Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer
File:                     54AB931F513FCC4DCC1FB3D6056474219354E82D.cer (raw, json)
Hash identifier:          TXd7aD6rUijsMeVxuNliqOuBuqiYGoejTmRSKrwPvp0=
Subject key identifier:   54:AB:93:1F:51:3F:CC:4D:CC:1F:B3:D6:05:64:74:21:93:54:E8:2D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       61BC3B0D83259A9F60E8545981C1A0F6D87E5C52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 04 Aug 2025 02:10:14 +0000
Certificate not after:    Mon 03 Aug 2026 02:15:14 +0000
Subordinate resources:    IP: 122.49.224.0/21
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 10:04:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:bc:3b:0d:83:25:9a:9f:60:e8:54:59:81:c1:a0:f6:d8:7e:5c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug  4 02:10:14 2025 GMT
            Not After : Aug  3 02:15:14 2026 GMT
        Subject: CN=54AB931F513FCC4DCC1FB3D6056474219354E82D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:4d:4b:c1:32:08:e8:53:a8:f9:df:ad:02:
                    ff:6e:08:d1:72:7e:85:2b:99:9f:50:60:e1:c1:98:
                    76:0c:bb:86:ae:18:d0:97:6c:fd:da:5e:4d:8a:68:
                    cd:cf:f3:d3:1f:d3:d2:1b:57:34:79:ce:1d:91:ff:
                    83:54:76:9b:46:05:32:27:86:09:05:b8:38:ee:57:
                    7d:42:c5:29:44:51:b9:98:61:da:71:39:f7:d2:7d:
                    54:41:9c:3b:6f:94:9f:48:02:af:e6:75:ce:a2:c1:
                    23:cf:8d:3b:7d:30:9e:cf:0e:bd:ad:72:8a:1d:52:
                    10:0a:cd:af:9b:37:2d:c0:2d:ca:f4:e7:d0:84:64:
                    d5:e3:8d:19:a5:a7:65:7e:60:82:23:52:70:e2:91:
                    ae:35:d0:c9:2f:8a:c1:c3:9f:7b:f9:df:d9:eb:29:
                    57:14:6f:a0:03:4f:9d:c7:f2:5d:d3:5e:68:61:11:
                    5b:b0:5d:9c:2d:49:d9:ad:a3:df:43:c8:f6:9b:a2:
                    73:52:47:3a:e4:f9:71:b0:b9:e4:d1:05:22:bb:f9:
                    7d:62:01:7a:df:f3:f2:71:78:23:5c:58:e0:ce:f3:
                    33:8c:9f:31:67:9c:c5:35:bf:e5:88:47:21:f0:ec:
                    78:62:56:a7:b2:5a:f3:31:7c:d6:65:ce:96:dc:c4:
                    f6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:AB:93:1F:51:3F:CC:4D:CC:1F:B3:D6:05:64:74:21:93:54:E8:2D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.49.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         20:74:8c:92:44:53:83:8e:47:74:d5:ac:c7:ee:79:1e:52:1e:
         b8:4f:5d:99:0e:0c:2e:45:b7:0f:73:52:57:ea:63:86:a6:ba:
         d6:79:8a:e2:35:a0:b8:7d:88:5b:d6:3b:93:5e:ce:ff:a4:93:
         2d:42:7e:91:c8:60:c6:fc:30:83:f1:9e:d7:d5:24:5a:1e:9d:
         86:b5:0b:dc:a7:c6:3d:45:64:db:0f:98:15:45:68:5a:2e:5b:
         63:ed:0a:b9:e6:1a:df:9f:d5:64:c4:fe:c5:d8:d5:63:4e:4a:
         13:4a:ec:99:35:64:7b:78:3c:1d:67:18:7e:8c:4d:4d:d1:a2:
         5a:fe:13:c4:da:fb:79:d6:d1:80:6a:c3:52:07:55:ae:48:c3:
         3f:40:06:7b:fb:36:e9:a8:e2:b1:b1:94:7f:2f:e3:40:ac:c6:
         7a:6a:dc:cc:e7:b3:55:8b:5b:98:36:f4:c8:03:6d:38:c0:a5:
         f9:c4:6d:f1:d0:b8:1b:50:98:05:df:c6:05:af:00:db:b6:1f:
         30:ea:53:a9:91:3e:18:41:58:ca:d9:26:66:65:9c:15:60:f7:
         7b:54:75:84:76:64:a3:a4:e4:cf:83:2a:ff:d2:52:df:f9:93:
         13:c0:1b:19:42:e0:ef:5a:2d:ae:3e:5b:68:27:a2:bc:34:11:
         5f:28:d3:b5
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUYbw7DYMlmp9g6FRZgcGg9th+XFIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgwNDAyMTAxNFoX
DTI2MDgwMzAyMTUxNFowMzExMC8GA1UEAxMoNTRBQjkzMUY1MTNGQ0M0RENDMUZC
M0Q2MDU2NDc0MjE5MzU0RTgyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALwcTUvBMgjoU6j5360C/24I0XJ+hSuZn1Bg4cGYdgy7hq4Y0Jds/dpeTYpo
zc/z0x/T0htXNHnOHZH/g1R2m0YFMieGCQW4OO5XfULFKURRuZhh2nE599J9VEGc
O2+Un0gCr+Z1zqLBI8+NO30wns8Ova1yih1SEArNr5s3LcAtyvTn0IRk1eONGaWn
ZX5ggiNScOKRrjXQyS+KwcOfe/nf2espVxRvoANPncfyXdNeaGERW7BdnC1J2a2j
30PI9puic1JHOuT5cbC55NEFIrv5fWIBet/z8nF4I1xY4M7zM4yfMWecxTW/5YhH
IfDseGJWp7Ja8zF81mXOltzE9tECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFFSrkx9RP8xNzB+z1gVkdCGTVOgtMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by8yZTQzNDk4MS0zNmJiLTQ1MzktOWI1NS0wN2I2NzIwOGZkMDYvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJlNDM0OTgx
LTM2YmItNDUzOS05YjU1LTA3YjY3MjA4ZmQwNi8wLzU0QUI5MzFGNTEzRkNDNERD
QzFGQjNENjA1NjQ3NDIxOTM1NEU4MkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAN6MeAwDQYJKoZIhvcNAQELBQADggEBACB0jJJEU4OOR3TVrMfueR5SHrhPXZkO
DC5Ftw9zUlfqY4amutZ5iuI1oLh9iFvWO5Nezv+kky1CfpHIYMb8MIPxntfVJFoe
nYa1C9ynxj1FZNsPmBVFaFouW2PtCrnmGt+f1WTE/sXY1WNOShNK7Jk1ZHt4PB1n
GH6MTU3Rolr+E8Ta+3nW0YBqw1IHVa5Iwz9ABnv7Numo4rGxlH8v40Csxnpq3Mzn
s1WLW5g29MgDbTjApfnEbfHQuBtQmAXfxgWvANu2HzDqU6mRPhhBWMrZJmZlnBVg
93tUdYR2ZKOk5M+DKv/SUt/5kxPAGxlC4O9aLa4+W2gnorw0EV8o07U=
-----END CERTIFICATE-----
Generated at Wed Aug 6 07:58:49 2025 by rpki-client