Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer
File:                     81498B85C0E2937290B9B2119B132DEADBB24A5C.cer (raw, json)
Hash identifier:          H5oS7mAvSL2dFMl9EdBnArzCukPIz1NdsdFdgEFiuP0=
Subject key identifier:   81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4A08A9B8B4539EA899B44585ACD645DA6FFFC13D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 24 Apr 2026 19:51:16 +0000
Certificate not after:    Fri 23 Apr 2027 19:56:16 +0000
Subordinate resources:    IP: 103.159.224.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:08:a9:b8:b4:53:9e:a8:99:b4:45:85:ac:d6:45:da:6f:ff:c1:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 24 19:51:16 2026 GMT
            Not After : Apr 23 19:56:16 2027 GMT
        Subject: CN=81498B85C0E2937290B9B2119B132DEADBB24A5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:eb:fc:0f:f3:6f:6d:2e:dd:8f:fd:b8:e8:d6:
                    af:7c:6f:de:96:df:aa:16:a6:aa:0f:7a:ee:c9:00:
                    9e:77:75:3c:62:18:66:a8:b9:96:e5:c3:6a:98:7a:
                    ed:29:e5:69:ce:fc:58:ad:f6:1d:a1:15:ea:94:ef:
                    d0:af:14:9d:ed:be:6d:c1:54:e9:af:4a:2e:2d:8b:
                    99:c1:46:be:aa:2b:86:1d:8c:47:0f:d2:b9:b8:19:
                    6d:01:39:51:9a:5b:87:8d:9d:36:c7:59:7a:b0:6b:
                    13:4a:92:e3:c4:76:b0:01:d9:a2:82:b7:97:d9:50:
                    9d:53:42:49:a5:99:16:54:c7:22:ff:3a:fd:a6:66:
                    95:73:19:d9:c2:89:0e:ef:60:3b:bb:91:6c:c5:9a:
                    3b:82:1f:a5:43:8e:1c:81:44:f6:db:38:36:a4:42:
                    d8:51:10:b7:02:89:42:5f:fd:da:0b:58:65:55:df:
                    8f:32:42:cc:c1:60:5e:4f:e9:50:63:55:5a:99:9e:
                    34:22:3c:f4:64:79:cd:8c:e3:ef:de:98:2f:67:57:
                    df:54:76:38:c9:74:51:1b:39:83:49:3c:75:79:fa:
                    07:50:e3:c3:42:9f:a0:93:26:2f:8d:dd:81:f4:d3:
                    43:12:52:28:1d:b4:59:01:fd:81:28:4a:0f:28:f4:
                    c4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:b9:db:f5:dc:b5:46:7f:86:6d:39:4b:18:39:cd:a4:03:1a:
         d7:00:2b:21:46:4a:eb:73:e4:cd:3a:5e:11:ae:f1:27:da:f9:
         16:fb:3a:e9:1b:08:fe:5f:45:80:dd:62:bc:9e:cc:97:51:d8:
         ff:ae:fd:54:a7:2d:8e:85:f5:2d:6c:3e:3b:45:57:67:c3:d0:
         4a:f4:4b:23:15:96:a3:08:e8:4d:4b:61:04:f5:ce:e2:71:09:
         de:67:d3:44:34:46:ed:df:4b:c1:db:ee:4c:c9:4e:8c:ab:e9:
         a1:ea:19:66:ce:14:28:0e:b4:71:60:e3:47:a2:49:09:43:af:
         a0:a0:04:0e:33:be:18:b7:db:38:77:38:9f:35:9f:14:0f:04:
         5f:ee:1f:c9:33:a1:3e:ac:e3:cc:bb:86:91:c0:9a:d8:87:79:
         ac:c0:fc:6c:5f:6f:75:85:c3:25:98:ee:b1:6e:ba:e0:38:c0:
         11:56:0a:a9:4d:b9:ce:24:b0:ec:4f:59:14:19:49:e3:7e:64:
         51:99:68:7a:ba:2b:65:ee:ad:d8:d8:95:71:c3:62:f5:97:0e:
         15:bc:d8:f1:91:a7:97:ad:99:c8:f8:9f:48:14:15:3d:88:f2:
         cf:e3:9c:f6:eb:33:b6:92:3b:5e:ea:75:db:68:a1:97:4f:52:
         a2:7f:5c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:01:31 2026 by rpki-client