$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/54C2B096ABA577840E8CFF28A45F9E0B066F361F.cer File: 54C2B096ABA577840E8CFF28A45F9E0B066F361F.cer (raw, json) Hash identifier: /a71Qd7bJ+a4GnvSjV2AThr4d8uxVvFZJLYrPZLCb9E= Subject key identifier: 54:C2:B0:96:AB:A5:77:84:0E:8C:FF:28:A4:5F:9E:0B:06:6F:36:1F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 065779D51A373676F4808AA6AB6B40FE3EA2A055 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/54C2B096ABA577840E8CFF28A45F9E0B066F361F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:05:02 +0000 Certificate not after: Sun 02 May 2027 02:10:02 +0000 Subordinate resources: IP: 103.132.40.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:57:79:d5:1a:37:36:76:f4:80:8a:a6:ab:6b:40:fe:3e:a2:a0:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:05:02 2026 GMT Not After : May 2 02:10:02 2027 GMT Subject: CN=54C2B096ABA577840E8CFF28A45F9E0B066F361F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0e:58:37:e3:cc:40:a3:b6:35:17:b7:ad:1c: 13:12:1d:a1:c9:03:db:21:97:cf:d3:de:46:8f:28: 52:28:7f:fa:44:c6:71:ea:e2:90:16:86:31:c9:5d: d0:8e:90:5c:01:11:3e:a0:d6:2a:7f:1e:31:90:76: 6c:36:37:ea:c3:26:08:63:f6:9d:3e:b6:48:ba:81: 07:d7:de:fc:47:41:c7:5d:46:76:60:25:18:9f:32: 51:d4:18:4c:3b:01:a2:39:a4:23:b7:ae:e6:28:1c: 5c:7d:1b:35:2f:3c:a7:a1:29:e2:c7:0b:b0:e1:79: 64:59:c8:fc:68:f0:69:dc:49:e6:53:79:9d:c3:96: f9:d7:8a:53:ab:58:0e:51:99:f9:e1:c0:50:2c:1a: 50:ce:11:e0:14:a7:97:f0:7c:9d:4a:8a:8d:8a:c8: ee:1c:39:33:e2:53:6f:45:b3:64:ba:bd:e0:a5:2c: e4:c4:db:e0:4c:62:e5:b5:94:72:99:d1:6b:54:6d: 15:a0:a4:76:97:03:ec:c2:d5:4b:cd:38:99:3f:35: 12:bd:42:ff:21:1f:f8:c6:93:3e:e4:bf:f9:0a:e5: 13:53:07:25:ae:36:d4:21:d8:48:8d:7a:34:52:6d: 08:9c:c0:ea:ca:a2:7f:0d:2d:85:cf:68:cb:35:bb: f0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 54:C2:B0:96:AB:A5:77:84:0E:8C:FF:28:A4:5F:9E:0B:06:6F:36:1F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/54C2B096ABA577840E8CFF28A45F9E0B066F361F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.132.40.0/23 Signature Algorithm: sha256WithRSAEncryption 46:2e:8d:0f:50:8e:2a:20:33:b9:be:1c:1a:43:0d:f9:a5:3b: ac:33:9e:ac:df:c0:d4:92:ff:3c:a2:d0:85:c6:7d:69:7e:07: 2c:87:5a:ba:14:fa:44:c6:53:a7:ff:8f:05:d7:9d:d0:d8:01: 1f:94:63:16:04:3d:23:07:e1:dc:51:52:02:0a:e4:57:4e:23: d8:cb:59:89:0a:4f:7e:b0:70:93:a0:6b:39:2d:fa:b8:db:8e: 7e:33:49:68:5f:47:7e:d3:6e:5e:e6:7a:36:d7:55:af:ae:70: 93:1b:c7:c7:e7:c8:57:0b:d7:97:78:b5:a1:38:63:5c:bd:cb: 62:32:05:af:66:3d:dc:e6:ec:8d:53:6f:79:b6:ba:9e:ad:ef: d3:b8:bf:c3:66:36:08:f1:b0:ea:15:45:4b:17:3b:d2:04:52: 52:a2:d2:e4:4a:fb:01:90:23:ff:e2:bc:81:d5:b4:ff:d3:32: 9a:e1:f5:53:31:2a:69:7e:0b:a7:56:70:1a:74:b4:8c:03:76: cc:8b:b1:22:ec:7f:77:31:89:85:ec:b5:4c:ea:65:65:5f:68: 5a:0e:3e:a6:b6:27:17:ac:00:fc:4b:e8:a6:89:1c:ae:0d:b6: 2c:04:b9:46:81:ed:68:28:b8:eb:82:d6:e0:20:fa:21:1a:41: 9e:72:00:9d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUBld51Ro3Nnb0gIqmq2tA/j6ioFUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDUwMloX DTI3MDUwMjAyMTAwMlowMzExMC8GA1UEAxMoNTRDMkIwOTZBQkE1Nzc4NDBFOENG RjI4QTQ1RjlFMEIwNjZGMzYxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKoOWDfjzECjtjUXt60cExIdockD2yGXz9PeRo8oUih/+kTGcerikBaGMcld 0I6QXAERPqDWKn8eMZB2bDY36sMmCGP2nT62SLqBB9fe/EdBx11GdmAlGJ8yUdQY TDsBojmkI7eu5igcXH0bNS88p6Ep4scLsOF5ZFnI/GjwadxJ5lN5ncOW+deKU6tY DlGZ+eHAUCwaUM4R4BSnl/B8nUqKjYrI7hw5M+JTb0WzZLq94KUs5MTb4Exi5bWU cpnRa1RtFaCkdpcD7MLVS804mT81Er1C/yEf+MaTPuS/+QrlE1MHJa421CHYSI16 NFJtCJzA6sqifw0thc9oyzW78NECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFTCsJarpXeEDoz/KKRfngsGbzYfMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RkZjJmZmRhLTA1ZDEtNDA4NS1hMTM1LTAzOTg3YTA3ZjM5ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kZGYyZmZk YS0wNWQxLTQwODUtYTEzNS0wMzk4N2EwN2YzOWUvMC81NEMyQjA5NkFCQTU3Nzg0 MEU4Q0ZGMjhBNDVGOUUwQjA2NkYzNjFGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ4QoMA0GCSqGSIb3DQEBCwUAA4IBAQBGLo0PUI4qIDO5vhwaQw35pTusM56s 38DUkv88otCFxn1pfgcsh1q6FPpExlOn/48F153Q2AEflGMWBD0jB+HcUVICCuRX TiPYy1mJCk9+sHCToGs5Lfq4245+M0loX0d+025e5no211WvrnCTG8fH58hXC9eX eLWhOGNcvctiMgWvZj3c5uyNU295trqere/TuL/DZjYI8bDqFUVLFzvSBFJSotLk SvsBkCP/4ryB1bT/0zKa4fVTMSppfgunVnAadLSMA3bMi7Ei7H93MYmF7LVM6mVl X2haDj6mticXrAD8S+imiRyuDbYsBLlGge1oKLjrgtbgIPohGkGecgCd -----END CERTIFICATE-----Generated at Tue May 12 22:02:46 2026 by rpki-client