Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer
File:                     A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer (raw, json)
Hash identifier:          19zfXzbNKOrqe994x31x6TWvHrnjvtdpkUHXq0Jpm3o=
Subject key identifier:   A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       653829C6741E6525A68D8CB058900EAA46E8B122
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 10 Jan 2025 14:31:13 +0000
Certificate not after:    Fri 09 Jan 2026 14:36:13 +0000
Subordinate resources:    IP: 103.184.128.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:38:29:c6:74:1e:65:25:a6:8d:8c:b0:58:90:0e:aa:46:e8:b1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Jan 10 14:31:13 2025 GMT
            Not After : Jan  9 14:36:13 2026 GMT
        Subject: CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:9a:02:30:1b:82:bd:e7:d0:2a:a5:04:b6:
                    37:2d:9b:85:e2:62:0a:ec:d4:8a:fb:46:fc:8c:fe:
                    51:17:0d:01:d6:96:96:47:50:66:bb:14:6e:53:50:
                    ad:a0:70:dc:de:fc:e5:9f:f2:a6:cb:65:57:f0:06:
                    06:88:27:21:a1:37:36:f4:83:a4:05:a0:b2:31:52:
                    1c:c0:ba:6e:d3:a4:a4:47:51:2a:13:2a:14:99:20:
                    26:aa:ce:d4:10:c4:5e:94:93:78:03:31:c1:7d:aa:
                    21:9a:71:f7:be:60:90:3b:b9:a1:6b:43:67:96:5e:
                    e2:0e:4d:b9:40:d8:a7:bd:4f:ba:10:57:ad:13:c6:
                    17:51:15:8c:3c:e6:a6:d2:10:16:00:58:79:12:c0:
                    0d:da:0f:4a:2b:27:21:a4:62:1a:f1:62:97:d0:9b:
                    63:be:2d:63:26:d5:73:85:05:6d:4b:93:eb:33:c3:
                    5c:84:9e:8c:4f:4d:17:02:93:59:00:56:6a:30:c9:
                    18:34:06:a2:2d:ae:28:21:46:a2:9e:df:49:3c:50:
                    0b:ec:40:06:f0:71:e2:3e:62:83:09:e3:2b:8b:df:
                    70:1e:35:7d:56:04:27:f1:ab:e2:1b:a4:39:1c:50:
                    ba:93:96:88:8b:02:41:97:13:2e:be:d8:8f:0b:d2:
                    e6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:98:fa:9f:cb:30:3f:78:e4:33:0e:75:53:95:aa:8f:8b:9b:
         bd:c3:eb:7c:30:47:15:7f:05:0f:f4:40:bb:27:24:ae:4b:ad:
         96:9b:37:5e:50:30:86:6e:1b:e2:ed:56:fa:a6:87:0f:ab:ea:
         91:d3:fb:d2:54:a7:54:a0:a7:87:03:25:e8:ae:4e:16:3a:69:
         92:5b:d9:e1:74:37:73:ce:96:16:7c:c1:f3:d9:e1:e4:df:ee:
         2d:5f:8d:0e:b0:97:59:bd:00:81:a2:e7:93:5c:f4:92:ba:b2:
         3e:f8:a1:7b:61:71:a7:f1:3b:ae:bf:a6:79:b9:64:6a:35:6d:
         03:06:6a:0d:00:6b:13:83:60:a1:67:ca:5a:25:7a:81:cd:29:
         b3:ab:33:0f:99:1a:85:53:24:2d:db:3c:70:6a:b9:ac:d3:d9:
         e4:9b:42:9e:af:14:78:f3:fb:ef:93:b0:69:44:2c:cc:fc:91:
         26:e6:59:5b:f8:25:28:bf:74:42:e5:d6:c5:8e:a8:0a:4b:8a:
         31:51:a1:06:f2:7c:35:c3:67:06:81:a6:4f:ab:5f:17:28:b9:
         a8:c0:32:9c:8d:b3:87:a3:1a:2e:d5:d1:ba:bf:2c:eb:8f:fc:
         3f:de:73:b0:4c:72:d4:b6:4c:01:62:f1:3f:c8:76:9e:0e:ca:
         3d:7d:4f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:15 2025 by rpki-client