$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer File: 66A8E197E4C920094E2675B2E732B2984C78192F.cer (raw, json) Hash identifier: OxnqwJqeHwvJFaB76nCk8rSlmEHA4lwLizMewu1RMQU= Subject key identifier: 66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 15710A57B4D041F0266F229A161875734C6EC9C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft caRepository: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 25 Mar 2026 19:11:17 +0000 Certificate not after: Wed 24 Mar 2027 19:16:17 +0000 Subordinate resources: IP: 2001:df3:98c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:71:0a:57:b4:d0:41:f0:26:6f:22:9a:16:18:75:73:4c:6e:c9:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 25 19:11:17 2026 GMT Not After : Mar 24 19:16:17 2027 GMT Subject: CN=66A8E197E4C920094E2675B2E732B2984C78192F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3f:d3:e7:63:49:3a:30:ec:ab:4e:75:b1:fc: 98:8b:91:1b:e6:e7:94:19:3e:ca:4b:67:9e:0b:95: 57:2c:73:7d:92:f9:e3:c6:c2:dd:99:06:f2:e9:7e: 0a:d6:be:87:e5:15:f1:6d:d4:6c:57:74:1a:ca:cd: 86:85:77:9b:cc:ec:b1:f6:5b:51:fb:b9:3b:39:bd: 97:6e:6d:86:59:31:2b:0b:35:6d:a5:26:11:40:9e: 71:92:33:98:83:1f:dc:2d:48:c1:3b:b4:0c:89:e3: 77:09:8e:e9:01:4c:00:82:da:88:c2:54:44:83:c1: 54:ea:4a:97:22:18:fc:ae:81:bf:6b:80:ba:93:b7: 6f:f9:6a:24:71:c1:58:57:3c:b5:e2:f9:0e:1f:da: 7e:48:ed:03:59:41:fc:97:82:f1:89:50:e0:8f:40: b3:4c:c7:08:a1:b1:08:60:fe:4b:bb:49:c7:fb:87: 53:be:5a:05:4f:9b:6b:cc:52:5d:af:1a:c2:57:7c: a6:51:78:41:2c:26:70:d6:78:36:75:b1:2a:7e:33: 74:e3:94:5d:ec:7c:51:2d:3b:83:df:6a:1a:c5:1a: 31:fb:84:cb:cd:d7:d4:9f:88:2e:6c:f0:e0:0e:33: 44:1d:9b:d2:5f:38:0e:d9:62:e1:52:e9:79:3f:e5: e2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:98c0::/48 Signature Algorithm: sha256WithRSAEncryption 2e:cb:dc:01:fd:d4:55:cd:ae:6c:9d:d7:cb:44:e4:19:6f:52: 73:64:d2:c9:ce:23:4d:41:48:4f:5f:5d:14:99:d0:85:a2:f1: ab:81:4c:25:c1:a9:1a:9b:ff:bd:8f:36:3d:10:07:1f:9c:0b: 20:f8:d4:34:f7:dc:74:12:57:95:af:38:39:45:99:21:9a:6f: 14:c0:d1:d6:8e:91:df:fb:84:60:26:28:76:0a:a9:f1:12:37: fe:a1:25:7c:76:e3:cd:0e:0a:82:44:e9:9b:23:95:99:31:11: cd:20:26:e3:7f:b4:eb:53:53:a2:6b:74:b2:1e:93:39:56:3a: a8:87:fc:7a:66:77:a1:5e:61:d0:92:33:3e:39:a3:28:85:bf: 53:e1:b8:27:3e:7c:cf:40:34:84:57:8e:f3:40:7d:5f:2d:d7: ca:18:5c:ed:6d:03:e0:4a:f9:39:58:28:df:4c:e3:3f:0f:b3: 96:56:7b:70:b4:61:81:a8:be:fb:a8:59:f6:8f:ba:4c:9d:b3: cd:18:76:c8:e8:b5:26:ef:63:11:d2:e9:a4:71:be:a6:e4:91: 66:d1:bf:4c:e9:06:23:97:3d:67:89:8e:e0:7e:fa:68:20:1f: e0:39:e2:91:75:be:77:36:c2:7f:80:de:a7:53:ec:16:d6:b5: a5:af:1a:47 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUFXEKV7TQQfAmbyKaFhh1c0xuycgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMyNTE5MTExN1oX DTI3MDMyNDE5MTYxN1owMzExMC8GA1UEAxMoNjZBOEUxOTdFNEM5MjAwOTRFMjY3 NUIyRTczMkIyOTg0Qzc4MTkyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMc/0+djSTow7KtOdbH8mIuRG+bnlBk+yktnnguVVyxzfZL548bC3ZkG8ul+ Cta+h+UV8W3UbFd0GsrNhoV3m8zssfZbUfu5Ozm9l25thlkxKws1baUmEUCecZIz mIMf3C1IwTu0DInjdwmO6QFMAILaiMJURIPBVOpKlyIY/K6Bv2uAupO3b/lqJHHB WFc8teL5Dh/afkjtA1lB/JeC8YlQ4I9As0zHCKGxCGD+S7tJx/uHU75aBU+ba8xS Xa8awld8plF4QSwmcNZ4NnWxKn4zdOOUXex8US07g99qGsUaMfuEy83X1J+ILmzw 4A4zRB2b0l84Dtli4VLpeT/l4tcCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGao4ZfkySAJTiZ1sucysphMeBkvMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4MmI4ZjU2 LThlODItNDY0NC1iMDQ5LTJjNWMyZmZiNGQ5OS8xLzY2QThFMTk3RTRDOTIwMDk0 RTI2NzVCMkU3MzJCMjk4NEM3ODE5MkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ3zmMAwDQYJKoZIhvcNAQELBQADggEBAC7L3AH91FXNrmyd18tE5BlvUnNk 0snOI01BSE9fXRSZ0IWi8auBTCXBqRqb/72PNj0QBx+cCyD41DT33HQSV5WvODlF mSGabxTA0daOkd/7hGAmKHYKqfESN/6hJXx2480OCoJE6ZsjlZkxEc0gJuN/tOtT U6JrdLIekzlWOqiH/Hpmd6FeYdCSMz45oyiFv1PhuCc+fM9ANIRXjvNAfV8t18oY XO1tA+BK+TlYKN9M4z8Ps5ZWe3C0YYGovvuoWfaPukyds80YdsjotSbvYxHS6aRx vqbkkWbRv0zpBiOXPWeJjuB++mggH+A54pF1vnc2wn+A3qdT7BbWtaWvGkc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:37:51 2026 by rpki-client