Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer
File:                     9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer (raw, json)
Hash identifier:          2oO+lfmFPX/bGzrG7a4Z2GAGR/UwC1r+2tlnhdEMROk=
Subject key identifier:   9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       1EEB6E7D9B0D760349E67AF26C69AE46F502676E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 02 Dec 2024 07:42:50 +0000
Certificate not after:    Mon 01 Dec 2025 07:47:50 +0000
Subordinate resources:    IP: 160.187.231.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:eb:6e:7d:9b:0d:76:03:49:e6:7a:f2:6c:69:ae:46:f5:02:67:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Dec  2 07:42:50 2024 GMT
            Not After : Dec  1 07:47:50 2025 GMT
        Subject: CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ce:60:ce:58:0d:51:3a:f3:38:8d:17:3d:c3:
                    99:01:07:cb:6a:46:d6:ab:04:ee:09:9e:bb:fb:a2:
                    53:25:d1:f7:a6:8a:39:f8:96:82:64:63:cf:6e:c0:
                    dd:48:f7:86:2e:14:b8:df:6e:4c:7b:63:0c:6f:99:
                    d6:c9:08:01:a2:3a:f8:7d:02:50:94:94:78:37:40:
                    a2:a7:d0:c8:5e:9c:e8:20:db:22:c0:1b:eb:07:df:
                    8b:4b:ae:2d:d6:7e:9a:40:06:44:2f:a7:64:96:3b:
                    16:ee:06:1c:f9:11:ea:94:26:55:b4:29:38:7d:3c:
                    9b:ac:5a:48:7f:ec:b3:85:4d:ab:a3:36:b4:b7:81:
                    55:e0:e8:01:32:31:92:cd:dd:8c:43:b6:77:6e:6e:
                    47:83:c3:f0:5b:ba:92:73:02:10:48:04:f5:20:30:
                    33:93:48:6f:54:82:80:67:b2:89:fd:c6:44:80:b5:
                    9e:11:8f:7a:77:96:b1:57:33:bf:98:ed:1e:f2:a6:
                    8b:da:17:80:1f:c5:cd:e1:9e:7e:46:95:72:63:e1:
                    16:c8:d5:aa:d8:21:42:ce:3c:b0:a1:fa:70:19:9b:
                    41:b5:2b:6a:51:2d:f0:a2:2a:5e:80:1b:11:79:2a:
                    89:1e:65:f2:c4:1b:58:24:40:d6:9f:d3:be:f3:c7:
                    47:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:9a:23:14:d0:5d:20:0b:60:be:ae:dd:c1:7d:ab:50:a4:c1:
         9e:fb:30:b2:24:82:56:08:84:82:2a:99:dc:8e:fd:95:8d:dc:
         e1:c1:cd:18:4f:85:c8:94:f9:60:fa:e3:cf:ed:84:31:0a:5c:
         b0:aa:00:fd:bb:94:19:54:0c:ae:38:7e:59:92:b4:32:d4:49:
         43:5f:b8:fc:24:06:6c:56:3c:89:aa:c1:9f:fb:7a:d4:4b:ef:
         f9:e5:29:7b:ab:a9:db:1f:23:16:7f:7f:09:1d:d5:63:e3:9d:
         2c:e5:88:35:04:8a:22:8d:79:ed:fe:73:b8:d8:7f:2b:28:c9:
         57:96:08:ca:24:99:5c:82:a5:d7:3e:98:52:a5:91:ed:ba:fe:
         73:6c:4b:a1:ba:9c:69:f2:e8:7f:37:a5:02:2e:3f:d0:f1:af:
         07:3c:31:8c:e9:1d:44:61:01:fe:ec:fb:31:2b:da:d1:56:1a:
         f6:cf:19:af:cc:ac:1a:c5:77:cf:bd:9a:21:31:80:f6:8e:8f:
         1f:41:65:db:04:84:15:d6:37:ee:c2:9b:15:55:c8:23:9f:be:
         5b:04:1e:71:9e:36:11:00:6f:5a:b9:c4:02:e6:19:c3:03:81:
         c9:29:b8:19:13:8f:ca:f5:ed:34:a3:b9:8a:65:72:a2:6b:e0:
         65:df:e6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 23 04:54:47 2025 by rpki-client