
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/92C5086020B686EBA68B31410C984CDC9BB75029.cer
File: 92C5086020B686EBA68B31410C984CDC9BB75029.cer (raw, json)
Hash identifier: k14l3o+IFAKJVZr0c6LTeQmqEXN8RQp6Pk0VIULVrFI=
Subject key identifier: 92:C5:08:60:20:B6:86:EB:A6:8B:31:41:0C:98:4C:DC:9B:B7:50:29
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 554DB7C88E338BA8DF0BD3655DC7E19CD22DE894
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/92C5086020B686EBA68B31410C984CDC9BB75029.mft
caRepository: rsync://repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 02 Apr 2026 19:40:04 +0000
Certificate not after: Thu 01 Apr 2027 19:45:04 +0000
Subordinate resources: IP: 160.19.165.0/24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 20:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:4d:b7:c8:8e:33:8b:a8:df:0b:d3:65:5d:c7:e1:9c:d2:2d:e8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Apr 2 19:40:04 2026 GMT
Not After : Apr 1 19:45:04 2027 GMT
Subject: CN=92C5086020B686EBA68B31410C984CDC9BB75029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:87:7a:8a:27:7e:c2:a7:9c:3e:51:93:c5:04:
bf:b0:20:eb:c2:0e:14:e5:76:fa:31:05:ed:66:e6:
d7:25:7a:8a:f5:25:75:8b:06:fb:07:f7:0d:f8:ed:
f2:35:6e:c3:ae:ce:5a:97:82:91:1e:f8:53:40:4f:
71:97:aa:c4:84:47:d2:3e:78:40:5c:a3:e0:65:32:
00:75:1d:82:dd:c7:ae:b9:a9:99:fc:aa:95:9b:54:
7b:9c:97:a4:31:82:54:59:07:28:00:d9:cf:93:08:
ae:c3:2e:bf:73:33:b2:13:eb:f2:f1:12:b2:a7:96:
55:ac:eb:8d:07:58:ba:4c:1f:97:a5:eb:1d:7b:10:
c0:f7:a6:ff:90:34:ff:10:55:79:0b:9b:ae:38:66:
f8:d7:e1:28:60:0d:51:b4:56:9f:31:66:36:d6:21:
6e:3c:4f:ed:20:e0:25:ca:cd:fc:33:fa:84:4c:61:
d9:eb:5a:fa:b4:1d:40:f1:0d:d5:fd:32:eb:f5:e1:
6e:ac:01:b9:a1:fc:8a:ec:84:52:72:77:5d:7a:a9:
d4:25:d4:fd:eb:3c:06:71:b1:b0:ac:48:27:bb:79:
94:dd:c6:35:75:18:6c:74:22:70:04:8b:42:ee:a1:
cc:30:74:b7:1a:3c:c3:a4:25:82:17:ab:1e:b1:a3:
6c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
92:C5:08:60:20:B6:86:EB:A6:8B:31:41:0C:98:4C:DC:9B:B7:50:29
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/92C5086020B686EBA68B31410C984CDC9BB75029.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.165.0/24
Signature Algorithm: sha256WithRSAEncryption
02:df:54:db:07:5c:14:3b:eb:88:e8:f6:84:44:0b:e8:1b:63:
85:80:b2:d4:95:06:da:07:0c:6f:80:e0:1e:c5:61:b9:fb:24:
ac:52:7a:a0:eb:cf:df:31:da:5c:2f:e2:a7:f6:0c:9e:ff:18:
c7:b8:46:96:6b:26:7e:4c:95:19:02:ea:e7:61:e7:8e:8a:de:
82:7d:ff:a1:04:fc:91:a4:de:de:d5:41:81:57:02:68:d4:2d:
51:1e:d7:72:5f:73:14:b2:f2:20:ad:d1:8e:b3:75:58:ca:17:
e0:7c:c1:a1:6a:11:c6:5d:39:d9:52:53:df:8c:c7:34:9c:f4:
db:d2:01:0e:50:d9:f2:f0:52:2b:81:bc:db:96:cd:ff:38:12:
d3:e1:62:49:fc:98:dc:d1:15:80:d0:57:f2:aa:3a:a5:6d:5d:
8e:ec:58:98:3c:e8:7d:68:dc:1f:32:c6:41:c8:6d:b1:6b:93:
5f:78:cd:d3:99:20:65:1d:e3:3b:a9:1d:ab:38:a2:f5:ec:d0:
8b:36:46:1a:23:d6:d9:ad:5e:8c:55:00:e5:cb:cb:fb:bc:33:
84:e7:23:d2:97:4a:f9:4c:32:42:f0:c5:ba:8f:2d:a9:de:04:
07:87:a7:79:84:1e:c1:e0:e0:0f:d4:99:58:7b:9a:8b:bb:7f:
89:f6:cc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:50 2026 by rpki-client