Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.cer
File:                     6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.cer (raw, json)
Hash identifier:          SJVyRabYf8lu8lBug6FZQ/Ys/XJoz0yX3FmRA7//FFY=
Subject key identifier:   67:75:D0:05:3C:ED:1C:5F:FF:BB:3D:5E:F0:FD:EC:48:05:2F:23:3E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       52F5095291DF94DBCAE44FD1ABB6A1CE918D80A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sat 29 Mar 2025 04:46:26 +0000
Certificate not after:    Sat 28 Mar 2026 04:51:26 +0000
Subordinate resources:    IP: 103.167.22.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f5:09:52:91:df:94:db:ca:e4:4f:d1:ab:b6:a1:ce:91:8d:80:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Mar 29 04:46:26 2025 GMT
            Not After : Mar 28 04:51:26 2026 GMT
        Subject: CN=6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3b:31:5d:2d:16:a8:ab:88:c0:68:79:26:f6:
                    5d:d0:e7:d9:a2:00:8b:fe:23:19:03:e2:2d:68:64:
                    c1:19:a4:99:a2:a6:c6:b9:77:9e:e2:5e:07:a9:23:
                    6b:33:01:1d:b4:0d:0f:4f:a7:9d:d8:1b:a4:a4:9c:
                    ee:48:83:87:4a:18:ca:16:a7:17:b0:a2:97:d4:09:
                    a2:f3:3c:8c:0a:e8:ad:7e:d5:0d:d2:bb:5b:d8:2d:
                    ea:5c:a0:51:0a:86:a6:d1:43:af:66:d9:14:25:71:
                    be:a1:7f:dd:cf:e0:f4:03:45:a1:4c:65:c5:94:44:
                    a7:84:fa:0a:af:59:c4:ee:d6:ce:50:10:e9:2f:0a:
                    91:ad:b8:8b:ff:57:a0:8b:c7:1a:93:8f:0f:8b:2b:
                    11:07:7b:43:b8:46:b1:33:33:75:74:eb:a1:cb:12:
                    4e:9f:f5:41:24:68:7e:6e:4e:86:65:04:da:e8:6a:
                    a9:9e:60:a5:55:30:95:3f:94:e5:c8:cf:ca:91:d4:
                    90:62:3e:9a:14:13:01:ae:68:81:46:12:ed:36:86:
                    23:69:9b:bd:29:11:0d:a8:b2:85:32:21:ae:e0:d0:
                    38:e3:26:84:47:c2:c7:93:a6:b2:75:f9:37:88:d7:
                    d1:63:07:a7:8c:55:a5:88:56:ef:f7:04:82:d8:59:
                    e4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:75:D0:05:3C:ED:1C:5F:FF:BB:3D:5E:F0:FD:EC:48:05:2F:23:3E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:ab:e1:e9:90:2e:03:2b:09:71:a2:54:fa:2d:fb:6b:8e:0b:
         c2:81:d9:b6:4f:01:c2:49:cd:1a:64:fe:3e:90:c7:8f:d0:e3:
         ad:a7:41:f9:7d:e2:55:ea:91:dd:ae:42:d0:bf:b9:a8:63:42:
         27:dc:96:95:64:7e:64:7b:f7:b0:20:9a:40:c8:6c:52:62:45:
         14:8b:ee:8c:b7:42:2e:fd:f1:03:58:56:f7:a5:af:d5:b8:22:
         8b:8a:aa:ea:b7:d5:24:09:04:7e:d0:ca:ae:36:a5:d0:0a:0a:
         29:05:da:24:70:12:28:92:1e:97:33:76:5f:2b:ea:7e:21:28:
         b5:91:d5:d4:1b:ea:f9:27:60:88:89:85:93:e6:9c:57:7d:ca:
         98:20:4b:3d:c0:86:37:bb:19:fc:c9:96:14:f4:24:13:00:3c:
         d8:14:9b:60:e5:ca:7e:61:19:1e:0f:7b:79:84:ea:32:b9:5e:
         e5:0e:17:4a:4c:65:d6:fe:70:e8:54:1d:f5:46:c7:62:e1:47:
         61:11:63:be:d3:d6:23:31:71:80:22:5d:df:ce:18:88:84:79:
         82:b3:09:6e:3a:fd:cb:0a:e7:68:6c:92:9d:62:2e:35:b9:24:
         7f:16:c8:f6:26:77:94:1c:ad:db:03:f8:be:dd:01:56:dc:f8:
         ab:13:12:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:27:57 2025 by rpki-client