Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A203777786215EACE763209954A241380D9D9512.cer
File:                     A203777786215EACE763209954A241380D9D9512.cer (raw, json)
Hash identifier:          XnjQKhQSrc9lms6YTwCCE5JMbfKfBrbuv5CUsqCO2B8=
Subject key identifier:   A2:03:77:77:86:21:5E:AC:E7:63:20:99:54:A2:41:38:0D:9D:95:12
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2BF73A15E40671369A1EE770AD953ACF280F1E1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/82f6c516-ef11-4c15-8b33-2eb10403043b/0/A203777786215EACE763209954A241380D9D9512.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/82f6c516-ef11-4c15-8b33-2eb10403043b/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 24 Mar 2025 18:28:11 +0000
Certificate not after:    Mon 23 Mar 2026 18:33:11 +0000
Subordinate resources:    IP: 103.189.165.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f7:3a:15:e4:06:71:36:9a:1e:e7:70:ad:95:3a:cf:28:0f:1e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Mar 24 18:28:11 2025 GMT
            Not After : Mar 23 18:33:11 2026 GMT
        Subject: CN=A203777786215EACE763209954A241380D9D9512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f3:0f:19:3d:1d:51:dd:cd:25:84:7b:15:b0:
                    3d:5d:4b:c5:95:c9:85:02:5f:89:35:39:42:8d:f3:
                    d0:43:a6:5a:c6:67:30:33:13:29:c6:37:f4:74:1f:
                    8b:f8:63:be:d8:64:53:75:44:7a:0f:05:80:84:e7:
                    84:05:a1:d3:bd:ec:73:cd:c5:83:af:af:51:5c:bf:
                    68:b9:89:25:8b:df:99:88:33:2e:7b:96:9e:fd:32:
                    12:01:ac:a5:1f:f3:02:b3:24:b1:e1:06:c8:ea:3c:
                    74:83:3c:b1:01:59:48:e3:18:2c:18:bc:08:d4:aa:
                    c5:19:f9:d9:67:8b:a3:57:51:92:50:1b:f8:4a:e9:
                    07:d6:0c:59:40:f6:76:cc:71:3c:dc:10:30:6e:23:
                    cc:15:ca:b0:5a:1a:43:7a:5b:7c:e9:4d:c6:1f:8f:
                    2b:01:e2:63:13:1d:02:08:4a:c1:1e:35:12:c9:42:
                    06:e5:94:72:37:55:dc:6b:09:3e:b3:3c:6f:b9:4a:
                    ec:35:22:99:ac:15:7f:b6:26:51:e7:53:98:99:f5:
                    ee:7f:81:4c:dd:72:6a:04:30:2f:1a:49:0a:a7:c3:
                    bd:e5:38:1d:bb:15:27:67:5d:38:70:83:3d:83:b0:
                    2b:91:0c:a1:ca:97:44:73:31:c7:59:36:d2:bf:9d:
                    1b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A2:03:77:77:86:21:5E:AC:E7:63:20:99:54:A2:41:38:0D:9D:95:12
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/82f6c516-ef11-4c15-8b33-2eb10403043b/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/82f6c516-ef11-4c15-8b33-2eb10403043b/0/A203777786215EACE763209954A241380D9D9512.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:6c:e0:3f:3b:4b:06:d6:58:be:29:7e:ce:6c:d6:a3:61:16:
         04:2d:e3:5f:90:10:e8:24:55:ee:7b:8f:cb:b3:f1:62:7a:43:
         73:93:8c:95:fa:73:10:ce:b2:8c:d3:47:55:07:ad:7a:aa:6a:
         fe:36:46:10:90:be:50:71:28:41:dd:03:fe:9e:3f:59:7e:24:
         1f:5c:2b:f3:b6:5b:34:97:2e:d3:09:96:9e:fa:5b:c7:08:4f:
         e9:94:f6:45:4b:f6:fd:19:1f:75:5a:01:e1:94:34:46:96:28:
         10:75:fe:b0:d4:a3:6e:bf:5b:8b:70:42:e3:be:b9:d0:35:3a:
         ed:f2:ed:2c:39:2a:00:c8:89:a5:76:1a:07:5d:8d:2d:15:25:
         32:f6:b4:2a:74:2e:d9:8a:c2:ac:12:c1:c4:50:11:f4:f6:d2:
         a2:cf:65:4e:12:71:5e:17:73:b7:e5:9c:15:8d:b9:b6:1b:54:
         7c:46:46:8a:31:f6:e7:9e:7a:50:3e:31:57:50:e7:b1:0b:32:
         83:91:41:09:ef:9b:b7:46:24:7c:a0:e4:79:cb:f6:69:d2:b5:
         b6:77:1c:94:26:90:6c:8e:b0:b4:b4:b0:a6:55:9f:92:7d:5c:
         d6:53:65:15:af:b0:72:7e:86:77:fe:6e:37:2c:c3:bb:ba:47:
         ce:f9:f9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:32 2025 by rpki-client