Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer
File:                     C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer (raw, json)
Hash identifier:          N4vA0gaFLg2OpsrajWTtjE8COtFpq7IkYgZcxumyPG0=
Subject key identifier:   C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       52B77897BCDC9D22C76BD65C0A674F471B9B4BB4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 Jun 2025 23:26:41 +0000
Certificate not after:    Tue 02 Jun 2026 23:31:41 +0000
Subordinate resources:    IP: 103.160.160.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 07:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b7:78:97:bc:dc:9d:22:c7:6b:d6:5c:0a:67:4f:47:1b:9b:4b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun  3 23:26:41 2025 GMT
            Not After : Jun  2 23:31:41 2026 GMT
        Subject: CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0f:26:3f:83:46:a0:01:e3:73:57:3d:a3:6b:
                    58:7f:21:ca:46:55:38:ea:0a:b4:e9:99:27:f5:db:
                    2b:f6:5c:ea:67:9e:4f:cc:ab:04:db:05:ae:89:49:
                    5a:ee:42:18:33:e0:cc:0e:c3:45:9a:89:39:64:35:
                    55:1b:ea:0f:31:b4:29:69:e6:d3:f7:72:6d:1b:1e:
                    72:d2:8a:12:e2:7b:a6:40:bd:91:c5:b9:bb:96:44:
                    94:84:ca:8d:3e:88:c9:79:71:b0:74:fa:a5:85:2b:
                    51:b1:e4:4b:44:cf:8b:79:85:63:3a:35:f6:16:e3:
                    44:01:4f:fa:88:99:a2:4e:59:36:5d:5a:a0:7a:c7:
                    8f:4a:79:51:86:58:8b:81:d8:98:40:05:a6:56:d3:
                    9d:a1:80:cc:46:3e:24:df:4b:de:cb:4b:c8:de:ea:
                    82:77:02:fe:56:5c:c2:2f:9e:34:c4:7f:c8:82:81:
                    05:b1:6f:1d:50:ed:ce:65:3a:f2:e8:f8:da:98:26:
                    c4:8e:0d:99:18:83:ea:ca:b2:ab:cc:38:50:b4:96:
                    d9:f5:0e:76:f1:68:cb:93:72:54:75:36:72:f8:cb:
                    33:18:b0:f8:5f:6d:0e:4e:72:a6:1d:3b:24:83:86:
                    20:72:4c:00:ea:bb:d5:a5:33:58:31:d5:0f:fa:2d:
                    0e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:69:34:30:b0:65:23:a4:2a:d5:2b:ce:a0:05:db:84:00:31:
         89:25:3a:30:4e:62:ec:d3:39:49:ba:ef:0e:d1:25:98:aa:f4:
         ff:b5:6b:bc:9e:ca:d6:db:3c:a7:bc:7b:99:d7:21:77:17:81:
         2b:aa:50:d5:bb:9f:6a:a4:83:84:c7:59:14:a8:3a:e9:ee:f6:
         eb:f3:28:f7:b1:96:0b:c0:25:52:72:b3:e5:0e:ce:09:27:55:
         98:92:bc:bf:1b:f3:0c:aa:b0:a3:3e:ae:f2:25:4d:01:f9:b7:
         4d:e5:bb:fb:16:cf:0e:94:fd:cd:79:47:58:72:98:d8:99:45:
         b4:ff:f7:b8:a0:f4:10:5e:71:c9:50:b0:a1:d0:de:54:93:3c:
         ad:68:54:2a:d9:00:bd:59:c4:cf:2b:04:03:46:26:c3:2d:76:
         10:df:54:a8:f0:86:a1:d8:16:8c:3c:36:90:4e:b3:f6:59:3f:
         9d:31:12:f7:78:82:d7:db:65:17:a9:bc:33:1d:a6:d7:7d:6d:
         21:8b:c3:69:eb:0d:56:17:f1:e9:74:bb:82:40:c1:07:a7:47:
         db:51:ca:45:43:0d:36:59:76:bb:19:64:af:2a:ce:8b:94:6b:
         0b:a8:cc:1a:a9:4d:96:11:4d:39:d2:aa:24:ff:c0:15:18:df:
         a2:e6:96:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:28:36 2025 by rpki-client