7:ea:25:1d:b5:
         f2:43:4a:66
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUS9N9RZyWnORrMll5oX9TBrg0zykwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyMTE4MTIxN1oX
DTI1MDUyMDE4MTcxN1owMzExMC8GA1UEAxMoNjZBOEUxOTdFNEM5MjAwOTRFMjY3
NUIyRTczMkIyOTg0Qzc4MTkyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMc/0+djSTow7KtOdbH8mIuRG+bnlBk+yktnnguVVyxzfZL548bC3ZkG8ul+
Cta+h+UV8W3UbFd0GsrNhoV3m8zssfZbUfu5Ozm9l25thlkxKws1baUmEUCecZIz
mIMf3C1IwTu0DInjdwmO6QFMAILaiMJURIPBVOpKlyIY/K6Bv2uAupO3b/lqJHHB
WFc8teL5Dh/afkjtA1lB/JeC8YlQ4I9As0zHCKGxCGD+S7tJx/uHU75aBU+ba8xS
Xa8awld8plF4QSwmcNZ4NnWxKn4zdOOUXex8US07g99qGsUaMfuEy83X1J+ILmzw
4A4zRB2b0l84Dtli4VLpeT/l4tcCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFGao4ZfkySAJTiZ1sucysphMeBkvMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9jODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMTCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4MmI4ZjU2
LThlODItNDY0NC1iMDQ5LTJjNWMyZmZiNGQ5OS8xLzY2QThFMTk3RTRDOTIwMDk0
RTI2NzVCMkU3MzJCMjk4NEM3ODE5MkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAgAQ3zmMAwDQYJKoZIhvcNAQELBQADggEBAJVDpM3yEOfiuwoamq5lGIxShGa4
wYqS5SjFGPElOupFH/QfWUo/r/8LAUBrHr6misX9yY+eR9dGKzIHIP1JvCZ2MlOu
437HsEoNi+yBNZbJWKkgYL1M63d3TpKBR4KJDiqFZjnoRpmU4YCOYEhqUdD2aYg7
G6XOK/Pak9sKkiS51/6tLoa5hhIfPm4FmliW/xps56Bne5weX047V4MhNZpAkb5a
fzfaef+2wu3lqD6x8UM+OjrXUSs5MsAkeSpjs2091aA4s7WC/vHI2kCKpzNtrmAn
E0fj69uS9YEhq7UXqBwJoZfE7V95iBmpQiaEsiW+It+CEsHn6iUdtfJDSmY=
-----END CERTIFICATE-----
Generated at Sun Jun 23 00:03:57 2024 by rpki-client on console-ams.rpki-client.org