Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/620EA740D42161712C52447733CE9DAF24484B62.cer
File:                     620EA740D42161712C52447733CE9DAF24484B62.cer (raw, json)
Hash identifier:          4OqRwn0SAE9ks77xG88ZI8g4mZH4c4u7evVnoSIpnvQ=
Subject key identifier:   62:0E:A7:40:D4:21:61:71:2C:52:44:77:33:CE:9D:AF:24:48:4B:62
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       46D15CA9B7BC6F836D4BA79A1D4C3257C020B92D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/620EA740D42161712C52447733CE9DAF24484B62.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 20 Apr 2026 08:04:36 +0000
Certificate not after:    Mon 19 Apr 2027 08:09:36 +0000
Subordinate resources:    IP: 2001:df5:eac0::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d1:5c:a9:b7:bc:6f:83:6d:4b:a7:9a:1d:4c:32:57:c0:20:b9:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 20 08:04:36 2026 GMT
            Not After : Apr 19 08:09:36 2027 GMT
        Subject: CN=620EA740D42161712C52447733CE9DAF24484B62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e3:27:1a:db:98:7d:68:07:2c:95:a4:7f:c5:
                    b9:57:ba:16:b5:6c:fc:3d:94:48:a1:18:81:65:9a:
                    0c:62:b4:77:34:80:42:bf:7e:78:63:f9:07:6f:59:
                    75:81:19:a4:86:72:13:77:db:d2:df:d4:b5:1f:45:
                    cb:7c:74:ef:af:90:08:d3:51:8e:21:69:08:df:b5:
                    b8:6c:06:c3:71:8e:c8:3a:0d:04:59:a4:21:c8:f3:
                    cf:34:44:0d:93:da:30:73:b0:e8:82:c5:af:97:d7:
                    75:67:ce:af:ac:23:49:cc:4c:09:dd:3d:d4:af:7f:
                    f2:8d:cb:62:b0:50:bf:ac:af:dd:c4:57:6c:22:7f:
                    2c:9c:4b:fe:d8:e8:6e:52:9a:47:48:40:7c:8b:47:
                    08:ad:5c:af:14:68:8e:40:e0:da:7c:53:18:25:2c:
                    d6:77:43:bd:91:5c:d8:e8:59:ae:dd:20:58:5f:7c:
                    67:e4:cb:54:72:b1:58:64:1e:73:08:f3:bb:da:27:
                    91:16:54:f2:5a:fc:32:7b:a9:5c:dc:8d:c8:06:8f:
                    3b:bf:45:77:a6:3d:97:9e:52:df:a2:fb:7c:5b:91:
                    ff:2e:2e:6c:be:31:37:0a:5c:02:a5:c4:c2:39:9e:
                    7c:76:e9:8c:bc:b4:3f:34:00:5c:24:30:cf:45:6c:
                    9e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:0E:A7:40:D4:21:61:71:2C:52:44:77:33:CE:9D:AF:24:48:4B:62
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/620EA740D42161712C52447733CE9DAF24484B62.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:eac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:b8:85:16:a0:52:aa:9a:fb:bc:c7:a2:f6:88:2c:ba:18:8e:
         a7:03:6e:dd:44:d3:4e:e3:fd:e7:f3:1f:17:66:6d:fc:45:95:
         e9:19:57:5e:bb:3b:1e:57:70:f2:5d:87:d2:01:5c:f9:d1:ec:
         6f:9a:93:fd:06:fe:5b:2c:83:69:de:ee:21:d0:77:a6:36:7f:
         0d:89:98:11:92:ae:47:56:eb:9b:6c:43:e9:6f:31:da:92:93:
         6c:73:bb:f9:de:a3:db:f8:bd:dd:60:d1:30:be:13:ee:4b:70:
         81:e9:91:04:8d:e5:80:e8:44:0b:e1:ea:76:ad:cb:91:9d:eb:
         87:e7:b3:11:b4:37:2e:aa:92:8e:e4:bb:d1:c9:6d:a9:49:11:
         29:32:b6:ae:62:dc:e0:cf:a7:75:64:ac:a8:08:1e:92:22:07:
         ad:0d:95:92:71:2a:db:69:d5:5d:69:34:08:bb:7c:a4:57:cb:
         54:8c:00:6e:e0:cc:4b:eb:07:f9:a0:55:dd:82:9b:b5:82:50:
         21:ea:8e:74:83:c8:9a:40:a8:1c:5d:a4:5e:03:0d:c4:51:8e:
         1e:21:d5:47:37:82:26:b9:e8:67:8b:dc:76:45:3f:9b:45:0f:
         7a:1c:ae:f8:c1:ea:65:63:36:62:f7:ca:0f:98:b7:0b:9a:35:
         06:1e:5f:05
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIURtFcqbe8b4NtS6eaHUwyV8AguS0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQyMDA4MDQzNloX
DTI3MDQxOTA4MDkzNlowMzExMC8GA1UEAxMoNjIwRUE3NDBENDIxNjE3MTJDNTI0
NDc3MzNDRTlEQUYyNDQ4NEI2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKnjJxrbmH1oByyVpH/FuVe6FrVs/D2USKEYgWWaDGK0dzSAQr9+eGP5B29Z
dYEZpIZyE3fb0t/UtR9Fy3x076+QCNNRjiFpCN+1uGwGw3GOyDoNBFmkIcjzzzRE
DZPaMHOw6ILFr5fXdWfOr6wjScxMCd091K9/8o3LYrBQv6yv3cRXbCJ/LJxL/tjo
blKaR0hAfItHCK1crxRojkDg2nxTGCUs1ndDvZFc2OhZrt0gWF98Z+TLVHKxWGQe
cwjzu9onkRZU8lr8MnupXNyNyAaPO79Fd6Y9l55S36L7fFuR/y4ubL4xNwpcAqXE
wjmefHbpjLy0PzQAXCQwz0VsnjkCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFGIOp0DUIWFxLFJEdzPOna8kSEtiMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9iMjM4ZTU2ZS1lZGE1LTQwNWEtYWJiZi00MmZlMjdiNWJhMDAvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IyMzhlNTZl
LWVkYTUtNDA1YS1hYmJmLTQyZmUyN2I1YmEwMC8wLzYyMEVBNzQwRDQyMTYxNzEy
QzUyNDQ3NzMzQ0U5REFGMjQ0ODRCNjIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAgAQ316sAwDQYJKoZIhvcNAQELBQADggEBAFa4hRagUqqa+7zHovaILLoYjqcD
bt1E007j/efzHxdmbfxFlekZV167Ox5XcPJdh9IBXPnR7G+ak/0G/lssg2ne7iHQ
d6Y2fw2JmBGSrkdW65tsQ+lvMdqSk2xzu/neo9v4vd1g0TC+E+5LcIHpkQSN5YDo
RAvh6naty5Gd64fnsxG0Ny6qko7ku9HJbalJESkytq5i3ODPp3VkrKgIHpIiB60N
lZJxKttp1V1pNAi7fKRXy1SMAG7gzEvrB/mgVd2Cm7WCUCHqjnSDyJpAqBxdpF4D
DcRRjh4h1Uc3gia56GeL3HZFP5tFD3ocrvjB6mVjNmL3yg+YtwuaNQYeXwU=
-----END CERTIFICATE-----
Generated at Wed Jun 3 02:59:16 2026 by rpki-client