Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer
File:                     8999E6DA986A355F868ABD73E4E2AADC08244F29.cer (raw, json)
Hash identifier:          j27y6JWaIdQ1yGg7BPI2KfolhoOs4v3dbMOBaU52d8M=
Subject key identifier:   89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       3398D8EEF28EE47C2E9DF5371A4B9460E698EBC6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 23 Apr 2026 00:38:58 +0000
Certificate not after:    Thu 22 Apr 2027 00:43:58 +0000
Subordinate resources:    IP: 157.66.57.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:98:d8:ee:f2:8e:e4:7c:2e:9d:f5:37:1a:4b:94:60:e6:98:eb:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Apr 23 00:38:58 2026 GMT
            Not After : Apr 22 00:43:58 2027 GMT
        Subject: CN=8999E6DA986A355F868ABD73E4E2AADC08244F29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:70:81:e0:b9:93:d0:ea:b0:b9:52:22:93:1c:
                    74:72:b5:e1:b0:20:f1:16:22:e1:4a:bb:eb:2a:49:
                    9c:22:e5:ce:3d:62:3c:a2:3a:07:cb:f6:05:89:27:
                    8e:f1:7e:d2:3e:6d:c0:0a:2c:d5:fa:9b:9b:e2:e3:
                    1a:04:29:9a:51:cf:03:c7:e4:51:5b:18:4d:5b:fe:
                    53:b8:2b:32:b6:8c:35:ff:b0:8d:b4:b5:97:94:ce:
                    54:53:7b:e6:f5:b2:ab:92:ad:f6:64:ae:ec:bb:44:
                    86:af:10:30:97:58:8a:0b:1a:fc:88:76:cc:b2:a2:
                    46:3a:15:93:08:8c:79:6d:92:87:86:f7:78:3f:d4:
                    76:a1:b4:5a:35:20:73:c2:0f:52:26:e4:8a:ba:d2:
                    14:b4:c9:ec:15:4d:0f:d2:a5:33:d9:d9:48:fc:11:
                    e5:d7:11:a9:e9:f0:c2:38:1d:3e:df:e6:00:93:a0:
                    f2:8c:ca:c7:ff:9c:8a:84:c7:8b:a2:37:a0:aa:16:
                    45:21:9b:a6:60:ed:cb:1d:d9:07:9b:cf:15:79:27:
                    00:36:dd:12:a0:67:b9:58:a7:25:6c:d4:50:33:ee:
                    aa:2e:7e:93:a7:8b:25:86:8f:21:9c:0b:39:3e:9b:
                    a6:5a:7e:08:08:60:77:a1:73:46:63:5c:69:69:4f:
                    66:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:31:05:e6:2d:22:fe:bb:ba:aa:8f:97:fb:38:76:3e:df:66:
         11:48:18:64:e8:0b:0c:4e:71:67:b2:6e:02:b2:50:ed:8f:66:
         6b:08:82:7d:16:fd:6a:10:cb:cc:6e:60:e7:8f:a0:ab:5b:72:
         1b:7e:26:07:8e:18:cf:cb:e7:7a:89:c3:35:d4:5a:16:1e:7b:
         6d:0f:f7:f2:1d:0e:e2:db:27:fc:c7:28:45:f6:9b:ed:ee:38:
         29:10:14:d2:a9:75:a5:d1:e8:84:72:31:85:b3:1a:a1:59:0a:
         cf:3f:d8:fa:cb:7f:e2:14:64:71:6a:d1:1d:07:d8:9f:8f:e9:
         aa:ef:b4:ed:73:64:d7:bd:b7:bf:bb:52:c4:84:54:0f:8d:94:
         6d:8f:40:3d:9c:e2:89:1a:9a:99:93:d1:ba:f4:d7:26:c4:85:
         3d:dd:00:ea:86:8e:a9:6d:d7:b7:db:4b:4f:81:4a:bb:2c:fe:
         c9:67:f3:97:95:e9:24:87:bc:2f:95:8a:d1:20:49:20:ac:89:
         51:44:87:cc:cc:39:ab:2e:2a:24:59:40:0b:b8:41:20:f7:43:
         d6:69:c0:1e:48:85:72:66:e6:70:63:b4:97:4f:02:f8:30:b2:
         40:4d:68:48:b4:16:5b:4f:60:c6:ed:99:0c:53:e0:96:75:01:
         d4:f7:cb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 02:59:47 2026 by rpki-client