Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer
File:                     2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer (raw, json)
Hash identifier:          pr7ioAFu58MyQGUfJ9YegLry9KLmyHEyeVi1sKVE240=
Subject key identifier:   25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       51507B4E6DEA5D7C2AA3C23FF38D8DB87D5BD87C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 20 Dec 2024 13:02:04 +0000
Certificate not after:    Fri 19 Dec 2025 13:07:04 +0000
Subordinate resources:    IP: 103.172.20.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:50:7b:4e:6d:ea:5d:7c:2a:a3:c2:3f:f3:8d:8d:b8:7d:5b:d8:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Dec 20 13:02:04 2024 GMT
            Not After : Dec 19 13:07:04 2025 GMT
        Subject: CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:07:8b:fc:83:91:5f:80:c1:f3:d6:3e:98:4a:
                    cc:41:89:08:23:bc:bd:3f:94:cc:93:12:00:14:ad:
                    ec:d7:7b:35:f0:d3:7b:7e:2e:2e:09:32:ec:6e:f9:
                    9b:83:e5:47:e1:80:73:ac:6f:f5:a2:38:ac:8b:5a:
                    c7:cf:a1:0d:60:7d:84:45:2b:82:9b:d4:48:73:f3:
                    cd:26:2b:7a:7b:b9:eb:db:52:6e:0e:83:c9:4b:8a:
                    61:7a:7a:aa:85:40:48:2c:09:fb:82:6e:78:47:9b:
                    40:d0:11:46:cf:52:8b:18:4f:1c:7b:0c:8f:08:0e:
                    c9:20:49:1d:02:e4:4b:ab:fa:cb:f0:38:f2:89:a3:
                    63:42:bf:c4:8b:a0:bd:b4:af:fc:1d:37:4b:1e:2f:
                    cb:7b:86:0a:07:91:85:dc:29:ad:d2:5e:64:94:25:
                    34:44:e1:19:e3:d4:e1:ba:84:95:20:91:94:5e:0b:
                    8e:6d:a7:ee:38:15:8b:ff:10:f8:57:d6:75:ef:1e:
                    dc:32:f9:23:7b:9d:53:40:49:aa:13:d9:ab:06:03:
                    92:15:3f:79:e1:9c:b6:05:68:9f:ec:be:e9:6f:f9:
                    5e:d4:91:bf:70:ad:93:94:0f:95:87:8d:1b:e3:98:
                    08:5b:5e:66:d4:85:59:08:7c:9b:94:c1:1d:d4:2b:
                    8d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:a9:a0:c9:e0:b6:c5:9b:3f:30:6c:ff:64:72:5e:a0:b8:9f:
         0d:8e:97:b1:08:87:6e:86:1d:51:5a:89:74:4d:bd:c7:44:4b:
         63:f6:70:7e:06:0d:f7:d9:76:db:1d:76:ca:6f:d4:d6:71:3f:
         7e:4a:c0:f0:40:fd:af:38:49:9d:17:5f:97:ed:a8:40:a5:28:
         57:85:fc:b2:43:bf:65:e9:65:5c:06:97:e6:ec:c1:02:6b:19:
         e1:5d:cd:0e:37:60:7e:5d:4e:13:82:6f:dd:b2:61:d7:ad:d8:
         f4:ad:e3:d0:64:6d:ac:90:ae:34:91:a9:4a:d4:1d:42:17:f6:
         51:3b:1f:a1:b5:dc:90:0b:f9:a9:9b:47:83:2c:5f:5d:95:c0:
         79:b1:56:84:67:91:78:f3:ea:ef:26:8c:34:0e:b3:70:68:8e:
         11:42:a8:8a:df:96:91:ad:9d:e6:16:22:b9:67:58:69:f0:4f:
         d1:93:08:44:3c:f3:b1:36:5f:22:1a:21:5f:d1:c6:84:8c:40:
         23:9f:b3:fe:b2:ab:5d:c9:e0:90:bd:17:26:5a:08:89:cc:9a:
         3f:ef:ad:b2:d6:7c:0b:16:8e:14:b9:72:b8:ae:6f:25:b9:2f:
         31:79:0e:60:4e:33:3b:bf:58:a1:b8:f7:f9:20:3f:b5:b2:da:
         37:28:f7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:32:10 2025 by rpki-client