Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/92CF224BB1CC5CF1D4DB6A23ED1043F74653CB35.cer
File:                     92CF224BB1CC5CF1D4DB6A23ED1043F74653CB35.cer (raw, json)
Hash identifier:          VNRpw4MIjD5NDNWVWVkUXMPw3ZwYbQIsDLq/PVUnOhY=
Subject key identifier:   92:CF:22:4B:B1:CC:5C:F1:D4:DB:6A:23:ED:10:43:F7:46:53:CB:35
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5C70F09CF4A8F27A703B23E39A17F02A8B6BC612
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/92CF224BB1CC5CF1D4DB6A23ED1043F74653CB35.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 13 Apr 2026 03:28:00 +0000
Certificate not after:    Mon 12 Apr 2027 03:33:00 +0000
Subordinate resources:    IP: 103.155.44.0/24
                          IP: 2001:df4:b280::/48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 05:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:70:f0:9c:f4:a8:f2:7a:70:3b:23:e3:9a:17:f0:2a:8b:6b:c6:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 13 03:28:00 2026 GMT
            Not After : Apr 12 03:33:00 2027 GMT
        Subject: CN=92CF224BB1CC5CF1D4DB6A23ED1043F74653CB35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:37:a3:00:77:12:09:83:9a:64:e0:49:cf:76:
                    50:ff:96:01:3d:83:e8:3b:bd:f0:1c:72:7d:e9:93:
                    26:eb:9d:29:ab:b3:eb:3b:43:63:d1:88:a6:62:43:
                    93:e3:ce:75:ea:a8:3a:d0:0d:25:db:d8:09:9a:69:
                    94:db:51:9d:6f:58:06:94:b0:29:cb:9e:58:4a:e9:
                    90:92:b3:29:4b:24:da:66:15:f8:e3:fb:1e:05:53:
                    84:cd:57:21:d8:89:35:01:2e:22:e2:a0:1e:07:31:
                    7f:03:08:b2:83:73:0b:27:72:00:4b:dd:35:12:c7:
                    95:d7:a8:c5:d6:db:0a:80:2a:17:52:59:ca:92:d4:
                    de:a6:43:56:e4:7d:da:56:82:96:6e:a0:05:a0:a4:
                    f4:55:8a:52:54:ef:99:53:67:98:dd:c7:01:14:d0:
                    7a:1d:99:36:66:15:51:be:aa:80:36:ee:18:e2:bc:
                    01:ba:6c:8b:26:f7:c8:39:b4:a3:cb:39:82:ad:69:
                    4f:0e:5a:81:7c:25:58:13:d2:dc:53:f0:7d:5c:bc:
                    40:9f:c4:01:a0:3c:db:06:9b:7a:02:9b:89:6f:d3:
                    30:21:52:9e:c4:e3:71:93:47:6e:57:de:be:a6:d5:
                    aa:80:6f:50:f8:74:4f:28:01:91:23:8c:a6:56:f5:
                    fc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                92:CF:22:4B:B1:CC:5C:F1:D4:DB:6A:23:ED:10:43:F7:46:53:CB:35
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/92CF224BB1CC5CF1D4DB6A23ED1043F74653CB35.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.44.0/24
                IPv6:
                  2001:df4:b280::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:d1:4f:e0:85:bb:6b:71:ab:13:19:3b:60:62:93:ed:d8:78:
         98:7f:5e:a3:ab:1e:4a:b8:e1:d1:0b:bd:e2:83:ad:f1:db:9f:
         46:ea:7a:05:7f:a7:fd:f7:9c:9f:36:ad:8e:3f:7c:04:eb:91:
         7f:ab:a5:6f:15:89:73:e0:1f:be:fd:96:f2:eb:3b:87:6b:ed:
         35:2b:69:b4:5e:d8:8c:c3:dd:a8:f4:18:18:70:8c:d4:9b:29:
         b8:3d:c1:d5:02:ee:05:07:ae:12:41:66:48:5f:2c:5c:2e:62:
         66:18:b1:93:72:0b:37:38:ec:58:36:b8:1c:64:bf:09:fd:29:
         3b:1f:3d:77:ba:05:ab:78:f5:cf:1c:c0:ae:81:d8:6d:09:3f:
         c4:1c:ce:fd:6b:bf:6d:cd:7e:62:0f:13:ca:67:e3:b1:98:07:
         6e:97:23:0c:bc:0a:91:44:41:89:d1:85:3b:fc:7c:17:9a:22:
         0f:27:98:ae:2a:de:67:88:ad:62:ed:7c:e1:89:c7:ff:83:9f:
         a9:14:66:3d:15:d5:84:a4:c4:2f:59:66:9b:9b:0e:b5:b2:b2:
         2b:07:7f:38:b0:a3:9b:6e:4f:64:b0:2e:c1:e4:c3:cc:4d:04:
         57:01:21:83:0b:56:36:d9:e3:1c:53:a1:f1:83:f9:c0:a6:35:
         fd:d2:17:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:46 2026 by rpki-client