Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer
File:                     52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer (raw, json)
Hash identifier:          7LJweDKP+Y0gqbk4lrlkvnv7/NRIcF6Swy1gyxKJqsQ=
Subject key identifier:   52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4EECEB5344F39245A84ABDDE0904935CCD477935
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 07 Feb 2025 14:32:21 +0000
Certificate not after:    Fri 06 Feb 2026 14:37:21 +0000
Subordinate resources:    IP: 210.87.112.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ec:eb:53:44:f3:92:45:a8:4a:bd:de:09:04:93:5c:cd:47:79:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Feb  7 14:32:21 2025 GMT
            Not After : Feb  6 14:37:21 2026 GMT
        Subject: CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:be:e2:27:66:7c:cb:a7:70:0c:85:fb:35:8f:
                    05:ad:7e:0e:6f:5f:81:60:72:4e:60:1e:af:e1:69:
                    ff:cb:8c:cd:a5:01:56:11:87:22:f7:28:e2:41:f7:
                    56:05:43:60:d5:99:ae:53:cd:3b:71:ee:f3:e3:15:
                    2c:7e:34:55:f8:9c:51:59:b2:75:94:73:86:62:d4:
                    b9:35:e1:b7:01:70:f6:08:9f:f4:0f:0b:47:7f:1d:
                    80:5c:2e:5e:53:77:31:fb:8a:29:1b:c1:50:27:e1:
                    f1:3c:10:25:15:8a:e4:c0:38:c8:97:15:17:89:c0:
                    b6:fd:63:6d:fb:c0:47:b2:9f:25:35:9e:2b:95:c4:
                    4f:4f:a0:fc:83:d3:16:d3:cb:f4:a7:ea:64:03:65:
                    70:2b:51:9b:64:63:28:d2:a6:b6:43:4f:81:da:ca:
                    6e:4b:3e:55:d5:4c:7d:ea:0b:bf:85:40:b8:99:ea:
                    e0:26:92:d3:94:3b:d0:6b:de:4b:9f:94:74:50:7f:
                    31:68:26:a7:fa:ec:c7:5d:17:78:4a:f5:11:25:90:
                    48:00:dd:a8:fc:19:95:c3:c9:55:11:08:31:ac:08:
                    dc:14:84:d1:b2:6b:a1:cc:a8:e3:9e:66:30:74:16:
                    a4:89:fa:79:b7:37:66:2f:74:67:2e:a7:21:04:40:
                    db:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.87.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:14:6a:aa:b7:f1:19:a3:8d:84:0b:f2:ed:3d:70:71:0c:5e:
         12:7f:96:ee:ec:33:f6:85:21:f9:80:5d:3d:db:db:56:13:b1:
         30:89:26:e6:f6:5e:c2:f5:b5:a8:91:66:dc:30:68:d0:e4:e5:
         c3:51:77:3c:67:11:60:71:2c:b1:c9:8f:ae:d5:93:b3:dd:95:
         12:3f:f3:86:3a:1f:36:a2:a1:7a:4e:bb:bb:ff:87:1c:4c:5e:
         21:fb:51:fd:60:fa:30:40:82:07:69:ca:da:cf:ad:f7:d3:a5:
         39:7d:08:ac:2b:01:06:d9:9d:03:bf:fb:3a:73:7d:8f:17:9f:
         50:18:d0:a8:9e:d8:c0:58:97:ab:25:49:18:53:de:3d:1b:df:
         ba:14:f3:8a:b7:2c:80:63:41:b5:d9:a0:61:86:52:68:db:d9:
         bf:c1:65:9e:d5:e8:5d:7f:6f:82:bf:b6:33:1c:11:84:51:78:
         0f:af:da:f0:fe:47:7f:89:ed:56:24:6b:4d:eb:4c:22:50:94:
         1e:aa:d4:4f:87:c8:5d:2c:99:4f:8c:26:52:88:2a:a3:bd:c9:
         f6:11:e1:95:f3:64:22:a8:dd:e8:df:75:cd:18:2c:18:f7:9e:
         98:15:24:e7:1f:ad:c3:c2:e6:66:ac:f8:f2:19:bd:76:b6:73:
         cd:01:44:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:28:50 2025 by rpki-client