Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer
File:                     07087494011A8BD71E0AB56E4A29820B0C265D45.cer (raw, json)
Hash identifier:          5QxaAkJjLTIrgnDD5YJ9k67oQ7T90NgMz1vMrfYV6+U=
Subject key identifier:   07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4A3DAA16089E20ED6663AD4036EA735ADD803DD6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 27 Feb 2025 05:31:54 +0000
Certificate not after:    Thu 26 Feb 2026 05:36:54 +0000
Subordinate resources:    IP: 103.89.248.0/24
                          IP: 2001:df0:c300::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3d:aa:16:08:9e:20:ed:66:63:ad:40:36:ea:73:5a:dd:80:3d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Feb 27 05:31:54 2025 GMT
            Not After : Feb 26 05:36:54 2026 GMT
        Subject: CN=07087494011A8BD71E0AB56E4A29820B0C265D45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:90:ee:8e:cb:e4:18:ea:f4:bb:67:66:4f:88:
                    f5:74:c8:67:fe:1c:21:d5:ef:9d:14:12:cd:31:55:
                    9c:95:8d:e5:af:2e:0d:d7:90:3e:ea:00:c6:71:80:
                    cf:7f:80:90:91:c4:ea:b9:76:6b:b4:7f:ed:e0:ba:
                    e5:bd:63:81:64:3b:e3:92:a4:95:b5:77:3a:21:e3:
                    55:ec:66:d6:40:5a:a3:59:07:ee:1f:52:e2:df:ae:
                    cf:ee:de:5f:cc:4b:71:29:83:e8:ae:82:4f:1c:41:
                    24:a5:57:7a:f1:7e:b3:2e:6f:c1:d4:dd:57:ca:09:
                    a3:79:b5:1d:75:53:5e:a1:65:bf:54:61:97:12:fb:
                    57:cc:69:43:2e:2a:e1:64:ab:cf:b6:0d:93:9b:9e:
                    88:8c:a2:a8:36:98:81:7a:a4:bd:90:3c:1e:59:c6:
                    d8:4f:2a:a4:6e:75:4c:7f:92:45:d2:29:58:e8:bf:
                    dc:e4:82:70:04:e6:c2:b0:d9:5c:89:6b:4d:81:9e:
                    06:8d:ed:08:97:9e:c6:16:b2:52:fb:19:b2:d7:81:
                    23:a1:98:8f:d1:6d:02:30:cb:19:17:eb:69:39:48:
                    b4:ec:8e:c0:3e:45:05:ee:f3:eb:f0:82:46:4d:a3:
                    d8:ce:74:e5:bf:95:1d:73:19:55:71:14:06:c1:a0:
                    07:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.248.0/24
                IPv6:
                  2001:df0:c300::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:5a:96:c6:4c:b8:c8:d6:db:ca:4a:c6:3f:b8:17:6e:2c:73:
         c9:6b:3b:ef:91:13:f5:65:00:c3:91:42:06:10:bc:79:eb:e5:
         82:bc:fb:29:94:cc:60:3b:95:a1:ff:89:4a:5e:a6:45:8a:3b:
         05:3d:d3:83:43:23:2b:60:97:47:95:43:75:f7:a6:4a:3b:43:
         bf:a0:f0:64:20:e2:da:35:5e:3b:48:f4:29:ab:76:02:5f:e4:
         a2:ea:ac:3f:ac:18:5e:b3:eb:6b:d4:96:a2:13:6c:3b:81:b5:
         f8:2a:56:ee:f6:b3:8f:8d:db:70:64:89:88:7a:98:ec:60:dd:
         17:45:18:cc:14:72:75:af:d3:76:cd:48:6a:e0:46:1c:01:45:
         61:6b:87:55:93:8a:11:17:08:d2:0a:c7:ee:a6:4f:78:f5:80:
         f2:1d:9e:69:ad:90:86:80:8c:79:86:20:6f:4d:34:43:69:ec:
         02:7e:8a:5d:15:da:20:03:88:43:b2:ef:cd:2d:15:3d:ca:86:
         bb:86:eb:b5:33:4e:dc:ef:86:9e:27:7b:06:61:15:53:64:55:
         8d:90:aa:f5:7e:fb:34:77:9d:aa:71:74:3f:58:a5:2d:58:bb:
         10:33:bf:68:88:d5:a0:61:19:74:63:6d:52:f6:2d:ba:24:80:
         62:88:f6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:30 2025 by rpki-client