Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer
File:                     78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer (raw, json)
Hash identifier:          bRj89N+ml1nXKfbr9RXCVJ1qT7FcabveiRq1UTviLU4=
Subject key identifier:   78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       1CF9C793027F01BBE112B00DEA3E312A3ADC4047
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 12 Dec 2024 03:59:32 +0000
Certificate not after:    Thu 11 Dec 2025 04:04:32 +0000
Subordinate resources:    IP: 160.191.198.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f9:c7:93:02:7f:01:bb:e1:12:b0:0d:ea:3e:31:2a:3a:dc:40:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Dec 12 03:59:32 2024 GMT
            Not After : Dec 11 04:04:32 2025 GMT
        Subject: CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:84:bf:b6:7d:8c:00:2f:4b:29:d1:9a:ff:
                    8b:63:4c:58:36:47:c6:c4:13:7b:df:69:da:f4:9c:
                    0a:0c:29:07:b8:e2:40:47:8f:d3:10:fd:34:ee:23:
                    50:54:c9:bb:19:cc:88:d3:f6:d2:35:62:ec:11:5f:
                    c7:5d:a4:e6:6e:34:cb:1a:19:84:f7:37:2b:3a:96:
                    6f:ce:36:eb:0b:ef:b0:52:4a:28:18:94:3f:1e:ce:
                    32:55:33:c3:ed:db:66:0e:1e:54:50:9f:3b:d4:ff:
                    5b:21:23:e9:1f:b9:4b:0c:08:13:5a:28:eb:18:9f:
                    8a:79:83:9d:1d:4e:f2:97:11:97:dc:7d:2b:47:a0:
                    41:6e:11:35:bc:16:01:90:ba:66:f0:a9:e0:ae:c7:
                    3a:a2:dd:55:6b:dc:96:53:6f:23:c4:83:4d:b0:fd:
                    fb:df:17:d9:14:24:67:fd:82:42:df:ad:56:49:be:
                    37:6e:ea:34:e1:46:77:18:1a:0f:4d:49:ac:64:8e:
                    07:1f:ba:fd:e2:02:be:11:1e:43:b5:b6:81:08:ed:
                    58:cb:38:d4:88:d9:47:0c:44:6b:4d:30:cc:0f:09:
                    d2:35:70:0b:d5:2a:c9:dc:8e:60:10:51:6e:df:39:
                    e3:d2:74:e9:6e:ff:a5:ad:14:5b:17:b6:2b:8a:30:
                    a2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:a2:33:85:72:78:fb:60:6f:ca:f1:c2:bc:c3:51:9b:99:31:
         67:34:50:29:05:b4:22:44:d0:d5:04:e2:50:d8:16:a0:c5:ab:
         b8:e8:15:cd:4b:e1:67:13:9d:3e:78:8c:aa:c9:a9:a6:c4:c0:
         9e:98:b5:6a:4f:d7:58:0d:5b:04:76:c8:7f:a2:7e:f0:05:7a:
         b0:d3:5e:fe:3b:97:10:34:0b:6a:51:43:9b:df:fe:15:10:7b:
         b8:f0:51:e3:71:c8:bd:75:2e:04:c1:20:03:dc:27:c9:ef:cf:
         ee:c2:04:db:3c:8b:75:61:0e:23:b0:be:b0:aa:9a:c2:2a:24:
         25:9c:f4:cc:a5:7b:62:bd:7b:06:86:40:3b:12:dc:e4:08:bb:
         02:53:05:bc:5e:2b:6d:ef:2f:c3:c1:bc:34:52:21:43:60:f8:
         cf:49:43:f2:e9:83:09:f7:aa:a0:b6:cb:8f:ec:93:35:e4:6c:
         05:97:10:d2:1c:4f:03:01:a1:0a:cc:99:bd:77:b1:3b:b7:ea:
         5e:08:f3:c7:15:64:96:03:84:30:02:5e:d0:22:c4:9b:a8:cb:
         a5:2d:7f:0f:86:8c:64:e2:34:c6:8e:82:bc:9d:e7:09:3c:5b:
         73:07:4f:3c:af:5b:33:b2:cf:4d:00:0b:ff:5a:cc:de:62:87:
         85:31:a4:b4
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUHPnHkwJ/AbvhErAN6j4xKjrcQEcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTIxMjAzNTkzMloX
DTI1MTIxMTA0MDQzMlowMzExMC8GA1UEAxMoNzhCN0ZBQTI4ODFBQkZCQzExN0Mw
RjgzRUNEQzlENTU0REY0MTQxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALk1hL+2fYwAL0sp0Zr/i2NMWDZHxsQTe99p2vScCgwpB7jiQEeP0xD9NO4j
UFTJuxnMiNP20jVi7BFfx12k5m40yxoZhPc3KzqWb8426wvvsFJKKBiUPx7OMlUz
w+3bZg4eVFCfO9T/WyEj6R+5SwwIE1oo6xifinmDnR1O8pcRl9x9K0egQW4RNbwW
AZC6ZvCp4K7HOqLdVWvcllNvI8SDTbD9+98X2RQkZ/2CQt+tVkm+N27qNOFGdxga
D01JrGSOBx+6/eICvhEeQ7W2gQjtWMs41IjZRwxEa00wzA8J0jVwC9UqydyOYBBR
bt8549J06W7/pa0UWxe2K4owor8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFHi3+qKIGr+8EXwPg+zcnVVN9BQUMB8GA1UdIwQYMBaAFGD4
vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x
LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ
aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by83NjlmOGFhOC04OTcxLTRlNTEtOGI1MS04MDNiNDliMzJhNGYvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2OWY4YWE4
LTg5NzEtNGU1MS04YjUxLTgwM2I0OWIzMmE0Zi8wLzc4QjdGQUEyODgxQUJGQkMx
MTdDMEY4M0VDREM5RDU1NERGNDE0MTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGgv8YwDQYJKoZIhvcNAQELBQADggEBACuiM4VyePtgb8rxwrzDUZuZMWc0UCkF
tCJE0NUE4lDYFqDFq7joFc1L4WcTnT54jKrJqabEwJ6YtWpP11gNWwR2yH+ifvAF
erDTXv47lxA0C2pRQ5vf/hUQe7jwUeNxyL11LgTBIAPcJ8nvz+7CBNs8i3VhDiOw
vrCqmsIqJCWc9Myle2K9ewaGQDsS3OQIuwJTBbxeK23vL8PBvDRSIUNg+M9JQ/Lp
gwn3qqC2y4/skzXkbAWXENIcTwMBoQrMmb13sTu36l4I88cVZJYDhDACXtAixJuo
y6Utfw+GjGTiNMaOgryd5wk8W3MHTzyvWzOyz00AC/9azN5ih4UxpLQ=
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:36:42 2025 by rpki-client