Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer
File:                     CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer (raw, json)
Hash identifier:          ULHyDQHuBSUC29U2SLBLjnQkVR74oiNxvaUGuMVQJ4g=
Subject key identifier:   CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       55E53636887848ECB3C8BD29132C9B8C1629D3D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 24 Apr 2026 13:14:34 +0000
Certificate not after:    Fri 23 Apr 2027 13:19:34 +0000
Subordinate resources:    IP: 103.111.118.0/23
                          IP: 2001:df1:1ec0::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e5:36:36:88:78:48:ec:b3:c8:bd:29:13:2c:9b:8c:16:29:d3:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 24 13:14:34 2026 GMT
            Not After : Apr 23 13:19:34 2027 GMT
        Subject: CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:24:ee:c4:8a:3b:e5:33:b7:94:b5:04:df:cb:
                    7b:ab:bf:3f:b3:7f:80:98:5c:0b:bc:d8:24:b2:c8:
                    30:76:d5:d1:91:26:39:c4:78:ff:5d:5e:27:a3:87:
                    34:0d:9c:80:b9:94:3d:7e:68:2f:ea:6b:17:57:98:
                    b3:a6:88:cd:6d:4d:03:25:0a:20:69:43:54:50:12:
                    13:d3:5e:4c:75:01:3d:d1:c9:ee:22:00:e7:37:41:
                    48:5a:52:9f:cf:ef:21:d8:07:81:77:92:a8:a8:4e:
                    ae:ff:b3:c1:9c:35:44:7f:aa:13:bc:41:33:8f:d8:
                    82:b6:21:26:55:27:9f:77:57:0f:20:95:58:c5:cb:
                    58:4d:02:79:fe:3f:7d:9e:77:74:cf:b3:1c:2a:3e:
                    53:5d:55:30:50:8e:35:f2:e7:89:3a:3f:ec:c2:94:
                    35:7b:19:88:d3:b6:15:5f:58:d8:b4:1e:8a:f6:6f:
                    3d:47:ed:ab:49:9f:5e:49:34:c4:91:94:4d:d8:49:
                    c0:23:fb:8c:7c:8c:7a:50:27:da:b3:5b:3b:58:c4:
                    7b:f2:d0:e7:d1:e9:43:54:c7:1d:ba:26:4c:2f:a1:
                    57:b6:74:90:26:dc:04:e2:d7:a1:27:c5:89:40:15:
                    30:17:c1:20:1f:18:e3:c7:d2:2d:76:a7:fc:f8:cb:
                    d6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.118.0/23
                IPv6:
                  2001:df1:1ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:ab:f2:40:3b:c5:33:fc:f2:fc:c4:b5:b3:cd:be:55:b8:23:
         c8:b5:0d:f2:db:3a:94:be:b0:13:b4:0b:fb:03:58:c7:ef:0c:
         92:e1:f1:36:45:9a:47:27:7e:24:76:5c:3a:9f:dd:17:a0:2f:
         7a:4a:7b:02:de:a1:3a:b6:aa:c1:3f:1a:98:6a:e2:07:b6:66:
         d2:d4:09:76:84:71:f7:f0:1d:1c:7c:0f:b8:f6:b4:6b:a6:ab:
         ab:b3:05:be:fa:3f:51:a9:34:9c:40:86:56:4e:64:a5:52:b7:
         07:e3:5a:22:3b:98:82:e7:2a:48:39:56:f9:65:60:b6:73:88:
         f1:41:10:37:61:51:28:a9:84:70:b6:8c:f1:09:08:3d:2f:16:
         a2:62:a1:fb:09:9c:53:73:54:5b:5c:14:a4:d3:09:d1:13:0c:
         f9:0e:d2:01:b9:b9:b7:b7:70:bd:08:14:2c:11:70:e0:cb:15:
         fd:41:0a:02:07:cc:74:58:c4:ca:f8:46:88:e9:ee:51:84:3f:
         41:c4:56:ec:21:c7:6a:a8:92:35:38:57:ec:f8:b1:23:ed:49:
         c2:f0:55:5d:1c:0e:d7:78:ea:ca:cc:18:35:e9:3f:8c:9a:c9:
         a8:d2:2b:74:d5:ee:08:1b:0a:cf:bd:6a:01:2b:14:21:1f:58:
         3a:02:3f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:01:35 2026 by rpki-client