Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer
File:                     A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer (raw, json)
Hash identifier:          SK/EHcSGvScymyY4fAUbP6CcH+H8dqgLo2Zddj6iJd8=
Subject key identifier:   A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       073AC6BC59E34CA5E6A9EC85AB3024890233EDF3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 22 Apr 2026 14:19:15 +0000
Certificate not after:    Wed 21 Apr 2027 14:24:15 +0000
Subordinate resources:    IP: 160.19.144.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3a:c6:bc:59:e3:4c:a5:e6:a9:ec:85:ab:30:24:89:02:33:ed:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Apr 22 14:19:15 2026 GMT
            Not After : Apr 21 14:24:15 2027 GMT
        Subject: CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:24:4a:43:8e:d3:7c:16:a0:46:a7:6f:c4:2e:
                    b4:c4:d2:54:c4:10:11:b0:a4:95:7d:b3:64:3b:0d:
                    97:b2:95:d9:cc:b5:05:8b:1d:7a:f4:ac:a2:32:10:
                    e3:46:c1:60:11:b6:e7:15:01:dd:fc:57:98:ca:21:
                    85:66:cd:00:c0:2f:3a:9b:4e:57:a3:2f:97:63:ef:
                    41:7f:65:12:d3:22:1c:41:43:39:23:b6:d9:6d:57:
                    b8:f3:4f:75:c9:31:34:6e:6a:ae:ff:03:c6:b9:32:
                    19:c8:83:9a:fc:02:2c:62:ef:ec:d0:9c:9e:f6:a0:
                    2c:e6:4e:67:94:37:40:c2:b0:80:18:9d:39:7d:0c:
                    b3:80:fb:11:05:2c:59:28:64:ee:41:cc:ce:e6:2a:
                    19:54:f8:c9:c4:15:8a:89:2f:2e:04:55:7f:87:f6:
                    b8:fd:f0:d7:18:e0:82:dc:36:ec:3b:21:8b:ac:6e:
                    4e:32:b6:4b:0f:7b:c0:d6:ef:b4:e5:57:56:48:d8:
                    ed:25:bc:0a:89:a0:33:86:8f:96:e1:cc:ff:db:d6:
                    49:cf:94:78:13:e6:88:f7:c8:78:73:ea:6b:48:36:
                    19:76:f5:e4:c6:06:b5:2e:86:d7:d0:ce:a9:2c:1c:
                    2e:3f:77:5f:3e:93:b2:d2:33:c3:ea:71:4a:b2:8a:
                    58:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:db:e6:af:e3:5c:0b:a0:aa:32:4c:d5:78:3d:db:02:d4:48:
         25:06:f1:e9:55:73:c2:22:b3:93:ad:74:81:e6:2b:ed:53:6a:
         cc:69:5c:a1:ac:01:6b:17:f7:9c:8e:af:c4:ef:17:4f:d0:62:
         fc:a4:77:ab:b9:6a:28:54:fe:6f:ee:33:ee:6d:58:08:ce:a9:
         0f:4e:c2:75:6b:7d:c3:e8:90:a3:86:64:3a:77:dc:d5:15:d9:
         da:22:62:b8:54:2e:5e:e4:a3:52:32:21:53:43:bf:6d:44:fd:
         68:47:0a:77:61:e4:07:e3:8f:11:7a:33:80:91:73:8d:e7:0f:
         e5:33:7f:10:79:20:1a:e6:5a:00:af:ce:d3:bb:69:fc:a9:d5:
         64:b2:87:bf:bb:c7:e7:c4:fe:7f:a8:d4:0e:02:66:3f:3f:80:
         35:ee:07:f4:dc:16:e2:9b:1b:e3:83:d4:2a:cd:28:81:4d:a4:
         67:66:c7:04:29:75:6a:9e:bb:58:58:32:c3:79:ff:7f:8b:49:
         3d:56:10:11:8e:6d:08:be:f3:ec:32:8a:e7:fb:43:f9:b5:b9:
         8e:a1:8a:07:49:67:33:b2:c6:20:0d:a1:0c:31:9f:28:ea:f1:
         07:31:37:f8:40:6f:72:c5:72:ab:25:c6:5c:75:ae:7e:3e:6a:
         ad:c6:4a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:00:59 2026 by rpki-client