$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer File: 66A8E197E4C920094E2675B2E732B2984C78192F.cer (raw, json) Hash identifier: AcZUtPkHpTPS5rgDqdrFqZyqxVU9+/grazldLJku6D4= Subject key identifier: 66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6A5A5BBFD53ECA032E1F4410E66C8F933455A4A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft caRepository: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 23 Apr 2025 08:28:58 +0000 Certificate not after: Wed 22 Apr 2026 08:33:58 +0000 Subordinate resources: IP: 2001:df3:98c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:5a:5b:bf:d5:3e:ca:03:2e:1f:44:10:e6:6c:8f:93:34:55:a4:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 23 08:28:58 2025 GMT Not After : Apr 22 08:33:58 2026 GMT Subject: CN=66A8E197E4C920094E2675B2E732B2984C78192F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3f:d3:e7:63:49:3a:30:ec:ab:4e:75:b1:fc: 98:8b:91:1b:e6:e7:94:19:3e:ca:4b:67:9e:0b:95: 57:2c:73:7d:92:f9:e3:c6:c2:dd:99:06:f2:e9:7e: 0a:d6:be:87:e5:15:f1:6d:d4:6c:57:74:1a:ca:cd: 86:85:77:9b:cc:ec:b1:f6:5b:51:fb:b9:3b:39:bd: 97:6e:6d:86:59:31:2b:0b:35:6d:a5:26:11:40:9e: 71:92:33:98:83:1f:dc:2d:48:c1:3b:b4:0c:89:e3: 77:09:8e:e9:01:4c:00:82:da:88:c2:54:44:83:c1: 54:ea:4a:97:22:18:fc:ae:81:bf:6b:80:ba:93:b7: 6f:f9:6a:24:71:c1:58:57:3c:b5:e2:f9:0e:1f:da: 7e:48:ed:03:59:41:fc:97:82:f1:89:50:e0:8f:40: b3:4c:c7:08:a1:b1:08:60:fe:4b:bb:49:c7:fb:87: 53:be:5a:05:4f:9b:6b:cc:52:5d:af:1a:c2:57:7c: a6:51:78:41:2c:26:70:d6:78:36:75:b1:2a:7e:33: 74:e3:94:5d:ec:7c:51:2d:3b:83:df:6a:1a:c5:1a: 31:fb:84:cb:cd:d7:d4:9f:88:2e:6c:f0:e0:0e:33: 44:1d:9b:d2:5f:38:0e:d9:62:e1:52:e9:79:3f:e5: e2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:98c0::/48 Signature Algorithm: sha256WithRSAEncryption 6f:dd:ad:3c:e8:de:71:bd:f2:2d:8b:d2:c1:bd:55:3b:5e:f0: 66:0d:1e:69:f4:12:3f:cd:cd:36:76:a1:7a:5e:55:68:2b:ee: 23:e8:d8:b6:c4:1e:d1:08:35:6e:cb:49:05:7f:64:d7:74:21: f8:ec:4b:12:56:31:2e:11:fb:f5:47:84:e6:aa:ff:27:89:23: ea:2e:a2:48:e9:53:9b:62:38:ec:3b:67:9a:39:f2:f6:39:9c: b9:56:fd:1e:ea:b8:47:f9:e8:79:59:12:91:bf:4e:cd:b8:68: 52:d6:84:34:93:49:cc:8f:83:23:d7:79:69:87:a2:ea:ea:6f: 2d:60:88:e7:4b:99:12:e2:78:85:48:ba:71:89:b7:56:da:ee: 20:b3:7e:c9:08:33:c5:54:da:d7:b1:83:5f:63:37:b3:e0:1b: 6d:71:e2:60:1c:86:e9:06:69:bd:81:40:77:df:09:90:2e:aa: eb:5d:d8:26:2f:86:c4:93:4c:e1:3b:00:ed:a2:64:65:ba:f1: 79:96:c6:05:e7:6e:d8:9e:04:ed:83:57:52:47:2d:2d:de:62: 59:fb:74:37:09:6d:d9:6c:24:f1:8c:8f:88:8a:d4:23:dd:e7: 93:c7:1c:89:fe:06:65:7b:b9:3b:eb:95:3b:ee:c1:be:ee:03: 62:81:e9:be -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUalpbv9U+ygMuH0QQ5myPkzRVpKgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQyMzA4Mjg1OFoX DTI2MDQyMjA4MzM1OFowMzExMC8GA1UEAxMoNjZBOEUxOTdFNEM5MjAwOTRFMjY3 NUIyRTczMkIyOTg0Qzc4MTkyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMc/0+djSTow7KtOdbH8mIuRG+bnlBk+yktnnguVVyxzfZL548bC3ZkG8ul+ Cta+h+UV8W3UbFd0GsrNhoV3m8zssfZbUfu5Ozm9l25thlkxKws1baUmEUCecZIz mIMf3C1IwTu0DInjdwmO6QFMAILaiMJURIPBVOpKlyIY/K6Bv2uAupO3b/lqJHHB WFc8teL5Dh/afkjtA1lB/JeC8YlQ4I9As0zHCKGxCGD+S7tJx/uHU75aBU+ba8xS Xa8awld8plF4QSwmcNZ4NnWxKn4zdOOUXex8US07g99qGsUaMfuEy83X1J+ILmzw 4A4zRB2b0l84Dtli4VLpeT/l4tcCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGao4ZfkySAJTiZ1sucysphMeBkvMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4MmI4ZjU2 LThlODItNDY0NC1iMDQ5LTJjNWMyZmZiNGQ5OS8xLzY2QThFMTk3RTRDOTIwMDk0 RTI2NzVCMkU3MzJCMjk4NEM3ODE5MkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ3zmMAwDQYJKoZIhvcNAQELBQADggEBAG/drTzo3nG98i2L0sG9VTte8GYN Hmn0Ej/NzTZ2oXpeVWgr7iPo2LbEHtEINW7LSQV/ZNd0IfjsSxJWMS4R+/VHhOaq /yeJI+ouokjpU5tiOOw7Z5o58vY5nLlW/R7quEf56HlZEpG/Ts24aFLWhDSTScyP gyPXeWmHourqby1giOdLmRLieIVIunGJt1ba7iCzfskIM8VU2texg19jN7PgG21x 4mAchukGab2BQHffCZAuqutd2CYvhsSTTOE7AO2iZGW68XmWxgXnbtieBO2DV1JH LS3eYln7dDcJbdlsJPGMj4iK1CPd55PHHIn+BmV7uTvrlTvuwb7uA2KB6b4= -----END CERTIFICATE-----Generated at Sat Apr 26 06:13:36 2025 by rpki-client on console.sobornost.net