Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer
File:                     371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer (raw, json)
Hash identifier:          hiB+DBju3NtOx41Vjal5d8UeOj8cknqNvO/QZ1MHgmQ=
Subject key identifier:   37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       498ECD8F8FA7657AF47CC543A8A4751DCB6969A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 26 Apr 2026 22:18:44 +0000
Certificate not after:    Sun 25 Apr 2027 22:23:44 +0000
Subordinate resources:    IP: 103.231.112.0/22
                          IP: 202.8.28.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:8e:cd:8f:8f:a7:65:7a:f4:7c:c5:43:a8:a4:75:1d:cb:69:69:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 26 22:18:44 2026 GMT
            Not After : Apr 25 22:23:44 2027 GMT
        Subject: CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:db:ef:a3:2c:2a:0f:53:77:11:cf:2e:17:17:
                    da:17:b4:5b:d7:ff:63:63:28:4a:82:ac:64:80:94:
                    4b:6b:dd:8d:74:5a:24:cf:92:a6:68:b2:64:c8:76:
                    fd:1a:29:af:28:82:bb:3e:b4:08:ec:7e:9b:c4:68:
                    1b:51:f7:01:cc:79:6d:56:90:1e:8b:17:e6:4c:47:
                    86:19:98:a8:f1:9e:e1:43:8b:22:52:b6:17:18:eb:
                    09:53:1a:60:6d:79:08:1b:46:dd:0f:54:32:c1:26:
                    b2:80:c5:76:b7:41:9a:24:0f:84:60:fe:44:dd:85:
                    29:39:75:44:d5:60:2b:39:91:0f:3a:ea:80:f4:04:
                    4f:00:97:8b:77:6f:3c:76:03:69:54:f0:42:5a:aa:
                    e9:e2:55:1f:29:b7:60:5f:30:cc:95:02:6b:10:eb:
                    e1:00:2b:45:fd:42:f3:83:5d:da:0c:86:e5:f4:bb:
                    02:1a:fb:05:a7:04:c4:ba:b1:9e:26:d9:6c:d3:c2:
                    10:c8:ce:99:5e:f9:df:4e:df:bf:df:00:50:4f:cb:
                    d8:86:3e:30:26:b5:7b:80:89:8d:dd:6a:78:8e:70:
                    af:7c:ff:bd:a2:f3:7a:29:ad:5e:13:5e:92:e7:38:
                    57:b9:de:22:37:12:20:ce:dd:76:83:27:5b:7e:72:
                    e8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.112.0/22
                  202.8.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:d9:62:c1:45:69:dd:f7:b9:c8:5c:d0:1d:d6:3b:34:c7:6a:
         6b:7b:1d:ff:1a:d9:68:df:7c:7e:e2:ab:5e:ec:4b:06:b4:fa:
         f3:b9:97:d3:b9:68:42:55:e1:94:fb:4c:99:d7:b9:e9:e7:5e:
         d1:22:7f:74:dd:26:1e:2a:f8:a5:bf:75:ce:63:c5:c3:21:e4:
         82:c7:32:32:88:6f:6e:6a:b7:23:de:46:5c:a6:1e:af:3d:46:
         3c:32:18:c7:59:b9:86:00:0c:68:7f:5c:0b:da:bc:f2:1c:2c:
         d8:60:44:5d:14:ab:ca:46:9a:f2:8b:11:a0:ab:95:fd:f9:b0:
         98:e7:dc:d0:00:6e:1f:1c:2c:4c:e7:99:b1:f3:f2:7f:da:d3:
         8c:ed:98:40:03:4a:c4:31:b2:36:fd:c4:a7:81:39:30:99:26:
         12:66:19:a3:14:12:2b:e4:5d:2e:64:d7:70:da:18:5c:8b:d1:
         9b:ff:aa:69:df:24:ea:07:10:d8:0a:24:0f:58:f2:9f:66:42:
         33:1b:5d:9c:45:1c:ae:f2:d5:94:b6:7f:50:88:36:8b:6d:47:
         9e:61:78:47:6b:ef:66:19:0f:c1:5f:aa:c6:ca:28:2d:bf:19:
         1b:f2:c9:f2:d4:45:40:a3:8e:98:5f:84:8b:6e:12:83:92:1f:
         a5:7f:53:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:07:41 2026 by rpki-client