Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/B92828ABEAB7476AE406E35D620052C840B4D768.cer
File:                     B92828ABEAB7476AE406E35D620052C840B4D768.cer (raw, json)
Hash identifier:          mHiVn8htdrV8SfbRuDyjFKszWmBRlBjcOwmQKlD6918=
Subject key identifier:   B9:28:28:AB:EA:B7:47:6A:E4:06:E3:5D:62:00:52:C8:40:B4:D7:68
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Certificate issuer:       /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial:       07F20BC9BF2E55EA9D7D29C40036047CAE638747
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/B92828ABEAB7476AE406E35D620052C840B4D768.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 02:46:37 +0000
Certificate not after:    Sun 02 May 2027 02:51:37 +0000
Subordinate resources:    IP: 157.15.212.0/24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f2:0b:c9:bf:2e:55:ea:9d:7d:29:c4:00:36:04:7c:ae:63:87:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
        Validity
            Not Before: May  3 02:46:37 2026 GMT
            Not After : May  2 02:51:37 2027 GMT
        Subject: CN=B92828ABEAB7476AE406E35D620052C840B4D768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a0:e5:e4:8b:f6:5d:bf:d1:b5:b6:ca:fd:cd:
                    4e:8e:64:05:12:78:6e:c7:c1:6a:3a:3c:1f:79:a3:
                    4c:26:40:84:24:e7:d3:52:34:0e:d5:fa:93:d6:05:
                    78:38:e0:b6:d0:9d:e8:cf:92:a2:96:cb:2c:0c:9e:
                    6a:0b:70:f9:46:f8:be:94:1c:7b:d8:3d:80:08:f0:
                    27:a2:7b:27:17:a9:4e:eb:07:1a:c5:7f:8a:35:bc:
                    6c:07:02:a0:58:02:a3:24:ad:52:d7:29:64:60:fe:
                    26:01:03:7b:de:34:d4:0f:ac:5f:40:28:fa:8b:27:
                    8f:99:6b:13:9a:f6:cb:ef:65:23:3b:ca:e5:08:64:
                    d4:5a:d6:2e:3e:93:08:1f:b0:4f:97:e8:5a:ae:5d:
                    e2:73:dd:77:88:bb:7f:5f:02:35:82:2c:1b:0d:dd:
                    06:ec:52:f8:ba:11:14:a6:17:67:49:23:d8:d2:b0:
                    71:70:38:a6:30:36:86:93:6a:32:9f:c4:44:02:1d:
                    6f:7b:e4:96:f8:d6:3f:8a:d7:76:4c:fa:9c:c7:fa:
                    1d:ea:05:d3:19:85:2f:65:7e:cd:3e:a9:41:32:de:
                    fc:59:e4:d4:df:33:56:3d:4c:27:09:b5:ad:c1:c9:
                    fd:2d:bf:c8:78:2a:b5:d5:34:8d:b7:a1:8c:48:53:
                    f2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:28:28:AB:EA:B7:47:6A:E4:06:E3:5D:62:00:52:C8:40:B4:D7:68
            X509v3 Authority Key Identifier:
                keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/B92828ABEAB7476AE406E35D620052C840B4D768.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:37:98:06:21:64:50:0f:0a:4a:eb:f7:48:fc:ef:e7:46:cd:
         6d:44:dc:9a:de:b3:de:a0:94:4e:6c:41:43:f4:90:20:ea:3c:
         3f:5a:d1:82:d5:9a:46:e9:8f:7f:d3:1f:27:2c:77:b5:c4:88:
         e7:7c:bf:2b:99:37:9b:2d:be:dd:c8:02:f7:22:a3:09:eb:ca:
         63:f3:db:ea:e6:27:ee:35:79:39:40:26:10:be:53:b9:f4:b9:
         20:4c:af:3e:e4:9e:cf:26:99:d3:4f:d2:f1:31:a0:a8:96:b5:
         a2:85:c5:66:0c:ed:24:f6:27:75:ae:ff:5a:1d:4c:a6:7d:01:
         0e:8f:a0:c4:cd:00:9f:74:21:ad:7e:31:97:57:53:df:99:4c:
         04:25:81:0f:98:f9:f0:85:cb:09:59:5c:f5:49:fb:89:06:11:
         f5:26:d8:59:cc:d1:3e:77:84:6d:7f:65:80:07:fa:d8:84:67:
         4f:53:8b:bf:e4:a7:19:6b:c6:1e:d4:cb:0f:f4:11:92:5d:a4:
         28:46:e4:84:1f:4f:0a:c2:fb:ed:4b:96:2c:61:c2:11:fe:a3:
         e2:24:88:64:ed:57:e6:55:84:7c:64:e0:e6:97:c4:bc:cf:a9:
         f1:1b:ae:43:32:82:90:c6:49:fc:51:28:c8:55:dc:79:e8:48:
         66:6d:1d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:46 2026 by rpki-client