Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer
File:                     30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer (raw, json)
Hash identifier:          hrmGgOEStsU/S9IchQxWHrbttgil02avBevsTmvG8WI=
Subject key identifier:   30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       32DDCB74FF046ED659380DDB63EA7F89E4B4751E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 22 Jan 2025 20:47:33 +0000
Certificate not after:    Wed 21 Jan 2026 20:52:33 +0000
Subordinate resources:    IP: 103.107.18.0/23
                          IP: 2001:df3:bd00::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:dd:cb:74:ff:04:6e:d6:59:38:0d:db:63:ea:7f:89:e4:b4:75:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Jan 22 20:47:33 2025 GMT
            Not After : Jan 21 20:52:33 2026 GMT
        Subject: CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5a:a9:f4:9b:c0:e8:0d:93:8e:46:a7:22:55:
                    99:8e:73:4e:dc:28:12:52:dc:9b:c5:4d:a8:37:12:
                    66:95:6c:57:3a:01:b8:8c:fc:bb:e5:e5:3c:6b:c6:
                    47:7d:82:7d:0d:bd:0a:9b:58:25:c2:12:ce:5f:5b:
                    b7:81:f3:15:1b:6f:7c:0b:b6:9d:67:66:79:b9:b4:
                    6e:f7:08:e2:7f:9f:52:67:cf:51:9b:8a:97:1a:81:
                    ff:ca:80:96:b1:39:c6:1b:e2:ea:a5:c3:74:59:17:
                    ac:c8:42:9d:24:bc:91:61:08:95:ed:b8:15:bb:96:
                    e9:81:76:c4:dc:50:6f:0d:84:db:96:0b:58:1a:b5:
                    f4:2b:68:83:f8:6b:dd:1c:a3:f5:49:ca:7c:08:cc:
                    97:28:f8:de:00:c1:be:70:c8:71:c7:f0:3a:29:b7:
                    ad:b7:44:38:38:6e:a5:81:d4:bb:3f:6d:13:b6:e2:
                    9d:a7:69:36:2b:71:b0:34:7b:bb:8f:6b:25:07:e3:
                    1d:19:c1:d2:27:21:ee:1c:aa:1f:35:3d:7a:04:4c:
                    21:79:9e:aa:cf:95:f3:ad:92:f7:de:92:42:28:7f:
                    81:13:2c:d9:b6:9f:a2:bb:4c:63:00:73:40:50:ab:
                    82:5f:80:77:98:99:03:7f:e4:4b:8d:22:b6:d4:28:
                    67:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.18.0/23
                IPv6:
                  2001:df3:bd00::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:f0:14:9d:c9:2d:96:1d:a2:71:2b:17:ce:9d:4f:97:4b:75:
         8e:1a:82:f0:ae:56:da:d5:af:91:4d:dd:83:96:06:12:45:91:
         f7:e9:98:1e:59:6c:81:5c:fb:fa:cd:b7:f0:06:6a:ce:03:6b:
         1b:ff:36:84:5f:df:24:13:f3:ee:6a:72:a3:fb:07:30:6e:3c:
         d5:db:ce:ea:11:67:8e:70:d7:ea:75:13:16:96:be:91:45:4f:
         37:58:7a:d4:cc:42:82:13:3f:6d:db:86:91:26:9b:16:37:71:
         28:56:c4:16:42:95:ec:14:96:4b:38:ef:20:b6:7c:42:1a:51:
         a4:da:fe:c1:39:eb:70:6a:e1:c7:b6:eb:d7:77:53:fc:7a:42:
         70:06:7b:a9:7a:26:d5:4b:0b:2f:5c:c7:fb:72:26:aa:86:cb:
         79:c6:b3:15:b1:b1:d4:10:bf:9d:64:e5:ba:61:61:cf:62:29:
         a1:2b:2f:ef:4c:56:52:b6:e1:bd:85:28:19:9d:f8:47:54:8c:
         d0:48:92:c3:3b:7d:e9:56:13:92:b1:db:5c:57:f9:4c:83:27:
         12:ef:6f:83:bf:28:85:48:f4:7d:c9:fa:6b:c3:65:a5:f5:3e:
         1f:49:92:4e:5f:38:db:c9:a5:00:2b:9e:06:e3:7b:ad:9a:28:
         31:c8:3b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:30:34 2025 by rpki-client