$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer File: 54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer (raw, json) Hash identifier: uh5eCkks+QuHTs7dHNsP7RHA0InWZHIZDI9YSNWs1c4= Subject key identifier: 54:AA:A1:CA:EA:4D:EB:FC:7C:80:5B:C8:2C:9E:23:8D:F3:38:F2:A5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5665320C32BEC55A621F47F1FC15DC98DF9CDCF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:57:38 +0000 Certificate not after: Sun 02 May 2027 00:02:38 +0000 Subordinate resources: IP: 103.172.242.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:65:32:0c:32:be:c5:5a:62:1f:47:f1:fc:15:dc:98:df:9c:dc:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:57:38 2026 GMT Not After : May 2 00:02:38 2027 GMT Subject: CN=54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1a:71:16:28:dc:3f:84:24:d0:78:c6:ba:db: 10:25:96:22:6a:63:e2:c8:af:8c:53:76:19:47:2b: 0e:ef:86:e6:15:79:de:a0:89:7f:49:4f:a4:3d:b0: 6f:5c:84:e1:e0:99:57:5f:06:dc:85:b0:11:e7:a9: aa:e7:15:a6:77:2c:d7:d4:d5:ae:f5:54:9c:bc:1a: 44:2d:06:26:99:c1:17:04:ab:de:74:4b:67:8b:95: 96:60:70:b3:aa:09:be:89:8f:8d:69:65:03:ec:31: e6:61:55:da:48:9d:af:4f:2e:d5:0e:56:79:9c:3b: 7c:9c:25:f2:36:45:fe:c1:0e:c0:4d:06:b7:5e:a6: 2c:68:7e:e2:f6:4a:b6:ea:a7:45:80:b2:a3:c7:10: 21:07:e4:e7:c0:48:13:61:ed:db:99:d3:df:78:52: 80:65:07:9e:59:d0:b9:d4:50:de:c1:6e:37:bc:37: 5b:08:f6:93:9b:30:45:72:27:82:8d:d3:51:06:e1: 9c:60:be:b0:52:cf:d3:9e:bd:39:c3:fe:c2:14:9c: 9b:05:6e:eb:32:51:94:3f:e3:b2:53:fa:c2:68:cf: 36:30:4e:ba:33:f9:28:f7:00:42:be:d4:20:da:3b: a2:16:c6:a8:0e:59:bc:07:6b:97:fa:3c:66:ad:47: 28:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 54:AA:A1:CA:EA:4D:EB:FC:7C:80:5B:C8:2C:9E:23:8D:F3:38:F2:A5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.242.0/23 Signature Algorithm: sha256WithRSAEncryption 24:7f:ee:91:07:6c:0b:73:eb:e0:1b:ce:ac:db:0b:32:51:d3: 96:e7:08:35:05:34:6c:44:d2:29:43:e8:20:14:65:86:90:e0: 37:a5:f9:79:f0:e5:a1:23:3e:48:72:ae:90:aa:8a:88:a3:72: ab:b8:79:eb:ea:3f:05:a7:65:cb:2d:63:ba:66:95:b8:be:13: 3a:37:0f:0f:9c:c1:68:df:50:43:eb:3a:53:e0:94:ae:1d:bf: 7b:13:83:9d:85:c7:80:1d:16:cf:4c:0d:f1:67:52:c2:f6:a5: 15:94:af:a5:28:e0:c2:06:d6:b7:84:30:76:ee:c9:96:98:01: 6f:6d:6f:82:09:8a:d6:a7:ec:48:51:39:79:65:06:dc:d3:7d: 81:56:9a:59:8f:65:7f:aa:d4:92:b7:45:a4:66:c1:79:f1:86: bf:e8:ee:34:4d:48:2e:23:a7:cd:e0:ec:44:50:ab:e7:7f:b9: 52:0a:09:ba:06:3e:4d:40:50:21:bb:23:d2:13:7d:c8:c5:07: 4b:72:e8:5b:ee:b5:7d:5c:b7:0c:04:1f:53:d9:69:58:2e:c2: 05:7b:2f:82:e7:69:72:8c:cc:fa:52:fc:c6:b0:4e:10:0a:7e: dc:e2:d8:1a:15:62:ae:08:59:cf:82:a5:7c:91:65:f2:32:ef: 33:04:70:2c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUVmUyDDK+xVpiH0fx/BXcmN+c3PUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTczOFoX DTI3MDUwMjAwMDIzOFowMzExMC8GA1UEAxMoNTRBQUExQ0FFQTRERUJGQzdDODA1 QkM4MkM5RTIzOERGMzM4RjJBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUacRYo3D+EJNB4xrrbECWWImpj4sivjFN2GUcrDu+G5hV53qCJf0lPpD2w b1yE4eCZV18G3IWwEeepqucVpncs19TVrvVUnLwaRC0GJpnBFwSr3nRLZ4uVlmBw s6oJvomPjWllA+wx5mFV2kidr08u1Q5WeZw7fJwl8jZF/sEOwE0Gt16mLGh+4vZK tuqnRYCyo8cQIQfk58BIE2Ht25nT33hSgGUHnlnQudRQ3sFuN7w3Wwj2k5swRXIn go3TUQbhnGC+sFLP0569OcP+whScmwVu6zJRlD/jslP6wmjPNjBOujP5KPcAQr7U INo7ohbGqA5ZvAdrl/o8Zq1HKP8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFSqocrqTev8fIBbyCyeI43zOPKlMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFiNmQ4Zjk3LWM4MDYtNDc5OS04NWUwLThjY2YxOGRiYmIzMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xYjZkOGY5 Ny1jODA2LTQ3OTktODVlMC04Y2NmMThkYmJiMzEvMC81NEFBQTFDQUVBNERFQkZD N0M4MDVCQzgyQzlFMjM4REYzMzhGMkE1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6zyMA0GCSqGSIb3DQEBCwUAA4IBAQAkf+6RB2wLc+vgG86s2wsyUdOW5wg1 BTRsRNIpQ+ggFGWGkOA3pfl58OWhIz5Icq6QqoqIo3KruHnr6j8Fp2XLLWO6ZpW4 vhM6Nw8PnMFo31BD6zpT4JSuHb97E4OdhceAHRbPTA3xZ1LC9qUVlK+lKODCBta3 hDB27smWmAFvbW+CCYrWp+xIUTl5ZQbc032BVppZj2V/qtSSt0WkZsF58Ya/6O40 TUguI6fN4OxEUKvnf7lSCgm6Bj5NQFAhuyPSE33IxQdLcuhb7rV9XLcMBB9T2WlY LsIFey+C52lyjMz6UvzGsE4QCn7c4tgaFWKuCFnPgqV8kWXyMu8zBHAs -----END CERTIFICATE-----Generated at Tue May 12 22:03:23 2026 by rpki-client