
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
File: 54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer (raw, json)
Hash identifier: GTcsripEBHGnuxbSYGOJYOo4C6Phdg6J54K85BR77VM=
Subject key identifier: 54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 0CF43C80EE1818A339DC05EC05CAB0CBAE933628
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 01:29:04 +0000
Certificate not after: Sun 02 May 2027 01:34:04 +0000
Subordinate resources: IP: 103.167.34.0/23
IP: 2407:6ac0::/32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:f4:3c:80:ee:18:18:a3:39:dc:05:ec:05:ca:b0:cb:ae:93:36:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 01:29:04 2026 GMT
Not After : May 2 01:34:04 2027 GMT
Subject: CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:58:4a:c1:be:db:d6:9e:9a:8a:f2:1d:80:b6:
7d:5b:3e:3b:b0:f5:5b:eb:ea:1d:0b:a4:12:aa:d5:
e6:42:69:ff:12:01:75:4f:86:7b:8d:5f:16:db:19:
a5:89:45:19:2f:d5:2f:ef:ab:78:dc:76:42:35:2b:
bb:78:f9:d7:c4:8c:71:69:5b:a0:50:c5:0c:5e:ba:
62:4b:7d:a5:4b:06:ed:b1:53:60:3c:38:df:24:7a:
38:be:3f:3f:ef:1c:2f:2d:0f:cc:0a:9d:75:9a:9a:
36:ad:32:48:4b:de:69:b9:80:30:fc:64:7b:2f:90:
1d:09:38:83:89:65:bd:1b:24:b5:36:ed:9f:59:53:
6b:7f:6e:ff:73:27:b6:63:14:21:a1:37:9a:76:5e:
4f:02:0a:b9:ec:0d:5d:b5:24:32:47:8a:a1:81:1a:
95:2b:b1:99:eb:05:f6:3c:5e:14:68:cc:85:a0:65:
84:e4:20:2f:74:97:0d:17:4b:ea:dd:60:08:ec:b7:
65:54:2f:68:17:1b:57:95:64:57:a0:12:62:f6:14:
57:1e:7c:ac:02:b5:9d:0b:32:16:8d:c3:61:95:7b:
ff:97:a0:66:18:42:f6:0a:42:cc:92:95:46:a2:a5:
de:c0:4b:dc:25:86:c7:63:e5:17:db:0f:2f:76:9a:
dd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.167.34.0/23
IPv6:
2407:6ac0::/32
Signature Algorithm: sha256WithRSAEncryption
8f:af:b4:48:9e:2f:3b:41:39:0c:39:5c:e8:06:a9:f8:08:ff:
af:b3:7c:cc:ca:7e:8f:34:dc:48:17:ef:3e:0e:77:82:76:05:
79:e0:3a:11:6c:67:09:84:83:d5:92:d7:1a:aa:60:ef:11:a7:
96:e5:8b:57:a0:f8:18:d8:7e:3e:7c:a1:97:a0:5e:04:14:87:
8c:ee:d2:b2:14:f4:9a:cc:21:a3:43:27:5f:66:04:5a:ab:1f:
59:f6:13:26:c7:71:bd:85:65:6e:f6:ad:c7:9d:15:eb:c2:95:
c8:21:11:f1:56:1c:c1:a3:74:a2:02:11:6e:6b:56:65:1e:a6:
7a:78:3d:72:42:c9:2e:50:af:51:fb:77:c4:2a:5b:20:00:7f:
69:86:cd:cf:d8:19:c5:ee:48:18:26:02:a1:54:db:a8:62:20:
7a:63:e4:be:ad:64:72:68:f2:cd:7d:d8:fe:b7:29:8c:b6:17:
a5:35:88:31:d4:77:7c:14:ad:e3:6d:1b:f0:95:73:20:8b:67:
32:48:87:89:bf:0f:fb:cf:f5:5c:26:bc:5e:10:30:11:c0:6b:
51:be:58:30:73:bf:05:09:d2:12:02:30:45:77:02:14:eb:f8:
2e:70:09:2e:fc:8c:22:e6:57:58:ce:9d:28:d7:2c:1c:93:a1:
69:3c:70:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:52:37 2026 by rpki-client