Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
File:                     54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer (raw, json)
Hash identifier:          GTcsripEBHGnuxbSYGOJYOo4C6Phdg6J54K85BR77VM=
Subject key identifier:   54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       0CF43C80EE1818A339DC05EC05CAB0CBAE933628
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 01:29:04 +0000
Certificate not after:    Sun 02 May 2027 01:34:04 +0000
Subordinate resources:    IP: 103.167.34.0/23
                          IP: 2407:6ac0::/32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f4:3c:80:ee:18:18:a3:39:dc:05:ec:05:ca:b0:cb:ae:93:36:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 01:29:04 2026 GMT
            Not After : May  2 01:34:04 2027 GMT
        Subject: CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:58:4a:c1:be:db:d6:9e:9a:8a:f2:1d:80:b6:
                    7d:5b:3e:3b:b0:f5:5b:eb:ea:1d:0b:a4:12:aa:d5:
                    e6:42:69:ff:12:01:75:4f:86:7b:8d:5f:16:db:19:
                    a5:89:45:19:2f:d5:2f:ef:ab:78:dc:76:42:35:2b:
                    bb:78:f9:d7:c4:8c:71:69:5b:a0:50:c5:0c:5e:ba:
                    62:4b:7d:a5:4b:06:ed:b1:53:60:3c:38:df:24:7a:
                    38:be:3f:3f:ef:1c:2f:2d:0f:cc:0a:9d:75:9a:9a:
                    36:ad:32:48:4b:de:69:b9:80:30:fc:64:7b:2f:90:
                    1d:09:38:83:89:65:bd:1b:24:b5:36:ed:9f:59:53:
                    6b:7f:6e:ff:73:27:b6:63:14:21:a1:37:9a:76:5e:
                    4f:02:0a:b9:ec:0d:5d:b5:24:32:47:8a:a1:81:1a:
                    95:2b:b1:99:eb:05:f6:3c:5e:14:68:cc:85:a0:65:
                    84:e4:20:2f:74:97:0d:17:4b:ea:dd:60:08:ec:b7:
                    65:54:2f:68:17:1b:57:95:64:57:a0:12:62:f6:14:
                    57:1e:7c:ac:02:b5:9d:0b:32:16:8d:c3:61:95:7b:
                    ff:97:a0:66:18:42:f6:0a:42:cc:92:95:46:a2:a5:
                    de:c0:4b:dc:25:86:c7:63:e5:17:db:0f:2f:76:9a:
                    dd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.34.0/23
                IPv6:
                  2407:6ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:af:b4:48:9e:2f:3b:41:39:0c:39:5c:e8:06:a9:f8:08:ff:
         af:b3:7c:cc:ca:7e:8f:34:dc:48:17:ef:3e:0e:77:82:76:05:
         79:e0:3a:11:6c:67:09:84:83:d5:92:d7:1a:aa:60:ef:11:a7:
         96:e5:8b:57:a0:f8:18:d8:7e:3e:7c:a1:97:a0:5e:04:14:87:
         8c:ee:d2:b2:14:f4:9a:cc:21:a3:43:27:5f:66:04:5a:ab:1f:
         59:f6:13:26:c7:71:bd:85:65:6e:f6:ad:c7:9d:15:eb:c2:95:
         c8:21:11:f1:56:1c:c1:a3:74:a2:02:11:6e:6b:56:65:1e:a6:
         7a:78:3d:72:42:c9:2e:50:af:51:fb:77:c4:2a:5b:20:00:7f:
         69:86:cd:cf:d8:19:c5:ee:48:18:26:02:a1:54:db:a8:62:20:
         7a:63:e4:be:ad:64:72:68:f2:cd:7d:d8:fe:b7:29:8c:b6:17:
         a5:35:88:31:d4:77:7c:14:ad:e3:6d:1b:f0:95:73:20:8b:67:
         32:48:87:89:bf:0f:fb:cf:f5:5c:26:bc:5e:10:30:11:c0:6b:
         51:be:58:30:73:bf:05:09:d2:12:02:30:45:77:02:14:eb:f8:
         2e:70:09:2e:fc:8c:22:e6:57:58:ce:9d:28:d7:2c:1c:93:a1:
         69:3c:70:e6
-----BEGIN CERTIFICATE-----
MIIF1TCCBL2gAwIBAgIUDPQ8gO4YGKM53AXsBcqwy66TNigwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjkwNFoX
DTI3MDUwMjAxMzQwNFowMzExMC8GA1UEAxMoNTRGN0EwMDhEOUJCRTlENUQ1Mzkz
MzY0MjVENEI4RkQzNjhEQkIyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKFYSsG+29aemoryHYC2fVs+O7D1W+vqHQukEqrV5kJp/xIBdU+Ge41fFtsZ
pYlFGS/VL++reNx2QjUru3j518SMcWlboFDFDF66Ykt9pUsG7bFTYDw43yR6OL4/
P+8cLy0PzAqddZqaNq0ySEveabmAMPxkey+QHQk4g4llvRsktTbtn1lTa39u/3Mn
tmMUIaE3mnZeTwIKuewNXbUkMkeKoYEalSuxmesF9jxeFGjMhaBlhOQgL3SXDRdL
6t1gCOy3ZVQvaBcbV5VkV6ASYvYUVx58rAK1nQsyFo3DYZV7/5egZhhC9gpCzJKV
RqKl3sBL3CWGx2PlF9sPL3aa3XECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFFT3oAjZu+nV1TkzZCXUuP02jbsiMB8GA1UdIwQYMBaAFEGa
hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg
WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80
MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr
BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv
cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG
emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB
GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv
L2EzNmEyMTcxLTEyYTAtNGUwMS1iY2FiLWJlM2I2YjgzNmY1ZC8wLzCBgQYIKwYB
BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hMzZhMjE3
MS0xMmEwLTRlMDEtYmNhYi1iZTNiNmI4MzZmNWQvMC81NEY3QTAwOEQ5QkJFOUQ1
RDUzOTMzNjQyNUQ0QjhGRDM2OERCQjIyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6
Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG
AwQBZ6ciMA0EAgACMAcDBQAkB2rAMA0GCSqGSIb3DQEBCwUAA4IBAQCPr7RIni87
QTkMOVzoBqn4CP+vs3zMyn6PNNxIF+8+DneCdgV54DoRbGcJhIPVktcaqmDvEaeW
5YtXoPgY2H4+fKGXoF4EFIeM7tKyFPSazCGjQydfZgRaqx9Z9hMmx3G9hWVu9q3H
nRXrwpXIIRHxVhzBo3SiAhFua1ZlHqZ6eD1yQskuUK9R+3fEKlsgAH9phs3P2BnF
7kgYJgKhVNuoYiB6Y+S+rWRyaPLNfdj+tymMthelNYgx1Hd8FK3jbRvwlXMgi2cy
SIeJvw/7z/VcJrxeEDARwGtRvlgwc78FCdISAjBFdwIU6/gucAku/Iwi5ldYzp0o
1ywck6FpPHDm
-----END CERTIFICATE-----
Generated at Tue May 12 22:52:37 2026 by rpki-client