Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/54AF61D322823AA9528CD145C400C58C1FA4526E.cer
File:                     54AF61D322823AA9528CD145C400C58C1FA4526E.cer (raw, json)
Hash identifier:          DwtUqCv0jFVauGc8EeewtgNuZ5YBZzbygmgav7JApPo=
Subject key identifier:   54:AF:61:D3:22:82:3A:A9:52:8C:D1:45:C4:00:C5:8C:1F:A4:52:6E
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       264106DCC90E3A02AF54A539D53215D96CEC0048
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/54AF61D322823AA9528CD145C400C58C1FA4526E.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 01:29:27 +0000
Certificate not after:    Sun 02 May 2027 01:34:27 +0000
Subordinate resources:    IP: 103.173.54.0/23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:41:06:dc:c9:0e:3a:02:af:54:a5:39:d5:32:15:d9:6c:ec:00:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 01:29:27 2026 GMT
            Not After : May  2 01:34:27 2027 GMT
        Subject: CN=54AF61D322823AA9528CD145C400C58C1FA4526E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:70:ad:1b:53:22:c2:e4:59:95:5a:9f:fa:f8:
                    d6:d8:1e:cf:67:44:cb:fa:b5:82:7b:d1:67:7a:12:
                    1a:e2:27:a9:90:2c:1a:a4:ae:02:71:6a:cd:3b:2a:
                    0f:d7:7e:b6:db:27:8c:95:b0:be:57:92:e6:b1:2c:
                    a0:98:96:da:f4:72:a9:54:45:eb:20:27:d4:ca:02:
                    f8:dc:e8:be:65:78:ef:59:38:93:4b:77:e6:13:84:
                    27:00:00:e6:e6:64:59:ce:b0:39:8b:78:79:c8:b1:
                    dc:d8:00:30:22:ce:fa:50:58:a9:b3:83:7d:48:54:
                    53:6e:dd:5e:31:13:8e:3d:d6:c3:32:ef:3f:24:fa:
                    3e:f5:18:b6:5e:7f:81:dc:bf:47:a7:bd:3d:4e:de:
                    93:3e:07:62:15:39:2c:cb:05:7f:56:18:1b:08:05:
                    de:d1:33:42:d2:f8:c7:77:1d:f3:04:d7:49:0b:d8:
                    c4:52:dd:d6:7e:36:74:13:ec:a0:ae:fe:66:10:3c:
                    1e:45:a9:18:d0:33:f7:09:0e:a2:f8:05:7d:cd:52:
                    64:01:71:b7:51:71:2c:b5:fb:94:b6:05:af:b9:af:
                    d9:f9:35:49:3d:94:fc:fc:bf:d8:d4:da:2f:72:3c:
                    bb:28:0a:33:45:cd:53:b5:e5:e1:7b:7f:cd:64:15:
                    eb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:AF:61:D3:22:82:3A:A9:52:8C:D1:45:C4:00:C5:8C:1F:A4:52:6E
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/54AF61D322823AA9528CD145C400C58C1FA4526E.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:d7:a5:17:a3:bf:c7:e7:ef:18:94:0f:f6:f0:95:4a:68:bf:
         97:e8:64:7d:3f:01:8a:1b:b7:a4:3a:92:f6:59:a3:2d:68:1a:
         e3:f5:bf:76:d5:9b:95:71:e6:60:51:1b:6a:a2:4b:1e:72:1a:
         6e:b5:35:07:79:52:66:13:cb:2c:e8:67:bc:95:f5:53:fe:56:
         88:8d:31:cd:fd:83:ac:8d:a1:60:57:b2:0f:03:3e:73:79:91:
         c4:40:df:4a:6c:ce:95:c7:e7:f3:d5:a3:b7:43:21:28:74:1c:
         05:af:8d:71:f5:3c:e2:16:08:2f:01:fc:17:be:7e:83:e6:a0:
         49:94:f6:3a:7c:33:aa:c4:90:a4:33:72:4c:2d:5c:ba:9e:a1:
         bd:a7:76:6a:57:10:ed:a5:f8:ee:4f:fc:51:a2:ba:14:83:c9:
         ba:ac:4d:0e:be:2c:f3:0e:61:7d:62:5a:31:a9:02:36:81:43:
         de:77:6d:ae:81:58:10:1f:a0:ae:ec:3d:a5:0b:10:91:e7:56:
         19:f6:2b:7c:de:b5:7d:5e:c4:36:5d:d9:e2:77:b3:6b:85:16:
         46:47:33:bd:69:1c:1b:93:14:c5:3b:fc:62:00:e8:86:83:71:
         15:46:f2:ee:7b:a9:9c:96:fd:6d:80:a0:20:20:7b:c4:1e:12:
         36:91:c8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:03:48 2026 by rpki-client