$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.cer File: 54E79DCF008526729EA9BEE1EF3D5CDC82586C43.cer (raw, json) Hash identifier: zyuBbyQCJQipCCnBqFqjuJO45MNABgVpr9xqbIWNp6I= Subject key identifier: 54:E7:9D:CF:00:85:26:72:9E:A9:BE:E1:EF:3D:5C:DC:82:58:6C:43 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3596193475C4A1967B408C52662DAE18A1C0DFC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:15:50 +0000 Certificate not after: Sun 02 May 2027 02:20:50 +0000 Subordinate resources: IP: 103.125.16.0/22 IP: 2403:ea40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:96:19:34:75:c4:a1:96:7b:40:8c:52:66:2d:ae:18:a1:c0:df:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:15:50 2026 GMT Not After : May 2 02:20:50 2027 GMT Subject: CN=54E79DCF008526729EA9BEE1EF3D5CDC82586C43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:16:96:fc:4b:c0:99:16:53:c8:bf:8a:4a:96: fb:34:47:31:a7:d6:9c:eb:31:0c:68:b5:52:78:67: 41:97:3f:2f:17:3b:7a:f2:73:39:68:06:ed:1a:0c: c0:46:61:d9:6c:26:6a:1c:65:d4:68:57:80:59:9b: 15:0f:fb:aa:d0:86:f4:49:77:92:dc:b9:cf:c6:12: fd:c2:8b:ce:ac:7c:de:f9:82:6f:fb:e0:9b:57:af: 14:03:6e:8d:4a:63:63:f4:59:b2:b1:69:bb:00:c3: 97:97:9d:0b:2b:a2:48:36:ed:1c:d3:a4:4b:13:fe: 89:07:a1:08:f0:bc:74:07:56:8e:b6:ba:9e:9f:46: 9b:05:f6:89:20:6e:26:81:c9:b4:14:88:3c:d2:6d: 1c:b3:0f:fc:9e:b7:94:cd:a2:1c:32:f3:ae:de:7a: be:20:a4:38:94:ba:0c:57:cc:59:97:ac:e4:1c:da: 05:9c:0b:35:a8:71:b9:e5:1e:d4:3d:a3:e2:c4:b6: 0a:fd:f2:dc:cc:8d:c6:9a:af:53:7c:71:b8:f8:e2: 85:a4:3a:8b:29:ad:04:ed:ab:ac:8a:6e:b9:d2:fd: d6:65:09:bb:3d:12:d9:12:23:d3:61:c7:a5:5a:33: 32:95:02:a6:b2:fa:6e:dd:cb:a0:1d:28:54:9c:f0: 64:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 54:E7:9D:CF:00:85:26:72:9E:A9:BE:E1:EF:3D:5C:DC:82:58:6C:43 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.125.16.0/22 IPv6: 2403:ea40::/32 Signature Algorithm: sha256WithRSAEncryption 2d:a9:7b:0b:d7:83:86:2e:10:ba:41:0a:05:a1:6a:21:fd:62: ba:e3:aa:1a:63:4d:93:fb:ce:62:64:51:32:f9:9f:a1:75:dd: 13:9e:4e:8e:9e:14:2b:eb:1e:77:a0:5f:7c:64:e2:44:ae:58: d7:ad:2e:72:ec:85:ad:23:6d:6c:2f:cd:78:0a:ac:91:0a:b5: 60:ae:b0:4a:58:5d:14:2d:99:bc:19:49:a4:5f:f5:ad:9f:55: de:91:27:97:f3:a4:0a:38:7c:ad:15:81:e6:84:ba:59:8d:83: 75:04:01:90:1a:34:07:ea:df:22:6b:84:47:99:3f:71:be:f2: 29:ad:19:9e:87:9a:f9:b9:5d:d9:74:b7:df:e5:f6:53:db:a7: a0:f4:d6:59:e2:15:49:73:dc:ff:76:da:2b:d8:d5:76:d0:a0: b8:92:52:84:41:c1:9e:a0:2b:f5:68:6c:c9:1b:68:f6:74:69: 87:ee:0a:72:f0:27:01:2c:3b:ac:f9:35:bb:6f:f0:4d:50:24: 38:f1:68:6d:34:9a:bf:aa:5d:39:96:60:40:52:72:0b:e5:87: 3e:13:e8:1c:3b:17:0b:f3:bd:64:9c:f7:0a:d8:b3:aa:ea:eb: b6:46:28:aa:28:81:10:17:76:ca:a0:2a:0c:a5:e2:93:4f:0d: 9f:d8:f8:c1 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUNZYZNHXEoZZ7QIxSZi2uGKHA38MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTU1MFoX DTI3MDUwMjAyMjA1MFowMzExMC8GA1UEAxMoNTRFNzlEQ0YwMDg1MjY3MjlFQTlC RUUxRUYzRDVDREM4MjU4NkM0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALEWlvxLwJkWU8i/ikqW+zRHMafWnOsxDGi1UnhnQZc/Lxc7evJzOWgG7RoM wEZh2Wwmahxl1GhXgFmbFQ/7qtCG9El3kty5z8YS/cKLzqx83vmCb/vgm1evFANu jUpjY/RZsrFpuwDDl5edCyuiSDbtHNOkSxP+iQehCPC8dAdWjra6np9GmwX2iSBu JoHJtBSIPNJtHLMP/J63lM2iHDLzrt56viCkOJS6DFfMWZes5BzaBZwLNahxueUe 1D2j4sS2Cv3y3MyNxpqvU3xxuPjihaQ6iymtBO2rrIpuudL91mUJuz0S2RIj02HH pVozMpUCprL6bt3LoB0oVJzwZEkCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFTnnc8AhSZynqm+4e89XNyCWGxDMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2U1OGQ2ZGNhLTZkN2ItNDgxMS04NjJiLTBkYzVkNTdmYTJkOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lNThkNmRj YS02ZDdiLTQ4MTEtODYyYi0wZGM1ZDU3ZmEyZDkvMC81NEU3OURDRjAwODUyNjcy OUVBOUJFRTFFRjNENUNEQzgyNTg2QzQzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ30QMA0EAgACMAcDBQAkA+pAMA0GCSqGSIb3DQEBCwUAA4IBAQAtqXsL14OG LhC6QQoFoWoh/WK646oaY02T+85iZFEy+Z+hdd0Tnk6OnhQr6x53oF98ZOJErljX rS5y7IWtI21sL814CqyRCrVgrrBKWF0ULZm8GUmkX/Wtn1XekSeX86QKOHytFYHm hLpZjYN1BAGQGjQH6t8ia4RHmT9xvvIprRmeh5r5uV3ZdLff5fZT26eg9NZZ4hVJ c9z/dtor2NV20KC4klKEQcGeoCv1aGzJG2j2dGmH7gpy8CcBLDus+TW7b/BNUCQ4 8WhtNJq/ql05lmBAUnIL5Yc+E+gcOxcL871knPcK2LOq6uu2RiiqKIEQF3bKoCoM peKTTw2f2PjB -----END CERTIFICATE-----Generated at Tue May 12 22:04:00 2026 by rpki-client