Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer
File:                     11B369E1CF41EB03E35A2711FF1FE0F687242467.cer (raw, json)
Hash identifier:          HglpYDTKj2TzWjtk2eoWT3GSa2JSBUh2LeczBVRwLbs=
Subject key identifier:   11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       565BF205863C71BAC514D834653D29E11831AC1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 13 Mar 2025 19:37:05 +0000
Certificate not after:    Thu 12 Mar 2026 19:42:05 +0000
Subordinate resources:    IP: 103.184.178.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:5b:f2:05:86:3c:71:ba:c5:14:d8:34:65:3d:29:e1:18:31:ac:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Mar 13 19:37:05 2025 GMT
            Not After : Mar 12 19:42:05 2026 GMT
        Subject: CN=11B369E1CF41EB03E35A2711FF1FE0F687242467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a8:c3:77:fd:e2:35:c2:c5:cb:24:ff:9d:f0:
                    04:4c:51:13:c3:d9:54:76:0b:34:4f:56:ed:df:d6:
                    70:19:29:61:3b:5c:02:2b:2a:94:a4:c3:6e:13:c1:
                    01:eb:8c:43:bc:38:31:dc:71:8a:aa:bf:12:f8:ba:
                    3b:03:99:3f:7e:5a:a4:3d:6a:c9:7b:d8:f6:95:fa:
                    be:6a:3e:3b:5a:8d:d1:2a:1f:f6:00:8f:55:84:d5:
                    04:55:48:02:c0:85:c5:23:55:3b:c3:65:b7:aa:ed:
                    f3:c4:fc:88:d8:65:41:79:b8:f2:ab:db:b7:c7:99:
                    70:50:24:cc:46:d5:42:91:b0:99:90:3e:8b:9d:c5:
                    c3:2b:55:5b:43:79:2b:04:c3:73:db:91:aa:f9:52:
                    51:62:75:68:7e:51:e9:f3:1d:5d:b6:2c:3d:69:2f:
                    37:34:53:81:86:a4:c8:7c:d6:6f:6e:2b:53:a6:d6:
                    49:93:24:c0:ec:9e:e2:be:2c:27:de:ec:bd:5f:59:
                    81:27:2f:15:52:6b:5e:1e:70:c4:a2:e2:70:5e:cb:
                    77:69:a1:79:0c:6d:fd:bf:d7:81:da:24:2a:a2:5f:
                    9b:ea:79:a4:c3:6c:ec:43:a0:39:19:2f:70:2d:a4:
                    ff:32:4a:1d:dc:a3:eb:89:b5:c3:d4:3d:ad:3b:e3:
                    26:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:7a:0d:83:c7:e2:30:75:93:55:30:8b:c4:98:02:3a:4e:d1:
         86:08:e6:f8:05:5b:e5:ea:4e:69:60:dd:65:2d:34:41:74:0e:
         04:2c:9b:fa:b2:88:20:af:a4:fc:0d:06:8f:04:91:f0:9e:41:
         e0:ed:6a:30:eb:96:31:a9:e7:d0:3c:21:c5:ac:91:64:c1:e8:
         f8:9f:5a:86:04:0b:fb:3d:9d:de:bc:50:14:0a:e1:42:2c:3d:
         38:cd:6a:8d:18:7e:be:75:5e:bc:36:e7:cb:00:48:79:d1:6f:
         d4:ac:7d:0e:66:93:37:96:39:05:0c:9e:20:8b:c6:ab:1e:23:
         8a:ef:58:0f:7b:7a:d8:b0:69:fc:89:b8:a6:d3:e0:71:c5:cc:
         02:a9:5c:5b:20:ff:fd:0e:52:79:ec:c8:d0:56:b2:3d:c6:4c:
         c7:8b:43:6a:16:df:0f:46:f4:8a:ab:88:e1:d8:ea:2a:f9:d7:
         87:fc:47:dc:db:90:f7:2f:19:dc:1a:3d:16:d8:ca:f9:6c:c6:
         2e:e6:ce:61:5a:0e:1f:1e:52:95:32:e3:b3:13:95:6c:3b:06:
         8f:d8:79:ba:c7:97:e7:ac:d7:9f:4a:77:f0:d1:3f:97:a9:08:
         fd:51:a3:64:2e:1e:b1:b7:1c:a6:ac:fd:0e:62:a2:b1:df:21:
         59:b1:d5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:30 2025 by rpki-client