$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer File: 48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer (raw, json) Hash identifier: CdRa8ftpuBGiu8zUN2fsAG9Pjm0TtuCAnveSufytOMY= Subject key identifier: 48:C1:26:F9:8E:BA:7D:2F:C4:EA:85:78:A5:46:9B:E9:0C:AF:F6:77 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3814E7670E4B82481F9F8C5F88ABFCAD3D63294E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft caRepository: rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 26 Dec 2023 15:10:09 +0000 Certificate not after: Tue 24 Dec 2024 15:15:09 +0000 Subordinate resources: IP: 103.182.52.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:14:e7:67:0e:4b:82:48:1f:9f:8c:5f:88:ab:fc:ad:3d:63:29:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 26 15:10:09 2023 GMT Not After : Dec 24 15:15:09 2024 GMT Subject: CN=48C126F98EBA7D2FC4EA8578A5469BE90CAFF677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:aa:7a:e8:72:46:7b:28:f4:63:f9:ef:9e:65: 85:d4:26:ee:3f:2e:1d:ce:e1:62:b6:78:4f:f0:42: 34:77:df:ff:5a:2a:fa:34:8a:33:48:ef:b5:d6:17: c6:7a:21:45:21:7d:0b:48:09:0b:10:8d:6c:4b:23: a3:4a:4b:c1:0c:81:a1:e8:a6:e3:24:b0:5d:b2:ee: 3f:4c:68:3a:54:62:14:93:92:86:19:8f:1b:07:23: 17:27:bc:ef:de:1c:74:cc:ec:9e:d5:fc:09:62:79: 12:8c:9f:b7:5d:8d:8e:b4:ed:22:ed:d3:a5:ab:b8: a6:5a:eb:db:10:04:f3:81:3e:c5:6f:85:aa:be:b8: 51:40:3c:5f:91:83:ec:7f:46:c9:e5:63:63:07:8d: ea:f7:b1:4a:a6:6b:5b:ae:28:ea:ed:55:89:99:51: 50:0b:f4:59:0c:6f:7d:89:36:e4:db:94:6a:4b:6c: 83:8d:2e:46:1d:91:42:12:a9:fb:e1:43:e7:1a:ac: d3:f0:53:2d:ee:3c:9c:b3:d8:60:9d:28:0f:4d:d9: 34:51:2c:b5:1f:67:3c:ab:9f:91:72:2e:e7:86:d5: a6:62:ff:fd:e3:ff:74:7e:7d:23:94:20:e8:02:3f: 13:c4:a3:3b:b7:39:2e:e8:6f:5a:87:62:f9:08:b2: 77:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 48:C1:26:F9:8E:BA:7D:2F:C4:EA:85:78:A5:46:9B:E9:0C:AF:F6:77 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.52.0/23 Signature Algorithm: sha256WithRSAEncryption 15:8e:45:f5:b2:1e:ce:b9:d1:e2:da:84:d0:ed:5b:fe:de:1a: eb:45:77:d5:54:1a:a4:a7:33:72:4d:c6:64:e8:a1:1c:e6:1e: 14:10:0a:5b:c2:6e:1b:90:a9:93:87:54:93:b1:b4:d9:1f:b4: 44:34:11:a1:ba:c0:47:da:84:7c:e6:24:05:59:b6:a9:14:f0: 0f:ff:9d:fa:74:60:b8:58:52:1e:b7:59:67:8b:99:7a:52:e5: 8b:6f:ca:51:d6:d5:49:69:a9:8b:a4:f6:82:86:ef:32:36:73: 52:9d:be:9e:43:75:61:4f:a2:8c:42:e9:e7:0b:75:14:04:41: 72:b3:04:45:ec:0b:db:09:68:b2:1e:e4:88:af:f5:f8:ec:45: 5e:67:3f:d7:31:22:43:cc:89:ec:d3:b6:08:fa:92:b3:2b:25: bd:0a:c0:1a:03:8a:fc:24:22:cc:f6:bc:47:b9:5e:45:14:ab: a5:95:62:ab:35:3f:e8:64:39:90:11:a5:68:bc:d7:5a:7a:f0: b0:2e:35:1b:63:9b:4e:0e:17:90:94:d3:30:71:9d:bf:c9:b7: cc:b7:af:17:00:a1:3b:fa:71:ca:9b:1c:b2:21:7a:45:0d:24: 0b:48:8f:6a:a1:53:f2:a9:b1:b5:04:44:48:f9:0a:d8:03:3f: ec:d1:67:ca -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUOBTnZw5Lgkgfn4xfiKv8rT1jKU4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIyNjE1MTAwOVoX DTI0MTIyNDE1MTUwOVowMzExMC8GA1UEAxMoNDhDMTI2Rjk4RUJBN0QyRkM0RUE4 NTc4QTU0NjlCRTkwQ0FGRjY3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANGqeuhyRnso9GP5755lhdQm7j8uHc7hYrZ4T/BCNHff/1oq+jSKM0jvtdYX xnohRSF9C0gJCxCNbEsjo0pLwQyBoeim4ySwXbLuP0xoOlRiFJOShhmPGwcjFye8 794cdMzsntX8CWJ5Eoyft12NjrTtIu3Tpau4plrr2xAE84E+xW+Fqr64UUA8X5GD 7H9GyeVjYweN6vexSqZrW64o6u1ViZlRUAv0WQxvfYk25NuUaktsg40uRh2RQhKp ++FD5xqs0/BTLe48nLPYYJ0oD03ZNFEstR9nPKufkXIu54bVpmL//eP/dH59I5Qg 6AI/E8SjO7c5LuhvWodi+Qiyd80CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEjBJvmOun0vxOqFeKVGm+kMr/Z3MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMDgyYmEwZC0yN2UxLTQwMDAtYWNmYS1hMTllYjllMGY2MzcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IwODJiYTBk LTI3ZTEtNDAwMC1hY2ZhLWExOWViOWUwZjYzNy8wLzQ4QzEyNkY5OEVCQTdEMkZD NEVBODU3OEE1NDY5QkU5MENBRkY2NzcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFntjQwDQYJKoZIhvcNAQELBQADggEBABWORfWyHs650eLahNDtW/7eGutFd9VU GqSnM3JNxmTooRzmHhQQClvCbhuQqZOHVJOxtNkftEQ0EaG6wEfahHzmJAVZtqkU 8A//nfp0YLhYUh63WWeLmXpS5YtvylHW1UlpqYuk9oKG7zI2c1Kdvp5DdWFPooxC 6ecLdRQEQXKzBEXsC9sJaLIe5Iiv9fjsRV5nP9cxIkPMiezTtgj6krMrJb0KwBoD ivwkIsz2vEe5XkUUq6WVYqs1P+hkOZARpWi811p68LAuNRtjm04OF5CU0zBxnb/J t8y3rxcAoTv6ccqbHLIhekUNJAtIj2qhU/KpsbUEREj5CtgDP+zRZ8o= -----END CERTIFICATE-----Generated at Wed May 8 14:59:51 2024 by rpki-client on console-ams.rpki-client.org