Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer
File:                     D6FA07102C8726922074D42DFF59946144A13506.cer (raw, json)
Hash identifier:          YS+7D8/RMIBmiTYOG+8FKJuw22cq9/wH9Jd1CSCZDJw=
Subject key identifier:   D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       4AA6AD3287B5A89813B2B23066F145739B6716F0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 28 Nov 2024 11:32:21 +0000
Certificate not after:    Thu 27 Nov 2025 11:37:21 +0000
Subordinate resources:    IP: 160.25.200.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a6:ad:32:87:b5:a8:98:13:b2:b2:30:66:f1:45:73:9b:67:16:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Nov 28 11:32:21 2024 GMT
            Not After : Nov 27 11:37:21 2025 GMT
        Subject: CN=D6FA07102C8726922074D42DFF59946144A13506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fa:94:8f:13:b9:70:f3:65:ac:d3:72:13:01:
                    72:78:16:1b:01:c5:3c:f3:38:6a:b1:be:9b:70:45:
                    eb:9a:64:dc:0d:7f:e4:21:33:29:c1:ef:0f:e7:75:
                    ae:6c:c4:9c:1a:d4:2c:08:5e:23:41:b8:fc:e4:b0:
                    bb:a4:d3:90:25:7a:83:90:a6:5d:c7:2a:46:d1:58:
                    19:49:d0:b4:d8:86:01:0d:1e:68:24:80:cd:92:9f:
                    76:89:0d:80:3c:ca:d5:db:f1:3c:f2:86:b0:6c:bc:
                    cc:7c:21:f9:de:da:49:69:33:6d:28:b7:a8:97:f2:
                    c2:40:07:72:db:c0:f0:3d:18:b0:f4:75:5a:d9:7a:
                    8c:15:73:41:d1:d6:db:f6:c0:ae:d3:67:b8:ba:aa:
                    b3:56:6d:0a:f3:b6:6b:0d:10:49:fa:b1:4b:c9:49:
                    b9:f6:a0:b6:29:ac:f0:d5:e5:d7:b1:63:82:4b:8e:
                    fc:eb:1f:55:b9:00:cd:4f:0b:cf:17:fd:e1:24:22:
                    fb:4c:4f:df:14:de:87:b0:0f:3a:06:ae:e9:54:6a:
                    36:7d:2b:39:98:70:44:3c:06:b3:84:e7:09:b2:b8:
                    cf:bf:6f:31:4d:29:57:7e:5b:fc:64:c8:e3:83:b2:
                    2d:8a:45:04:58:df:a9:0b:03:4f:cb:03:38:2c:9d:
                    f0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:ea:a2:2e:7d:af:14:d7:88:41:44:b1:4c:5d:29:93:1b:5f:
         2e:55:e4:8b:2d:91:1d:6b:eb:57:f1:e5:58:52:69:72:22:3a:
         d0:78:2e:e3:cb:4e:8e:23:30:5c:75:9b:30:05:9f:f4:78:59:
         12:87:f2:46:e9:77:51:a6:13:d8:bb:f6:53:83:90:eb:21:28:
         29:55:9a:7e:a6:4b:cd:9b:77:be:a2:9c:a2:b4:2a:d0:8c:08:
         25:4e:22:f1:1a:34:c9:19:be:95:d9:a0:79:43:d1:5a:2c:60:
         ae:25:53:85:ca:b7:1b:6a:e5:b7:f1:53:f7:55:c4:c5:c8:5b:
         42:4e:dd:8a:b2:df:d9:99:6e:2c:ae:4c:7a:49:10:b4:7b:1f:
         b3:09:0f:77:a5:27:e3:ab:fa:b9:41:bb:c1:b3:77:ab:14:4c:
         ea:5f:a6:b4:a1:31:94:d8:d9:4e:dd:6a:02:19:01:a6:6f:81:
         7e:81:f1:9a:1c:11:61:df:6b:02:6c:f3:5d:9f:d0:de:9f:dc:
         e5:2b:1a:3f:07:85:32:69:30:91:05:6d:e8:dd:bc:a4:c6:64:
         96:7d:9c:54:35:32:1c:c8:90:e1:0a:79:52:a6:89:e1:3f:3a:
         90:35:cb:75:12:b3:dd:d2:c3:d5:4d:d0:42:93:02:ab:d9:c3:
         95:c3:56:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:54:17 2025 by rpki-client