Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer
File:                     87EF06CC72EA3A8D57019F6198CA40168384D259.cer (raw, json)
Hash identifier:          4n7aa8SDZFMWFPk/j5auMuEdbHOdfXL/GK9DKxWkU/s=
Subject key identifier:   87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       7ABEB832A3C34E9629A8B84DED1EF039DE42FDA9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Jan 2025 13:49:27 +0000
Certificate not after:    Tue 06 Jan 2026 13:54:27 +0000
Subordinate resources:    IP: 157.15.51.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:be:b8:32:a3:c3:4e:96:29:a8:b8:4d:ed:1e:f0:39:de:42:fd:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Jan  7 13:49:27 2025 GMT
            Not After : Jan  6 13:54:27 2026 GMT
        Subject: CN=87EF06CC72EA3A8D57019F6198CA40168384D259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:35:f5:a1:32:89:28:3b:65:c0:04:1a:3b:34:
                    e3:40:cb:c6:2e:e8:5e:ee:ea:d2:d0:00:60:44:87:
                    11:b4:6a:a0:8a:17:27:d2:de:ee:3b:57:1a:b4:c5:
                    45:ab:13:20:88:eb:26:fe:55:0b:1a:40:1d:46:fb:
                    6a:00:1d:66:8a:76:18:f7:22:72:60:7f:d3:7c:96:
                    3a:e4:9c:ec:01:bc:e2:74:1e:1c:f5:68:83:40:15:
                    18:85:27:0d:17:e9:b7:50:50:5e:6b:bc:84:f5:43:
                    f9:b6:4f:a7:40:d5:93:51:23:6f:c8:e4:8b:25:64:
                    d4:8b:c6:e7:4b:5c:2e:3e:a1:8d:dd:0a:ce:e4:2a:
                    f1:0d:72:27:96:b4:77:92:e8:bd:21:b7:f6:5c:6b:
                    11:32:81:c5:bb:ef:9b:26:26:e7:b8:42:3d:f1:bc:
                    66:9c:a5:1a:76:63:36:b7:31:62:9d:35:94:46:67:
                    ec:c3:3f:7a:98:8d:01:96:70:84:99:81:95:da:2a:
                    97:04:6c:09:35:d0:47:c1:43:4e:af:65:ad:0c:98:
                    58:97:fe:b3:59:6d:c5:db:72:ea:e3:91:e1:9e:42:
                    d3:4b:a0:fb:15:9e:b4:7f:ed:1a:df:6a:29:cc:47:
                    92:1b:df:bb:6c:83:e5:dc:73:e6:ab:aa:13:e5:2e:
                    74:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:48:92:9b:1f:54:a7:3f:c1:60:09:3e:55:60:41:0f:3a:52:
         6d:dd:cf:11:28:96:84:b0:cd:f3:0a:79:d8:ef:53:f6:f3:d3:
         5e:e6:2c:0c:7c:4d:0f:0e:92:3e:82:1f:1b:2b:93:2d:10:d4:
         7f:f1:3a:07:44:a4:a3:da:c3:1c:72:48:70:d6:59:1c:7a:0f:
         fc:17:86:77:a1:5c:40:41:6b:47:c2:38:6f:92:24:65:ec:b2:
         e9:17:80:56:a4:48:a8:b3:5e:aa:7b:b5:c6:e5:62:9a:5e:e2:
         6f:82:20:7d:6b:7f:ef:19:49:17:c6:7b:48:56:89:11:02:60:
         ef:e7:50:3a:52:dd:06:71:85:97:48:48:e8:78:df:fe:5c:6c:
         bf:50:1e:6d:04:98:c4:0e:7c:bf:90:80:46:cc:d6:a8:8f:e7:
         b2:9d:d3:eb:d2:15:97:46:03:cc:a3:66:8d:d5:73:9b:73:ca:
         01:32:ea:b3:79:91:8a:90:2a:a2:82:7e:98:46:cb:28:a2:8d:
         78:0c:4b:80:98:63:b2:69:98:4e:04:f1:23:0c:73:20:47:9d:
         29:6f:4d:ef:f0:15:b3:8b:0e:16:b5:6d:ea:16:2c:55:94:ed:
         db:06:c4:68:92:11:93:f5:64:e7:67:5a:19:a7:7b:97:35:34:
         9f:35:3e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:58:20 2025 by rpki-client