Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.cer
File:                     260881823F2804BCA7A65AC93BD3DC9A7EE1730A.cer (raw, json)
Hash identifier:          LPzC3H73+iMnQCf+yrPAqsCYRSz2xs0w8oKniEibdeA=
Subject key identifier:   26:08:81:82:3F:28:04:BC:A7:A6:5A:C9:3B:D3:DC:9A:7E:E1:73:0A
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       34B0CA5D2A88564D925B9B0811855EBC66F67EFB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 27 Feb 2025 19:51:51 +0000
Certificate not after:    Thu 26 Feb 2026 19:56:51 +0000
Subordinate resources:    IP: 157.20.188.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b0:ca:5d:2a:88:56:4d:92:5b:9b:08:11:85:5e:bc:66:f6:7e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Feb 27 19:51:51 2025 GMT
            Not After : Feb 26 19:56:51 2026 GMT
        Subject: CN=260881823F2804BCA7A65AC93BD3DC9A7EE1730A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:73:e8:1f:41:b5:5d:a2:03:37:7b:01:69:
                    51:c6:37:b2:ac:7b:23:bd:3b:6a:b8:bf:27:1b:04:
                    e6:88:ab:be:ad:a2:d6:f4:62:0e:0c:71:67:9c:b6:
                    ef:45:01:f9:27:ef:94:42:a6:72:c9:09:4b:45:52:
                    00:f7:fe:af:f5:cf:78:e6:6d:b8:26:fb:e9:dc:f4:
                    1a:ef:83:9b:99:59:a8:28:20:ba:d4:7a:48:1c:12:
                    ee:41:76:19:a5:73:75:02:ac:c0:56:35:91:65:8d:
                    1b:01:2a:af:3d:eb:a0:c8:5d:6a:cc:80:ee:55:f7:
                    2d:b3:cc:e8:26:ac:e7:e8:03:70:88:44:dd:df:20:
                    19:2a:2b:46:2f:c2:21:4f:ea:cc:e5:f0:6f:62:88:
                    63:f5:df:0d:1e:ba:83:61:8c:ec:09:15:e3:42:77:
                    06:bf:e4:88:cb:fa:2d:bb:f1:76:7a:f8:97:90:f6:
                    0d:58:34:e8:62:f8:77:ea:83:bf:9f:d1:54:60:65:
                    fb:b4:e1:a1:a7:c6:f5:f0:98:3a:55:ed:af:59:e6:
                    59:89:c3:e2:b6:08:29:54:8d:f4:e8:45:52:51:1b:
                    64:25:26:1b:6f:45:d9:31:68:b4:be:e6:47:51:52:
                    83:ec:82:2a:0b:35:ff:04:9d:c0:97:31:2a:57:8b:
                    ab:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                26:08:81:82:3F:28:04:BC:A7:A6:5A:C9:3B:D3:DC:9A:7E:E1:73:0A
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:85:aa:b3:26:54:24:64:4d:3f:23:d6:1d:5c:41:ef:57:9b:
         4c:58:39:a7:e2:c8:cf:50:cf:ab:29:e4:db:0a:cb:cc:fd:08:
         8c:6d:62:a6:12:10:01:d6:c8:83:1b:8a:c0:3c:eb:fd:d4:9c:
         15:d3:d7:8f:5e:24:2d:4b:ce:50:1f:b1:e9:12:e1:ae:87:2f:
         3c:5a:a0:00:98:49:f4:b1:23:4f:b2:55:3d:da:8e:cf:0c:3e:
         bd:72:d2:60:98:a8:82:70:c4:35:a4:ab:c0:94:33:ca:cb:df:
         f1:eb:e2:e7:5c:11:46:1c:bc:39:22:d5:65:92:3f:d5:53:cc:
         f4:01:04:10:5c:49:44:7b:0f:a2:19:25:30:4e:5c:99:34:d2:
         43:7d:33:45:d6:22:d3:29:d5:b6:68:6b:45:c8:64:68:5b:30:
         90:f8:a2:96:dc:de:d0:47:4a:28:6f:0d:b5:d3:db:f9:9c:24:
         89:24:eb:48:cd:ea:1a:81:93:72:64:9b:dc:24:96:66:a7:10:
         79:15:8a:d4:26:4e:4b:3d:c5:6c:a6:8c:07:8d:0c:9b:71:ad:
         de:ac:70:73:f5:3e:dd:a2:2f:27:94:61:7f:4b:57:a5:fb:85:
         be:23:80:f5:f0:27:ef:ea:da:32:e0:64:d7:1b:53:32:0b:6c:
         5b:7a:c5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:28:16 2025 by rpki-client