Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9481EF5008E46F3618B42A0945A1522D5C041511.cer
File:                     9481EF5008E46F3618B42A0945A1522D5C041511.cer (raw, json)
Hash identifier:          yIAAoj7sz6cbU2y0z4UaAF7lD4vmozBx0hYRYiIIt60=
Subject key identifier:   94:81:EF:50:08:E4:6F:36:18:B4:2A:09:45:A1:52:2D:5C:04:15:11
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2E133AC222616E36117EF8FA191A370C7BB8EB18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/9481EF5008E46F3618B42A0945A1522D5C041511.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 05 Dec 2024 17:10:11 +0000
Certificate not after:    Thu 04 Dec 2025 17:15:11 +0000
Subordinate resources:    IP: 103.59.160.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:13:3a:c2:22:61:6e:36:11:7e:f8:fa:19:1a:37:0c:7b:b8:eb:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Dec  5 17:10:11 2024 GMT
            Not After : Dec  4 17:15:11 2025 GMT
        Subject: CN=9481EF5008E46F3618B42A0945A1522D5C041511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:52:1c:4e:d1:1f:f3:7d:70:58:3d:48:51:10:
                    bd:20:89:67:fe:1f:85:58:b3:54:d3:f1:cd:a3:c4:
                    1e:05:ad:c1:d9:c3:5d:f9:ad:7c:1c:bf:47:9e:f0:
                    7b:4f:58:3d:5e:4f:f2:78:ca:f1:61:ef:56:bc:32:
                    8c:d5:b2:22:3c:0c:a1:2e:13:f7:b8:78:2d:e5:73:
                    49:d3:73:b9:7c:0f:59:23:bb:7a:33:d1:68:80:a4:
                    ab:08:37:fa:81:c7:b9:2a:91:27:1e:f5:36:f1:54:
                    60:5e:88:fb:e6:a3:17:92:38:ab:b2:da:92:81:0d:
                    af:4a:f5:52:fb:f1:d2:65:40:6f:f7:49:32:a8:04:
                    50:1f:b0:9b:7a:40:87:49:31:56:8b:73:33:31:40:
                    52:a3:86:90:fc:11:61:46:26:b7:9c:d3:5f:26:07:
                    db:ad:4f:5c:7c:c3:99:23:6b:02:a5:40:05:9c:67:
                    d2:d9:e1:dd:ee:c2:16:75:64:b5:1f:0a:39:3a:78:
                    f0:59:b9:61:c8:6e:80:3f:49:64:ae:57:c8:07:72:
                    48:a3:7a:4c:fd:a5:d3:ef:ae:b3:0f:1d:b8:d5:48:
                    a4:b9:46:0e:6a:3c:9a:44:6a:be:fc:7f:79:f6:63:
                    01:d9:8f:75:23:10:0c:f9:41:72:d2:25:86:8b:b4:
                    99:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:81:EF:50:08:E4:6F:36:18:B4:2A:09:45:A1:52:2D:5C:04:15:11
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/9481EF5008E46F3618B42A0945A1522D5C041511.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:d0:a9:ac:1e:72:a9:84:ad:8d:41:51:4d:02:d0:07:62:02:
         c9:5a:a4:88:93:32:ac:46:28:a6:90:e6:74:c0:c2:fc:dd:3f:
         6f:94:95:e2:50:a8:ba:51:24:8c:95:95:24:1a:df:79:74:30:
         b0:55:2e:9f:f5:ab:77:50:92:8f:05:f7:58:b0:ad:e2:7f:4e:
         82:5f:1b:a0:5e:37:27:6d:e2:19:d4:53:17:65:e4:3c:02:33:
         68:ee:f7:47:6f:28:89:15:45:f7:8d:d3:66:16:06:87:43:14:
         30:1b:50:2a:2f:5d:e3:72:82:ba:15:e0:f1:f4:59:e6:2f:fb:
         93:7c:43:38:36:0f:8c:83:90:a8:5f:c0:da:6a:34:a8:5b:2d:
         20:9f:23:5a:2c:68:bf:07:42:88:e8:5f:89:97:05:d0:d1:1d:
         3f:39:51:49:0b:60:a0:e2:17:21:00:80:a8:1e:c6:bf:f7:02:
         d2:fc:6f:70:5a:5b:8f:98:6a:cd:06:54:64:f4:32:88:46:e9:
         60:45:fa:36:49:51:b2:9d:27:b4:02:8b:ef:d5:04:da:87:8b:
         35:cd:75:d0:ce:85:50:43:45:fb:1d:1c:7e:62:cf:36:70:32:
         7f:23:0e:3c:58:af:d1:0b:34:6e:6b:cb:eb:68:28:2e:39:82:
         4e:26:4b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:42 2025 by rpki-client