Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer
File:                     53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer (raw, json)
Hash identifier:          1dZjdKLbHVE8j9cZ02QtjsbGuUxv6UFGPFIHUdJTDjs=
Subject key identifier:   53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       57FF939114FF4095E8CD44BCC3BA32BA44DCDA7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 01:14:28 +0000
Certificate not after:    Sun 02 May 2027 01:19:28 +0000
Subordinate resources:    IP: 103.133.144.0/22
                          IP: 2404:4ec0::/32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ff:93:91:14:ff:40:95:e8:cd:44:bc:c3:ba:32:ba:44:dc:da:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 01:14:28 2026 GMT
            Not After : May  2 01:19:28 2027 GMT
        Subject: CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:79:f6:c9:c7:13:0e:72:11:29:66:b0:86:ce:
                    2f:a6:ce:8c:26:97:d7:66:ed:f0:fa:ae:d2:45:87:
                    ce:c9:ad:6f:8d:2c:3c:fa:47:1f:39:86:39:1f:5c:
                    2f:27:56:92:44:12:85:b7:ce:52:1a:1b:d5:57:b1:
                    20:7e:88:f2:59:fc:47:78:06:72:8b:2b:7b:26:af:
                    a9:03:ee:fc:4e:2a:76:ee:41:dc:ea:81:69:97:fb:
                    d2:33:a8:6b:94:f6:de:19:df:bb:57:e8:92:59:f2:
                    d6:6e:09:9b:0b:f0:00:72:4a:98:69:2d:bf:c6:a3:
                    9a:74:b7:4c:cc:90:42:3f:43:c8:3d:30:5f:12:5e:
                    70:41:51:6b:9d:9f:da:cf:8c:81:f2:50:18:c9:56:
                    6c:1c:5f:97:1a:bc:af:cf:88:f9:a8:7d:b3:20:1e:
                    f3:ab:1c:d6:b1:84:d1:b4:16:a7:58:9a:79:f9:17:
                    04:0a:79:91:4a:12:0d:eb:86:57:28:03:11:d2:69:
                    7e:0e:f4:d2:b9:98:99:0e:87:5c:e6:92:23:aa:e9:
                    7a:f5:83:f1:0d:1c:b5:99:54:d2:b3:f5:18:4e:c9:
                    c6:59:79:a5:da:79:75:d5:7c:6f:8b:4f:7e:dd:6c:
                    10:3b:b2:26:91:80:b5:d2:1e:e7:f5:06:53:de:f7:
                    0a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.144.0/22
                IPv6:
                  2404:4ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:29:0f:aa:11:18:f9:ae:a5:c0:ad:b6:1b:19:3b:d0:c3:1d:
         82:de:3c:97:7c:e2:9a:d9:fd:bb:6e:cd:94:dd:24:dc:0f:58:
         3d:fc:72:dd:d7:ee:f7:37:e3:1e:0e:56:60:46:43:58:b9:91:
         d6:17:df:ee:d7:61:9d:32:19:ec:5c:c9:36:dd:88:ec:ac:21:
         5c:f6:72:2d:49:36:30:54:a2:36:be:40:b4:57:f1:2f:bc:db:
         e7:c2:ea:b9:d6:cd:ee:eb:86:7a:bf:13:8c:1c:bd:08:fc:6b:
         24:8d:ba:24:ff:4c:50:1b:95:15:71:74:88:63:fa:db:90:cb:
         fc:3b:f7:17:14:26:cc:12:ec:74:69:5c:7d:cb:a2:cf:d2:c7:
         2e:aa:5d:81:de:30:9b:05:ed:d5:8e:ae:b6:98:53:15:2d:99:
         62:c7:42:84:df:fe:38:ff:8c:4b:57:8d:34:23:22:ee:0f:34:
         c6:c4:82:84:5c:c7:17:cc:af:5b:a9:51:8e:79:e6:45:19:1d:
         3a:eb:0e:86:12:7d:7c:28:c2:01:f6:85:23:45:5e:23:4f:92:
         41:9c:cb:14:69:99:4c:d3:47:71:27:fe:a3:e9:cb:11:1e:31:
         6d:19:72:df:3c:9f:19:d1:44:22:66:d0:89:8c:be:5c:e1:8e:
         ed:87:1f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:03:32 2026 by rpki-client