Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/54AAE9715B44524F164DB65A2406118F089C125F.cer
File:                     54AAE9715B44524F164DB65A2406118F089C125F.cer (raw, json)
Hash identifier:          PxeOao2DoZy8sJZL3F6dhPYaLDBXwzvIpQyzUZa0Z5g=
Subject key identifier:   54:AA:E9:71:5B:44:52:4F:16:4D:B6:5A:24:06:11:8F:08:9C:12:5F
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       6E8A484283AB306C76DD57F1F8EF15A2345A9E6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/54AAE9715B44524F164DB65A2406118F089C125F.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 02:36:17 +0000
Certificate not after:    Sun 02 May 2027 02:41:17 +0000
Subordinate resources:    IP: 103.155.104.0/24
                          IP: 2001:df4:c280::/48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:8a:48:42:83:ab:30:6c:76:dd:57:f1:f8:ef:15:a2:34:5a:9e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 02:36:17 2026 GMT
            Not After : May  2 02:41:17 2027 GMT
        Subject: CN=54AAE9715B44524F164DB65A2406118F089C125F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2d:ce:22:4e:25:7b:03:63:b3:2e:c5:9c:28:
                    28:07:33:a0:ad:b0:1d:a3:1e:ea:73:2b:6c:cf:fc:
                    97:ef:e8:3b:3f:ba:06:fe:97:2d:7c:79:fa:b1:e3:
                    79:8c:b8:4c:be:03:62:45:9e:10:6d:6f:97:ed:3d:
                    08:3f:44:6e:06:51:5c:7f:2e:35:36:bc:9c:7a:47:
                    ff:ee:b3:eb:a2:f6:4d:85:e8:27:b1:f1:ff:0e:8c:
                    1d:29:ad:e3:98:b2:a5:0d:7b:79:2e:d7:b5:d9:7f:
                    f8:d0:e3:b6:e8:7a:a9:c7:85:d9:39:04:c1:98:64:
                    f3:f0:01:f3:07:a3:8f:3a:71:ec:b7:97:c0:8e:4e:
                    03:49:dc:ca:e9:54:a2:33:45:ee:c0:c4:cf:1f:73:
                    5f:c1:be:42:ae:d1:6e:bf:c8:ed:e3:40:cd:ee:37:
                    d5:10:12:cc:87:a6:c3:91:e6:83:ff:ec:d5:9c:08:
                    c4:fd:67:ca:69:e4:44:c2:34:c6:2e:ab:07:f9:dc:
                    c3:2b:80:4c:c1:93:d9:c2:29:9a:00:cd:a5:e1:0c:
                    88:70:fc:83:bc:44:ff:3e:79:3a:65:4f:92:8d:37:
                    f8:c0:e3:2e:21:f2:49:37:d5:17:5a:9f:93:8c:41:
                    f2:ac:f9:11:4d:a5:c9:bd:df:cf:1e:bf:32:d2:ef:
                    98:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:AA:E9:71:5B:44:52:4F:16:4D:B6:5A:24:06:11:8F:08:9C:12:5F
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/54AAE9715B44524F164DB65A2406118F089C125F.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.104.0/24
                IPv6:
                  2001:df4:c280::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:53:2d:bb:21:cd:43:e0:d6:fd:d6:14:46:45:52:4c:1c:09:
         1a:41:e6:3d:ef:1a:f1:fd:98:4d:72:6d:d6:ba:3c:95:74:fe:
         21:e7:26:68:19:bd:59:40:b1:2a:28:46:76:09:3b:a1:32:83:
         03:1f:b5:29:3a:9f:99:2d:01:43:ff:49:fe:a9:61:47:da:d5:
         38:28:c3:34:13:ed:ae:84:8f:69:aa:27:f2:d2:98:45:8f:cc:
         ef:96:a6:d0:e1:6e:60:62:58:da:d0:07:cf:b8:a7:8d:54:0f:
         19:f9:e9:3f:8d:a1:01:b1:e2:3e:f4:11:3e:84:b7:2f:b5:d1:
         76:d8:86:a1:61:bd:65:b3:49:8b:38:1a:8a:2f:9e:60:9c:f5:
         53:77:72:8e:b8:42:84:d2:17:67:e5:09:39:9c:1b:6e:c7:5e:
         6a:2d:d3:ba:3a:f7:a7:e1:57:cd:3a:e9:9f:fc:cb:c1:dd:39:
         b2:02:d0:27:9d:e3:b3:1a:47:81:96:e9:d9:3c:a8:95:b8:16:
         89:9f:bd:4c:b5:c9:77:d8:97:5c:d8:09:b6:d9:65:0f:b3:0e:
         18:df:03:54:a5:a5:e8:41:d4:01:96:eb:6a:11:83:5d:16:29:
         a4:e3:56:46:3d:15:e7:f3:26:53:48:05:fe:81:b0:14:a5:20:
         0a:1d:df:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:02:36 2026 by rpki-client