Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer
File:                     D4DD8244BC2EB2B187B4181226714505DF8F4452.cer (raw, json)
Hash identifier:          lf15Tb/9MLhUlkxJFHtLI4bCu7ZvyCnXEajv3tqFh28=
Subject key identifier:   D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3FE5F20B21E5C17BD5A786ECFFBB7A9765280978
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 28 Apr 2026 18:29:22 +0000
Certificate not after:    Tue 27 Apr 2027 18:34:22 +0000
Subordinate resources:    IP: 103.170.186.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e5:f2:0b:21:e5:c1:7b:d5:a7:86:ec:ff:bb:7a:97:65:28:09:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 28 18:29:22 2026 GMT
            Not After : Apr 27 18:34:22 2027 GMT
        Subject: CN=D4DD8244BC2EB2B187B4181226714505DF8F4452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:18:d9:5f:00:c4:7d:d1:d8:b4:88:ca:75:a1:
                    3e:92:84:32:1d:21:4a:bf:83:1d:10:72:31:69:41:
                    57:3c:ae:d1:ba:1d:df:60:e5:29:90:77:90:05:9c:
                    30:f1:58:c0:b4:9f:aa:f5:d8:cd:c3:f4:17:77:81:
                    7b:d6:c7:e0:7a:76:c0:7d:b4:a9:ad:b8:7a:98:73:
                    4d:f5:bd:e8:99:25:8f:00:d6:85:1d:fe:61:dd:68:
                    0e:de:97:35:40:a5:ce:e9:96:c1:ec:9d:a1:ed:8f:
                    7d:62:84:49:47:30:f5:74:c8:bd:04:67:c4:27:ac:
                    d8:4b:37:3f:b6:c3:f0:07:9c:09:a3:66:12:c5:4e:
                    f3:84:d9:1e:e3:1c:02:13:3f:3c:0a:bf:58:e2:f4:
                    bc:90:8d:49:72:28:87:91:6f:53:28:7e:24:19:fa:
                    97:e0:45:eb:b4:81:17:65:83:39:58:a1:8a:79:9c:
                    63:c0:ff:e4:f8:86:6c:68:20:e3:a6:ce:90:ed:59:
                    51:58:53:2d:14:5d:fa:9b:17:2d:1c:ec:b4:92:3b:
                    5c:2b:e4:00:a1:6d:16:3b:62:f9:f7:21:ff:82:e5:
                    a1:bd:29:88:96:c3:2c:13:ae:4a:ea:4d:40:cb:4f:
                    40:0a:44:13:08:aa:e4:72:0b:d5:0a:67:a2:e0:92:
                    06:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:e9:ed:9e:5c:31:b8:e9:78:dc:0d:a4:4d:20:97:5a:d6:8f:
         7a:b4:e7:a3:9f:c9:1f:b6:a8:cc:05:bb:c2:56:db:36:c9:f6:
         fd:34:31:e7:55:19:4b:3e:c4:8a:80:e1:2a:09:36:11:4a:5b:
         d0:09:1b:d5:a4:60:13:81:2f:5c:86:97:a3:05:8d:ab:e2:70:
         02:37:4a:11:0b:67:07:cf:a8:a1:17:0e:d6:f9:97:69:9e:d2:
         73:77:09:98:cf:9b:a6:9c:00:e7:0c:92:e9:48:72:f9:10:51:
         fd:e7:e8:7a:46:36:56:4f:74:6e:02:8f:a6:5f:2a:e9:86:09:
         35:07:ac:48:35:7c:85:ac:77:4e:43:6b:98:13:30:32:c4:8a:
         44:46:c9:7e:f4:2a:7b:9f:ac:37:b6:1e:2c:f2:8d:81:2e:de:
         bd:64:dd:1c:2e:13:97:6b:02:b0:a2:8b:94:63:9c:2d:62:4a:
         b5:e1:ed:48:bb:f8:53:6f:c0:12:2d:d8:dc:9f:9a:0d:8e:db:
         38:09:ba:38:c4:5c:33:87:a0:ee:d1:bb:e8:b0:33:d7:ac:6d:
         8a:02:f5:3e:a6:e0:a8:57:d3:28:ff:20:08:a4:34:42:9b:f7:
         c7:04:22:9c:11:49:9d:96:5b:b6:5f:9f:c1:ba:d8:c5:ea:4e:
         66:00:04:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:01:12 2026 by rpki-client