Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer
File:                     DA680D591E9E6B4622614F94CF255933B6749212.cer (raw, json)
Hash identifier:          pIegWJsawnOUsGcCmc9P/hc9o3ahrN7OTN8bPaI8ORU=
Subject key identifier:   DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       5384AF1D006D16F6F647B557E7AC01935908F7F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Jan 2025 01:44:17 +0000
Certificate not after:    Fri 16 Jan 2026 01:49:17 +0000
Subordinate resources:    IP: 157.10.182.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:84:af:1d:00:6d:16:f6:f6:47:b5:57:e7:ac:01:93:59:08:f7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Jan 17 01:44:17 2025 GMT
            Not After : Jan 16 01:49:17 2026 GMT
        Subject: CN=DA680D591E9E6B4622614F94CF255933B6749212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7c:f7:5e:f8:3c:87:ad:7e:32:b6:4d:83:3f:
                    4b:65:70:8e:ef:64:f4:0f:cb:db:ec:db:54:c1:08:
                    87:1b:f6:04:58:ce:c4:3b:a4:1d:d4:e5:d0:f9:97:
                    f8:29:ac:e5:b9:a5:d1:c2:a8:e9:73:21:e8:da:b8:
                    b5:31:5e:43:ab:f6:07:f5:76:1d:62:e1:cc:8a:92:
                    d7:70:c3:59:25:c8:c0:56:d0:6f:02:3b:7e:00:71:
                    67:2f:92:0f:d3:83:62:ab:5c:28:3f:35:aa:a1:02:
                    c6:b6:48:55:47:fb:63:26:fc:36:d3:5b:5f:9c:11:
                    ad:1f:05:c4:c1:43:99:0f:83:08:88:19:35:36:e3:
                    4d:73:78:22:c1:b3:79:76:8c:df:ea:9c:91:d4:99:
                    08:1e:10:32:a0:7c:5c:9c:55:25:9f:62:3b:62:ee:
                    11:9c:17:58:f5:88:9a:1e:1f:9e:dd:af:82:1d:53:
                    79:53:af:31:7b:8b:dc:1a:50:1d:1b:79:77:4d:ff:
                    88:13:46:e6:2e:73:b9:74:0a:2a:e8:d0:32:92:c3:
                    8a:4a:79:41:12:c4:fb:8e:cc:45:61:b5:d1:d3:0f:
                    65:8d:48:31:05:73:24:d3:e2:27:bf:07:c2:71:1c:
                    b4:1c:2b:c6:4a:ea:0e:59:b8:12:ab:57:94:ab:8d:
                    11:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:f1:c1:1c:66:9d:39:19:58:d2:9f:71:28:2b:08:40:8a:06:
         7a:b0:22:a1:df:a8:f9:e5:2a:b9:c8:1f:1e:2a:63:84:3f:87:
         95:b6:b3:ad:d5:31:fc:10:a4:94:52:e6:9a:cb:57:21:7f:94:
         36:02:3d:24:90:b4:b9:fd:30:6d:59:e0:61:d5:24:60:22:59:
         57:0e:83:c1:2c:b1:5b:4d:25:ea:dd:d8:67:30:90:33:ac:5e:
         d2:05:1f:bc:21:26:a6:e1:81:d2:f2:0a:cf:88:49:dd:0d:8a:
         77:76:68:e7:91:75:01:da:9e:3e:1a:22:25:4f:ab:44:f1:25:
         a1:98:e8:ec:f1:55:7c:4e:d4:ef:fa:19:91:04:a7:73:27:36:
         a8:9f:dd:03:2c:8f:96:a5:9d:80:87:51:30:7e:cd:16:73:f4:
         11:9f:10:8a:77:88:6e:fb:d6:80:3c:dd:7c:c3:bd:4b:15:06:
         a9:b7:8f:09:ac:93:1f:7c:e8:5a:3f:a5:8e:ea:3b:b0:bb:9b:
         06:e3:d8:dd:53:7c:9e:99:14:8f:54:5b:2a:a9:3d:98:7e:72:
         0c:ca:93:3b:04:ab:da:83:2a:79:96:5b:72:0b:e1:50:93:b1:
         e7:29:00:2f:ca:0e:76:23:21:d4:f0:03:64:a0:ea:09:12:b6:
         e8:ee:dc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:33:40 2025 by rpki-client