Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer
File:                     2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer (raw, json)
Hash identifier:          wJZ0nQoA7EE7F3QBdbKSwf44ho8A+/HxD3G84Vu/uQM=
Subject key identifier:   25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       575884B78CA7FD7FB09A1141417F04C7B7ACBAC8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 22 Apr 2026 16:13:48 +0000
Certificate not after:    Wed 21 Apr 2027 16:18:48 +0000
Subordinate resources:    IP: 103.60.90.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:58:84:b7:8c:a7:fd:7f:b0:9a:11:41:41:7f:04:c7:b7:ac:ba:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 22 16:13:48 2026 GMT
            Not After : Apr 21 16:18:48 2027 GMT
        Subject: CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:65:3c:d6:d1:5b:18:cb:2f:61:dc:70:ff:08:
                    73:2b:f3:04:58:af:6f:3f:d3:ec:73:26:b9:74:18:
                    ab:f2:7a:e6:d2:65:d3:f2:ae:f3:3b:c5:97:b1:e0:
                    53:89:1d:e7:0b:bd:17:ac:5b:bb:c3:73:72:d7:7e:
                    b0:d9:a2:b9:28:63:83:e2:98:f2:1f:90:a3:21:42:
                    68:83:97:29:30:96:30:87:af:44:32:63:5c:ad:c2:
                    d7:3a:c7:eb:70:5c:5c:f0:04:e3:cf:8c:02:21:dd:
                    26:3d:17:66:fd:72:d3:09:8e:70:81:e9:5d:27:8f:
                    08:26:53:94:ca:8f:27:78:13:39:4e:b8:55:a6:af:
                    46:d7:da:cb:e0:b6:8b:36:2d:d5:ef:5b:66:ba:59:
                    d7:a5:5b:d9:94:3b:3b:3d:ec:ea:13:c1:14:16:68:
                    9d:94:cb:14:25:b8:c2:f1:11:2b:14:d7:9f:0f:c7:
                    66:26:7f:39:e9:03:3c:11:5d:6e:59:35:97:20:0a:
                    b5:c3:8b:54:cc:7d:a4:57:a7:a0:aa:35:3b:78:02:
                    1f:c7:88:c9:c5:e3:04:9a:85:37:86:50:d3:5b:f8:
                    50:8c:a9:5f:17:57:a4:12:8a:55:75:3d:dc:4b:94:
                    c8:c3:92:c6:2c:42:d4:fd:91:7b:70:7c:5f:d3:11:
                    88:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:fa:e3:92:ea:eb:5e:6d:80:62:59:48:5e:29:37:e1:5b:76:
         cf:c0:0e:73:6d:a9:f3:17:15:94:0b:13:4c:e6:ed:4e:24:60:
         0f:22:00:d4:56:36:7c:70:55:4a:2e:7e:e0:3c:c9:b0:e7:9c:
         f5:16:d9:12:10:94:52:6a:f7:b0:dc:0c:2a:fb:39:ea:e8:6d:
         ca:fb:67:18:2b:13:7a:fd:7a:d6:d8:be:0e:8f:42:54:2f:28:
         6f:4b:59:f9:6a:9e:57:99:46:f1:de:e3:ec:df:2c:86:d5:54:
         bc:06:0c:ab:41:43:47:ef:fe:63:8f:83:ad:be:71:30:8e:19:
         ae:f0:66:0d:37:9b:bd:3e:4f:e9:30:cf:56:2c:86:d0:02:64:
         b8:c5:7f:bc:f7:2b:78:22:1f:a1:36:a1:7a:4d:e9:a8:e8:0d:
         c3:78:07:09:e5:57:02:b4:04:45:d7:b6:80:29:67:30:e0:7d:
         58:7f:d8:aa:91:df:6f:f5:78:0d:85:b1:74:2e:c0:90:b1:ab:
         96:4b:e7:d5:86:85:20:2d:95:6a:ef:f4:6e:53:22:21:75:49:
         dd:53:67:0b:90:b9:f6:2e:a9:e7:4f:94:dc:c1:54:51:8d:20:
         39:95:9f:ca:00:3a:25:2d:7a:65:ed:b5:30:47:fa:59:c0:9c:
         b5:29:3c:f1
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUV1iEt4yn/X+wmhFBQX8Ex7esusgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQyMjE2MTM0OFoX
DTI3MDQyMTE2MTg0OFowMzExMC8GA1UEAxMoMjU5NkFEOURBOTAzMzFGQjMzNkRD
NTJDNUI3MkY5OTJEN0Q0OUQzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOllPNbRWxjLL2HccP8IcyvzBFivbz/T7HMmuXQYq/J65tJl0/Ku8zvFl7Hg
U4kd5wu9F6xbu8Nzctd+sNmiuShjg+KY8h+QoyFCaIOXKTCWMIevRDJjXK3C1zrH
63BcXPAE48+MAiHdJj0XZv1y0wmOcIHpXSePCCZTlMqPJ3gTOU64VaavRtfay+C2
izYt1e9bZrpZ16Vb2ZQ7Oz3s6hPBFBZonZTLFCW4wvERKxTXnw/HZiZ/OekDPBFd
blk1lyAKtcOLVMx9pFenoKo1O3gCH8eIycXjBJqFN4ZQ01v4UIypXxdXpBKKVXU9
3EuUyMOSxixC1P2Re3B8X9MRiKcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFCWWrZ2pAzH7M23FLFty+ZLX1J03MB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9kZjAzNmI3NC04YTVkLTQwYWEtOTYwYy05MjFlNjNhNzBhNGMvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmMDM2Yjc0
LThhNWQtNDBhYS05NjBjLTkyMWU2M2E3MGE0Yy8wLzI1OTZBRDlEQTkwMzMxRkIz
MzZEQzUyQzVCNzJGOTkyRDdENDlEMzcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABnPFowDQYJKoZIhvcNAQELBQADggEBAH3645Lq615tgGJZSF4pN+Fbds/ADnNt
qfMXFZQLE0zm7U4kYA8iANRWNnxwVUoufuA8ybDnnPUW2RIQlFJq97DcDCr7Oero
bcr7ZxgrE3r9etbYvg6PQlQvKG9LWflqnleZRvHe4+zfLIbVVLwGDKtBQ0fv/mOP
g62+cTCOGa7wZg03m70+T+kwz1YshtACZLjFf7z3K3giH6E2oXpN6ajoDcN4Bwnl
VwK0BEXXtoApZzDgfVh/2KqR32/1eA2FsXQuwJCxq5ZL59WGhSAtlWrv9G5TIiF1
Sd1TZwuQufYuqedPlNzBVFGNIDmVn8oAOiUtemXttTBH+lnAnLUpPPE=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:21:42 2026 by rpki-client