Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer
File:                     99A17325620A243689E32E6074D5CFCA91D915EB.cer (raw, json)
Hash identifier:          0iPcbmVOtqg8TQwtWoJPGyKDexNou3NfcZ5grAkQNhk=
Subject key identifier:   99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       6FA27752CC450441ABC54C7149B974F3ECB513C1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 27 Feb 2025 16:32:17 +0000
Certificate not after:    Thu 26 Feb 2026 16:37:17 +0000
Subordinate resources:    IP: 157.20.156.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a2:77:52:cc:45:04:41:ab:c5:4c:71:49:b9:74:f3:ec:b5:13:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Feb 27 16:32:17 2025 GMT
            Not After : Feb 26 16:37:17 2026 GMT
        Subject: CN=99A17325620A243689E32E6074D5CFCA91D915EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fd:ca:0b:09:dc:6e:f2:b0:16:5c:93:24:ea:
                    a0:70:cd:71:62:35:4d:6f:e9:e0:eb:e0:f8:b7:0b:
                    9f:d4:89:de:03:e4:e9:7b:0c:8f:48:66:91:35:d5:
                    d0:6f:45:0c:0c:17:6e:5d:89:eb:b8:f4:4b:29:6e:
                    26:05:4f:5c:8c:6e:1e:1a:63:76:b5:ae:57:4f:70:
                    1a:e0:d1:fe:ff:d3:9f:a2:55:26:b4:79:ab:bd:0f:
                    3d:dd:9f:54:2b:1b:bf:a2:95:ed:68:ea:33:72:c8:
                    0b:6f:97:7d:56:ae:c1:0d:87:1a:63:e5:08:32:08:
                    36:f4:ff:fc:e3:89:de:a3:87:dc:b5:24:b5:31:59:
                    d3:ee:f8:29:3c:91:38:c4:55:b4:9f:6a:18:90:3a:
                    f3:1b:d8:cb:c4:d0:c6:ef:19:b6:59:6f:bc:3a:fd:
                    a3:29:f9:bf:72:cd:5b:fe:97:bf:6a:46:dd:8b:44:
                    ea:7c:12:0f:23:19:74:fd:10:ae:b3:2d:13:e3:86:
                    37:66:b8:97:1a:b7:32:48:06:5b:14:ab:b4:62:8c:
                    7e:48:ad:32:ee:92:98:5e:25:ef:22:e5:2e:15:80:
                    f6:bd:44:72:6d:dc:af:59:d1:fc:ef:d8:e0:c8:5c:
                    a0:70:48:2c:22:0d:74:6c:9d:6f:26:20:71:c8:d5:
                    3a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:69:66:9f:41:64:c7:b3:12:87:eb:42:97:a5:65:3b:02:ad:
         89:60:54:07:f2:56:77:4f:b7:db:55:93:7c:26:46:9e:1a:94:
         0d:14:8e:02:5e:aa:10:cf:14:57:26:24:81:99:20:f1:b2:20:
         57:91:c4:70:a7:22:83:72:ac:cc:fa:d4:52:88:8d:8f:f7:0e:
         29:b7:38:47:3b:b1:c8:cc:fd:28:93:a0:17:a4:2d:ec:77:16:
         92:7b:9f:58:60:16:68:5a:57:9f:07:0b:e1:ca:4a:75:c6:76:
         4d:cb:f8:1f:0e:5e:65:4d:ee:a9:87:a9:e9:10:0e:53:16:93:
         18:6c:76:bc:86:4d:78:75:c5:1f:19:e2:03:b7:5d:28:11:9e:
         f4:d5:7d:78:59:ec:34:9d:d0:29:24:0c:11:a7:25:a3:67:95:
         a6:ef:f4:88:8c:7f:f1:38:48:7c:1d:10:f7:9b:a4:50:e1:d6:
         25:80:00:fb:40:e3:c2:af:04:7a:45:d5:46:c6:a8:f7:55:7c:
         ee:b3:14:ba:6c:d0:fe:93:53:4d:0a:da:ab:13:0b:ef:d4:c2:
         8d:8c:0f:60:bc:86:d2:e9:ab:99:ed:40:c8:54:79:66:0f:1c:
         2b:65:0b:bc:7e:c5:59:8f:f7:53:3b:44:a4:f0:cc:d3:85:0e:
         f4:7a:a4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:42:51 2025 by rpki-client