Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer
File:                     0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer (raw, json)
Hash identifier:          cJIbLCNry3EykEyBHJCYaHLUfddTN8/6wnDPz0Uwrjk=
Subject key identifier:   0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       29813064F4F0EED4B58B6C5063D057D145716C76
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 Dec 2024 14:30:10 +0000
Certificate not after:    Tue 02 Dec 2025 14:35:10 +0000
Subordinate resources:    IP: 139.0.0.0/16
                          IP: 139.192.0.0/14
                          IP: 139.228.0.0/16
                          IP: 139.255.0.0 -- 140.0.255.255
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:81:30:64:f4:f0:ee:d4:b5:8b:6c:50:63:d0:57:d1:45:71:6c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Dec  3 14:30:10 2024 GMT
            Not After : Dec  2 14:35:10 2025 GMT
        Subject: CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:16:b3:df:c9:24:56:64:40:e8:29:7a:73:f4:
                    fd:18:ec:60:62:0a:fc:3c:df:ad:c0:c6:fe:71:f2:
                    a3:3b:fa:44:50:0c:c8:15:33:ab:9f:30:6f:db:66:
                    fe:06:e6:54:e9:05:40:fc:67:a2:19:9e:c0:2b:f8:
                    05:6e:3d:13:60:07:ee:bf:3d:e6:50:c1:0a:d5:57:
                    8b:64:43:39:65:43:7f:f4:7a:37:38:e1:73:3c:0d:
                    f9:09:07:f2:64:a4:8c:c8:d4:4c:8e:a2:e4:b9:a9:
                    d1:e0:be:b1:91:26:2e:43:d5:5f:e0:8f:86:fa:db:
                    a2:f2:fc:cf:a3:57:38:e9:25:63:36:da:a0:81:90:
                    32:db:f2:3b:b3:cb:b3:64:c4:89:33:2f:4b:6f:d0:
                    0a:c9:9f:ab:b1:8f:60:99:cb:71:a1:46:fa:5f:7d:
                    47:d3:75:33:65:ea:f4:bd:fc:be:b7:4a:ab:df:f9:
                    ee:a9:01:7c:38:ee:48:ba:91:b6:ee:ec:d2:21:3c:
                    84:8d:94:6b:c9:2b:e1:db:de:68:9d:9a:e2:00:44:
                    9e:ba:b2:a5:dd:50:68:b4:0f:74:e1:b7:96:58:8b:
                    c8:ea:ff:c2:a7:f2:28:4a:ff:36:73:ed:f9:fe:74:
                    de:89:8e:da:83:fe:88:3e:59:09:5d:85:71:b3:15:
                    7a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.0.0.0/16
                  139.192.0.0/14
                  139.228.0.0/16
                  139.255.0.0-140.0.255.255

    Signature Algorithm: sha256WithRSAEncryption
         10:1f:9c:e3:98:1b:1c:3a:34:ea:de:ff:72:70:e5:06:24:65:
         60:6c:52:99:e0:3b:ff:67:7b:4d:44:bc:e3:84:b1:cb:22:4c:
         80:24:25:19:c3:16:24:ca:a7:65:15:01:54:62:38:34:82:a1:
         8f:13:b0:90:b9:7a:72:d1:1a:53:d1:11:0d:1b:01:ca:cc:1a:
         80:5b:27:b4:71:53:56:42:34:32:2f:db:a9:a3:60:a4:a0:8c:
         d8:47:29:ab:34:60:07:1c:24:97:87:d6:da:39:d6:ab:56:7b:
         78:f4:e2:2f:f9:ef:89:ed:79:4a:19:b0:f8:16:bc:77:3b:d3:
         2a:42:70:21:44:00:9a:32:5b:c0:d6:f1:40:86:98:67:79:51:
         9f:cb:7b:26:25:3c:ea:65:86:3c:e9:53:26:af:c5:42:8c:ab:
         85:b3:2d:c3:a8:8f:5c:7d:4e:c6:1b:b7:24:47:f1:70:d8:80:
         a4:da:c3:8b:81:72:94:e9:8e:81:8b:1d:c9:96:10:d0:d2:e4:
         4e:59:84:61:97:da:dd:d7:a7:88:2b:70:7c:e0:db:e4:57:1b:
         c1:c9:50:5b:bb:29:b2:93:2c:5a:49:ab:e9:a3:40:2a:fd:1f:
         85:15:13:f1:b3:9d:f7:38:f3:85:c0:b6:63:3e:22:16:31:2e:
         98:95:1c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 14:25:51 2025 by rpki-client