Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/92C5086020B686EBA68B31410C984CDC9BB75029.cer
File:                     92C5086020B686EBA68B31410C984CDC9BB75029.cer (raw, json)
Hash identifier:          9BNhf4E7BLXssN71W0Ljv4HTrp3CqplcFwcESG8pars=
Subject key identifier:   92:C5:08:60:20:B6:86:EB:A6:8B:31:41:0C:98:4C:DC:9B:B7:50:29
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       458510C609DAB057DAE65883421AC24A0D8378C7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/92C5086020B686EBA68B31410C984CDC9BB75029.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 01 May 2025 07:58:08 +0000
Certificate not after:    Thu 30 Apr 2026 08:03:08 +0000
Subordinate resources:    IP: 160.19.165.0/24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 05:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:85:10:c6:09:da:b0:57:da:e6:58:83:42:1a:c2:4a:0d:83:78:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: May  1 07:58:08 2025 GMT
            Not After : Apr 30 08:03:08 2026 GMT
        Subject: CN=92C5086020B686EBA68B31410C984CDC9BB75029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:87:7a:8a:27:7e:c2:a7:9c:3e:51:93:c5:04:
                    bf:b0:20:eb:c2:0e:14:e5:76:fa:31:05:ed:66:e6:
                    d7:25:7a:8a:f5:25:75:8b:06:fb:07:f7:0d:f8:ed:
                    f2:35:6e:c3:ae:ce:5a:97:82:91:1e:f8:53:40:4f:
                    71:97:aa:c4:84:47:d2:3e:78:40:5c:a3:e0:65:32:
                    00:75:1d:82:dd:c7:ae:b9:a9:99:fc:aa:95:9b:54:
                    7b:9c:97:a4:31:82:54:59:07:28:00:d9:cf:93:08:
                    ae:c3:2e:bf:73:33:b2:13:eb:f2:f1:12:b2:a7:96:
                    55:ac:eb:8d:07:58:ba:4c:1f:97:a5:eb:1d:7b:10:
                    c0:f7:a6:ff:90:34:ff:10:55:79:0b:9b:ae:38:66:
                    f8:d7:e1:28:60:0d:51:b4:56:9f:31:66:36:d6:21:
                    6e:3c:4f:ed:20:e0:25:ca:cd:fc:33:fa:84:4c:61:
                    d9:eb:5a:fa:b4:1d:40:f1:0d:d5:fd:32:eb:f5:e1:
                    6e:ac:01:b9:a1:fc:8a:ec:84:52:72:77:5d:7a:a9:
                    d4:25:d4:fd:eb:3c:06:71:b1:b0:ac:48:27:bb:79:
                    94:dd:c6:35:75:18:6c:74:22:70:04:8b:42:ee:a1:
                    cc:30:74:b7:1a:3c:c3:a4:25:82:17:ab:1e:b1:a3:
                    6c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                92:C5:08:60:20:B6:86:EB:A6:8B:31:41:0C:98:4C:DC:9B:B7:50:29
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/92C5086020B686EBA68B31410C984CDC9BB75029.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:7b:13:31:87:95:14:30:ec:21:14:14:9e:11:d1:4c:7a:cb:
         b2:34:32:37:ff:d2:b7:c3:14:2d:77:e3:96:41:56:81:d5:9e:
         66:c9:dc:15:92:6c:8e:9a:85:57:9f:e0:c4:76:cd:85:72:5b:
         8a:80:86:43:ef:2a:46:31:31:c9:79:4c:be:0c:d9:74:2b:24:
         bb:a0:ee:36:09:69:73:56:9f:68:fe:58:ae:96:cc:4d:3c:d8:
         4c:78:9e:d1:78:00:f3:fb:e2:91:31:d1:28:62:c1:6d:9c:0e:
         e3:c4:36:e2:6e:fa:f2:36:52:ec:e4:60:d6:2d:9d:e5:6f:01:
         90:45:c4:ca:38:fc:04:70:32:01:ad:6c:50:8e:a0:ee:7d:cb:
         7e:64:42:2f:91:ee:31:28:5e:86:fd:88:84:d5:26:80:fb:57:
         81:3c:bb:fb:a6:cb:d1:18:82:87:0c:8b:1e:90:a4:2f:ef:e7:
         21:8f:f3:0d:df:fc:10:5b:5d:03:ff:15:1a:68:c3:67:83:a7:
         f4:b4:61:f1:33:b0:14:22:12:63:68:88:90:1e:69:8a:34:5d:
         86:cc:88:fd:f1:42:64:64:3d:5b:50:6a:56:69:49:68:e8:43:
         00:15:6b:88:69:ed:b3:35:df:1b:12:d7:76:7b:2d:40:48:2b:
         8d:89:df:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:58:45 2025 by rpki-client