Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer
File:                     5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer (raw, json)
Hash identifier:          PoxKfCrtufQ25eKuxmY2a529HMC/gqetDU8TmVT0Xyw=
Subject key identifier:   55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6D695F17F8F02B0BE2F4E63BD73055626F301621
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 06 Mar 2026 01:30:36 +0000
Certificate not after:    Fri 05 Mar 2027 01:35:36 +0000
Subordinate resources:    IP: 103.189.112.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Mar 2026 09:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:69:5f:17:f8:f0:2b:0b:e2:f4:e6:3b:d7:30:55:62:6f:30:16:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  6 01:30:36 2026 GMT
            Not After : Mar  5 01:35:36 2027 GMT
        Subject: CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:39:7b:ed:3a:b4:ec:b0:28:13:24:15:9a:
                    ca:41:23:07:fb:69:37:e2:b9:b0:4a:2f:a4:9c:92:
                    fd:a2:6d:d0:95:fa:5f:16:e4:cf:6e:c3:e4:6d:9d:
                    50:84:ff:65:59:a2:b2:06:c0:b2:de:f2:32:6d:d8:
                    8b:9b:ad:ec:2b:56:14:f7:67:62:ba:30:25:48:3e:
                    3a:8f:24:84:c2:df:5f:ee:9e:e3:5c:1f:07:a7:8f:
                    ed:83:46:13:e1:cc:95:9a:d1:9e:26:d4:1d:4d:c7:
                    c8:e4:25:9c:24:37:bc:2b:14:26:f6:76:61:1c:33:
                    8f:3e:9f:18:44:72:6d:0d:3d:b8:54:9e:df:b5:13:
                    6e:6b:14:c3:e0:50:69:31:a5:6c:54:56:0a:ef:c6:
                    31:aa:71:e7:db:3a:b5:35:64:c6:26:f1:3f:88:46:
                    ac:b5:89:4b:49:82:15:4a:ae:94:bc:c5:ed:3e:1c:
                    ea:93:1e:dd:a8:2f:95:97:96:e4:85:00:83:62:3c:
                    6c:44:a2:ec:2c:92:00:76:5a:fa:a9:7c:8c:43:0b:
                    6c:30:4b:cf:16:27:47:aa:a6:77:ca:7b:ad:64:cc:
                    5c:24:57:ca:bd:b6:a0:57:03:a9:9b:a9:16:0e:68:
                    ca:d3:a1:55:f9:d1:95:08:84:c4:2c:b4:2a:49:7f:
                    b3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:b9:b8:6c:78:5a:02:ac:74:c3:96:c1:cc:92:11:f6:9a:26:
         01:37:be:03:5c:3b:da:0f:1e:27:fd:ad:db:d0:df:51:44:a2:
         8a:69:04:10:a5:1c:a3:a9:dd:ab:aa:4a:10:ec:d7:08:cb:6a:
         0a:d1:16:78:46:10:7d:ad:1e:b0:0d:31:a2:92:bb:df:2f:21:
         0e:e9:52:8e:2d:ef:ae:b9:7a:0a:d2:f0:ce:1a:8d:f6:4b:a1:
         63:f2:75:ff:8b:a8:c7:89:3e:be:34:78:79:74:e4:a3:4d:94:
         eb:bc:c8:d7:36:f8:ce:c3:98:f6:76:f4:4a:d6:22:9e:93:60:
         27:5b:a8:3c:c0:30:12:3f:c8:91:d2:45:c1:1a:3c:78:f1:95:
         d1:41:63:dc:be:e3:f5:7d:42:7e:11:cc:59:64:58:be:6b:c4:
         d3:cc:b4:be:83:f3:56:da:a6:a8:2c:54:bf:2c:b4:bb:6b:f9:
         eb:5e:4f:bf:2e:fc:17:15:08:49:14:21:7d:8e:65:76:a0:41:
         97:89:1b:3b:ea:86:07:d7:44:66:9d:cf:c3:c8:fe:7e:e9:d5:
         23:78:d8:f1:78:92:06:8f:dd:25:c5:43:8e:a3:d1:2e:96:f5:
         2d:84:5a:ba:a6:17:ad:79:47:1e:a1:d5:26:4d:48:86:53:4a:
         95:e6:06:f9
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUbWlfF/jwKwvi9OY71zBVYm8wFiEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMwNjAxMzAzNloX
DTI3MDMwNTAxMzUzNlowMzExMC8GA1UEAxMoNTU0NkU5RjFDRjJDRjU4Mjc4QzVC
REI1MzBFOTFFRkQxQkVDRUYwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK7QOXvtOrTssCgTJBWaykEjB/tpN+K5sEovpJyS/aJt0JX6Xxbkz27D5G2d
UIT/ZVmisgbAst7yMm3Yi5ut7CtWFPdnYrowJUg+Oo8khMLfX+6e41wfB6eP7YNG
E+HMlZrRnibUHU3HyOQlnCQ3vCsUJvZ2YRwzjz6fGERybQ09uFSe37UTbmsUw+BQ
aTGlbFRWCu/GMapx59s6tTVkxibxP4hGrLWJS0mCFUqulLzF7T4c6pMe3agvlZeW
5IUAg2I8bESi7CySAHZa+ql8jEMLbDBLzxYnR6qmd8p7rWTMXCRXyr22oFcDqZup
Fg5oytOhVfnRlQiExCy0Kkl/s1sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFFVG6fHPLPWCeMW9tTDpHv0b7O8EMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9hMTQ4NmNjZC0wYzk1LTQ5MWEtYjllNi02NjdjZWU0NDU5NGYvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExNDg2Y2Nk
LTBjOTUtNDkxYS1iOWU2LTY2N2NlZTQ0NTk0Zi8wLzU1NDZFOUYxQ0YyQ0Y1ODI3
OEM1QkRCNTMwRTkxRUZEMUJFQ0VGMDQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAFnvXAwDQYJKoZIhvcNAQELBQADggEBADS5uGx4WgKsdMOWwcySEfaaJgE3vgNc
O9oPHif9rdvQ31FEooppBBClHKOp3auqShDs1wjLagrRFnhGEH2tHrANMaKSu98v
IQ7pUo4t7665egrS8M4ajfZLoWPydf+LqMeJPr40eHl05KNNlOu8yNc2+M7DmPZ2
9ErWIp6TYCdbqDzAMBI/yJHSRcEaPHjxldFBY9y+4/V9Qn4RzFlkWL5rxNPMtL6D
81bapqgsVL8stLtr+eteT78u/BcVCEkUIX2OZXagQZeJGzvqhgfXRGadz8PI/n7p
1SN42PF4kgaP3SXFQ46j0S6W9S2EWrqmF615Rx6h1SZNSIZTSpXmBvk=
-----END CERTIFICATE-----
Generated at Thu Mar 19 08:10:26 2026 by rpki-client