Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer
File:                     5EC928AFD73AFC70F10C468E21482031920DF521.cer (raw, json)
Hash identifier:          DLLhTDxkHULhkavt2Jtbxzedw2fmBly6ZuhM8CiUB2s=
Subject key identifier:   5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       75DA292305D083E4FF73BFAF8A84AE11CC57C84B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 20 Dec 2024 02:38:16 +0000
Certificate not after:    Fri 19 Dec 2025 02:43:16 +0000
Subordinate resources:    IP: 157.10.90.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:da:29:23:05:d0:83:e4:ff:73:bf:af:8a:84:ae:11:cc:57:c8:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Dec 20 02:38:16 2024 GMT
            Not After : Dec 19 02:43:16 2025 GMT
        Subject: CN=5EC928AFD73AFC70F10C468E21482031920DF521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:da:ca:4a:1f:39:e4:1e:85:e8:60:22:49:
                    07:05:6d:1c:87:14:3c:dc:b6:e3:59:d0:6c:0a:66:
                    40:f5:e4:3e:45:30:ab:18:55:e8:80:9f:c6:e4:8c:
                    79:50:6d:2b:1c:6a:3e:3d:cb:4b:49:ed:99:60:18:
                    9e:79:6e:f8:5c:90:dd:13:c6:fc:49:e2:16:2a:62:
                    9b:66:dd:30:6b:f8:9d:21:c0:23:92:98:cd:8a:8c:
                    c6:bf:32:64:c5:ab:d8:da:3d:46:c4:4c:6e:e1:13:
                    48:53:00:e4:6c:46:81:52:ed:34:80:0f:ad:cc:1c:
                    c8:46:8b:56:2e:8f:1e:0c:9d:e3:dc:ce:b8:4d:60:
                    e4:f4:10:5f:4b:0f:6b:c8:57:0b:a4:a4:04:5b:bd:
                    52:cd:44:d7:6a:70:86:30:28:d6:95:dc:fd:55:7a:
                    88:ad:d4:e2:fd:24:c1:d0:ff:87:93:e1:f0:27:90:
                    65:76:b2:22:15:75:09:1d:ec:01:c2:e2:ce:29:f2:
                    fc:b9:6e:90:2a:5f:01:ee:cd:65:9a:e0:f2:d9:be:
                    4a:56:7b:3f:67:40:d4:30:a0:a9:c8:98:d6:42:da:
                    eb:c0:af:56:4b:ad:32:d8:0b:41:f8:13:81:bf:ec:
                    dc:54:b9:f2:d4:cf:a3:0f:3b:65:a3:e1:44:b5:00:
                    0d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:51:e2:5c:53:fd:29:66:b9:1c:06:0e:cc:0e:d8:93:15:bc:
         5a:40:6f:6d:2e:2a:cf:d2:a2:d3:d9:38:17:35:b1:2d:b0:45:
         aa:3b:74:df:15:26:75:7c:cc:d7:69:c5:fb:da:75:28:fd:26:
         a0:33:38:6c:77:d7:b7:c7:a3:67:17:9a:e7:9f:70:87:1a:d5:
         d4:59:df:8b:ad:d7:c0:cf:55:d3:c8:b1:f7:05:44:7e:65:ee:
         0f:ac:14:da:b9:a5:9d:cc:4e:7f:66:15:a7:2a:e1:d1:f9:77:
         3d:54:a9:c3:3b:f3:77:ba:1d:8b:bd:99:d2:59:dd:eb:87:e6:
         3c:67:75:31:78:1c:d7:f9:81:0e:be:8c:bc:30:da:2c:50:f7:
         6a:30:5d:94:58:a3:3a:69:60:ff:b0:84:1d:07:51:5b:1c:cc:
         5b:04:49:aa:b5:ac:4e:41:5e:db:16:fc:92:03:2d:55:10:fe:
         31:f8:77:9d:f3:3b:45:6e:3d:2b:80:f3:65:21:ff:10:ca:d7:
         28:4d:96:4e:7d:65:53:41:ab:be:d2:31:58:31:c0:b6:8f:d2:
         59:63:ea:1d:56:8e:16:da:b2:58:9d:0e:cd:8f:e8:53:c7:5c:
         ac:53:6c:b3:30:52:0f:65:87:68:a6:48:4a:10:c7:ea:f8:4b:
         ad:4c:d8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:36:23 2025 by rpki-client