Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/92C5086020B686EBA68B31410C984CDC9BB75029.cer
File:                     92C5086020B686EBA68B31410C984CDC9BB75029.cer (raw, json)
Hash identifier:          2O8VotpeaG/VfLp7KceqYa4M9+fMSCNBVQy/mlDgvvw=
Subject key identifier:   92:C5:08:60:20:B6:86:EB:A6:8B:31:41:0C:98:4C:DC:9B:B7:50:29
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       52FB0D87273A9F9B608179953EA8EEFC386363F1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/92C5086020B686EBA68B31410C984CDC9BB75029.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 30 May 2024 07:11:11 +0000
Certificate not after:    Thu 29 May 2025 07:16:11 +0000
Subordinate resources:    IP: 160.19.165.0/24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fb:0d:87:27:3a:9f:9b:60:81:79:95:3e:a8:ee:fc:38:63:63:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: May 30 07:11:11 2024 GMT
            Not After : May 29 07:16:11 2025 GMT
        Subject: CN=92C5086020B686EBA68B31410C984CDC9BB75029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:87:7a:8a:27:7e:c2:a7:9c:3e:51:93:c5:04:
                    bf:b0:20:eb:c2:0e:14:e5:76:fa:31:05:ed:66:e6:
                    d7:25:7a:8a:f5:25:75:8b:06:fb:07:f7:0d:f8:ed:
                    f2:35:6e:c3:ae:ce:5a:97:82:91:1e:f8:53:40:4f:
                    71:97:aa:c4:84:47:d2:3e:78:40:5c:a3:e0:65:32:
                    00:75:1d:82:dd:c7:ae:b9:a9:99:fc:aa:95:9b:54:
                    7b:9c:97:a4:31:82:54:59:07:28:00:d9:cf:93:08:
                    ae:c3:2e:bf:73:33:b2:13:eb:f2:f1:12:b2:a7:96:
                    55:ac:eb:8d:07:58:ba:4c:1f:97:a5:eb:1d:7b:10:
                    c0:f7:a6:ff:90:34:ff:10:55:79:0b:9b:ae:38:66:
                    f8:d7:e1:28:60:0d:51:b4:56:9f:31:66:36:d6:21:
                    6e:3c:4f:ed:20:e0:25:ca:cd:fc:33:fa:84:4c:61:
                    d9:eb:5a:fa:b4:1d:40:f1:0d:d5:fd:32:eb:f5:e1:
                    6e:ac:01:b9:a1:fc:8a:ec:84:52:72:77:5d:7a:a9:
                    d4:25:d4:fd:eb:3c:06:71:b1:b0:ac:48:27:bb:79:
                    94:dd:c6:35:75:18:6c:74:22:70:04:8b:42:ee:a1:
                    cc:30:74:b7:1a:3c:c3:a4:25:82:17:ab:1e:b1:a3:
                    6c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                92:C5:08:60:20:B6:86:EB:A6:8B:31:41:0C:98:4C:DC:9B:B7:50:29
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/92C5086020B686EBA68B31410C984CDC9BB75029.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:ea:4f:7a:56:75:1e:08:72:f6:46:9d:2a:38:52:bf:57:c1:
         18:20:a7:bc:61:45:b9:0f:70:ec:4c:80:de:fc:ac:5b:fa:0a:
         18:72:ef:02:0d:78:cc:fa:ad:4d:7e:80:f1:d5:d8:be:3b:8b:
         15:9e:4c:a0:d4:16:f8:6d:ac:23:b8:57:ec:00:5d:9e:9d:cb:
         1c:85:0f:09:d5:76:40:18:7a:0b:03:78:6b:42:79:c2:98:f2:
         8f:43:45:7d:77:82:43:1a:3a:e6:e1:29:01:15:be:52:dd:86:
         61:fe:b2:01:54:43:04:76:a6:ce:53:cd:dd:e4:22:ad:4b:c0:
         d5:95:13:29:3e:b9:0b:02:a3:85:ab:e2:6b:90:44:fd:44:53:
         04:50:9d:56:cf:8a:e5:a9:dd:65:45:df:f4:9b:43:b6:8b:de:
         e7:b7:41:b3:11:42:4a:4b:86:25:6d:a9:dd:96:d1:78:ae:92:
         09:bc:41:e4:a7:ae:ab:4b:e7:aa:52:4e:09:00:e1:84:13:2e:
         aa:be:20:a7:88:e1:a8:53:5d:1b:2c:3c:53:ff:ac:b7:90:91:
         f2:cc:24:83:76:9a:e1:d2:aa:e1:d5:f3:18:dd:92:4a:e1:c6:
         f9:7e:cb:20:9f:5f:c1:4a:23:a4:34:be:d3:73:5c:97:de:db:
         b9:b5:32:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org