Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A6A73303D7FB4B926766F1EA71A883290C724BC9.cer
File:                     A6A73303D7FB4B926766F1EA71A883290C724BC9.cer (raw, json)
Hash identifier:          fCX46X0Gand0/sBsKKNy5hBqpmbkSBGa4FKP1btuq84=
Subject key identifier:   A6:A7:33:03:D7:FB:4B:92:67:66:F1:EA:71:A8:83:29:0C:72:4B:C9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       63ACDDA41AB5681C5A9F5F7FD7B12CBE34B42DD7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/A6A73303D7FB4B926766F1EA71A883290C724BC9.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 10 Feb 2025 17:18:47 +0000
Certificate not after:    Mon 09 Feb 2026 17:23:47 +0000
Subordinate resources:    IP: 103.18.44.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ac:dd:a4:1a:b5:68:1c:5a:9f:5f:7f:d7:b1:2c:be:34:b4:2d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Feb 10 17:18:47 2025 GMT
            Not After : Feb  9 17:23:47 2026 GMT
        Subject: CN=A6A73303D7FB4B926766F1EA71A883290C724BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ef:46:cb:60:6d:d6:f4:c5:8f:98:bb:a5:14:
                    f6:c1:e1:83:44:c8:d0:e1:93:7e:aa:a9:9c:47:8b:
                    6f:6f:f0:27:3d:54:e7:de:cb:6f:c3:3c:36:ef:6b:
                    f1:87:6a:95:95:31:5b:d0:8e:5f:8b:b1:5d:a2:96:
                    06:1c:7d:75:88:f4:96:20:7f:16:6f:de:b0:cd:58:
                    63:ef:d1:97:e2:9d:b1:48:18:86:30:64:6f:d0:a7:
                    bb:2d:04:b0:e0:19:cc:49:cb:d0:cf:cf:0c:bc:cb:
                    b4:56:60:d1:65:08:6b:74:84:df:4c:f5:4c:89:b0:
                    df:4b:23:dc:61:4c:a0:f1:b1:b5:0c:79:b8:ae:92:
                    89:7f:9e:19:c7:62:94:ca:a0:5a:64:df:fb:c4:3f:
                    fe:26:e7:15:5b:1c:4c:51:b2:40:52:ca:56:01:12:
                    fd:a8:dc:13:0e:69:95:f4:b8:e1:54:6f:51:cc:1d:
                    5a:f1:10:b4:96:7c:78:61:ac:8b:c0:31:d4:68:a0:
                    6b:f3:60:03:cd:e3:76:0d:89:73:07:a3:66:33:56:
                    06:f6:9c:28:b0:a6:80:e7:9b:91:ef:41:70:55:0c:
                    7f:ff:0b:c8:eb:a8:6b:61:2e:93:7d:3a:d3:f8:c6:
                    ae:2c:53:68:a3:70:3c:61:a6:3e:8e:73:40:24:e5:
                    eb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:A7:33:03:D7:FB:4B:92:67:66:F1:EA:71:A8:83:29:0C:72:4B:C9
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/A6A73303D7FB4B926766F1EA71A883290C724BC9.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:6d:19:dc:ea:e9:fe:86:f2:23:50:cc:43:fe:8f:6f:72:b5:
         99:f3:03:14:74:3e:71:cc:a6:04:8f:0a:be:a9:17:cd:d9:be:
         e9:f4:4f:f0:e5:d4:5a:55:1e:d3:29:f8:4a:8e:b0:d8:c2:f0:
         7c:39:e4:30:93:ad:df:90:80:51:b7:58:03:4d:a8:e5:55:51:
         68:35:58:10:d6:ce:d3:8f:ed:04:72:a7:24:71:e1:96:fe:b4:
         81:2c:c7:22:43:07:b7:af:4b:3c:01:f6:5f:6c:d1:c3:99:47:
         2e:07:2e:f2:d1:ab:e1:79:5d:32:f5:56:04:f4:f1:fb:a1:0e:
         90:51:a2:90:da:13:cd:db:fb:b5:33:c2:55:7d:3f:bf:6d:4c:
         77:df:2b:34:32:46:e5:82:fa:f1:f4:e1:dc:a4:77:36:13:b6:
         53:2a:da:01:24:6f:b8:c2:e0:3f:f7:bd:e3:2c:47:9f:ae:b0:
         c0:22:62:fd:29:af:2e:53:3e:3f:1c:dc:38:2f:2f:56:cf:5a:
         a2:6d:cf:7d:d0:4d:34:9a:45:4e:cb:00:30:3f:53:0f:8e:c7:
         a7:18:04:cf:3f:bf:61:fd:72:26:31:38:af:46:c5:b0:6c:81:
         31:95:fb:b1:dd:8b:51:f4:8d:c3:69:19:00:06:cb:cd:f1:46:
         3f:82:e4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:20:31 2025 by rpki-client