Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer
File:                     8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer (raw, json)
Hash identifier:          h7MquOsEviOM8eZeTvKP9GBtEK+2lhepd/LNLdb8Mh4=
Subject key identifier:   8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       31393574A345E9025C2458D8659CEBE7B24690D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 23 Apr 2026 06:48:36 +0000
Certificate not after:    Thu 22 Apr 2027 06:53:36 +0000
Subordinate resources:    IP: 103.159.202.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:39:35:74:a3:45:e9:02:5c:24:58:d8:65:9c:eb:e7:b2:46:90:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 23 06:48:36 2026 GMT
            Not After : Apr 22 06:53:36 2027 GMT
        Subject: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:40:7d:e6:11:98:3a:06:8a:99:9a:1b:36:21:
                    a9:35:a1:50:ad:1b:5b:26:92:10:eb:36:66:04:d7:
                    27:39:bc:e3:91:35:ad:c8:2c:09:5e:7a:c8:09:a9:
                    ed:3f:36:2d:2b:01:e0:8d:fb:da:1f:49:62:61:55:
                    a8:f7:ed:5c:30:f3:80:f4:7e:43:3d:01:08:af:8d:
                    0c:1c:83:a9:55:a2:3f:ae:d6:69:9b:45:2d:02:39:
                    5d:4d:eb:a9:d6:87:9d:af:90:dd:45:a0:53:68:82:
                    17:37:d0:34:79:bf:a5:b7:87:e0:87:7b:c4:0e:75:
                    54:68:01:f0:fe:8a:fd:b2:7a:f8:9f:a3:d0:ff:47:
                    9b:04:42:f0:c6:8f:31:63:54:ee:6f:52:c4:e1:91:
                    db:e0:a1:ae:62:ae:48:44:da:56:71:cc:d0:dc:a4:
                    fe:e9:0a:c0:06:fe:0b:4a:d1:6d:d0:12:f2:1c:d3:
                    06:8d:f3:06:6d:65:d9:65:34:45:e1:fd:2b:ce:86:
                    09:23:d2:16:e9:ed:05:53:77:ea:61:44:a8:24:b7:
                    1b:97:19:2e:06:4b:b0:32:b4:9a:65:eb:2d:ee:4f:
                    86:04:dd:ca:f1:2a:3f:e7:0b:7d:15:7d:e6:6a:54:
                    ef:c7:15:f4:74:74:47:3d:4b:74:f4:dc:98:0c:9a:
                    af:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:3e:81:6a:43:0a:57:21:0e:e0:9d:07:b8:6b:09:cf:a7:d4:
         8d:0a:31:1e:70:03:75:07:d6:a0:cc:ad:1d:86:d6:2c:3f:f3:
         ce:33:33:52:4f:f6:9a:38:61:74:6c:73:86:93:eb:a6:25:21:
         25:5e:59:ea:11:2f:49:ad:15:1a:cf:fb:34:ca:5d:f8:35:c4:
         8b:76:4f:9f:e3:36:08:64:d5:b0:52:5c:7a:b0:83:67:4d:26:
         82:58:d1:48:10:79:2a:41:86:9c:ae:d7:00:52:a4:f3:51:90:
         12:f1:6e:e0:68:bc:e3:d7:54:be:e2:e8:d4:1a:99:22:74:50:
         ab:ca:fe:10:4f:a6:46:09:a1:8e:a5:83:58:29:c5:2a:9d:b3:
         0f:d2:d9:b5:8a:10:2e:4e:6c:1a:b3:af:f6:04:8a:ca:17:95:
         64:36:8b:4b:72:46:74:34:ba:ea:79:d9:02:c8:fc:1c:c7:0e:
         42:24:02:54:a8:1a:4d:4f:47:cc:30:04:d7:ac:fe:4b:53:4b:
         e1:4d:6d:75:6a:ab:90:a0:8a:15:02:e2:ce:56:8b:ee:4a:bf:
         2b:63:e9:67:3b:61:f7:3a:cf:08:15:f0:f9:51:12:7e:4f:9b:
         52:76:db:2c:c9:db:e7:0c:62:ec:c4:81:be:2a:b2:b6:42:9e:
         d5:ca:b5:01
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUMTk1dKNF6QJcJFjYZZzr57JGkNYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQyMzA2NDgzNloX
DTI3MDQyMjA2NTMzNlowMzExMC8GA1UEAxMoOEM1N0M1ODYwQkY5MzhCQjU3RTBC
N0VEMEY4OTBENzBCRkVFNTVBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM1AfeYRmDoGipmaGzYhqTWhUK0bWyaSEOs2ZgTXJzm845E1rcgsCV56yAmp
7T82LSsB4I372h9JYmFVqPftXDDzgPR+Qz0BCK+NDByDqVWiP67WaZtFLQI5XU3r
qdaHna+Q3UWgU2iCFzfQNHm/pbeH4Id7xA51VGgB8P6K/bJ6+J+j0P9HmwRC8MaP
MWNU7m9SxOGR2+ChrmKuSETaVnHM0Nyk/ukKwAb+C0rRbdAS8hzTBo3zBm1l2WU0
ReH9K86GCSPSFuntBVN36mFEqCS3G5cZLgZLsDK0mmXrLe5PhgTdyvEqP+cLfRV9
5mpU78cV9HR0Rz1LdPTcmAyarzsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFIxXxYYL+Ti7V+C37Q+JDXC/7lWgMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by8wMjkxM2ZhMS0zM2FlLTRlMzMtYmJlMi04MWJkOWYwM2M4NGIvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAyOTEzZmEx
LTMzYWUtNGUzMy1iYmUyLTgxYmQ5ZjAzYzg0Yi8wLzhDNTdDNTg2MEJGOTM4QkI1
N0UwQjdFRDBGODkwRDcwQkZFRTU1QTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAFnn8owDQYJKoZIhvcNAQELBQADggEBACY+gWpDClchDuCdB7hrCc+n1I0KMR5w
A3UH1qDMrR2G1iw/884zM1JP9po4YXRsc4aT66YlISVeWeoRL0mtFRrP+zTKXfg1
xIt2T5/jNghk1bBSXHqwg2dNJoJY0UgQeSpBhpyu1wBSpPNRkBLxbuBovOPXVL7i
6NQamSJ0UKvK/hBPpkYJoY6lg1gpxSqdsw/S2bWKEC5ObBqzr/YEisoXlWQ2i0ty
RnQ0uup52QLI/BzHDkIkAlSoGk1PR8wwBNes/ktTS+FNbXVqq5CgihUC4s5Wi+5K
vytj6Wc7Yfc6zwgV8PlREn5Pm1J22yzJ2+cMYuzEgb4qsrZCntXKtQE=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:01:39 2026 by rpki-client