Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer
File:                     B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer (raw, json)
Hash identifier:          49Kk/he3iwkY32Xsf9ZWL+6HfuveE2nHY6YBD/9kd0E=
Subject key identifier:   B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       610A28372D6A1222F809AEDE6BC8947CBAAFBE14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 22:19:24 +0000
Certificate not after:    Thu 05 Mar 2026 22:24:24 +0000
Subordinate resources:    IP: 103.186.202.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0a:28:37:2d:6a:12:22:f8:09:ae:de:6b:c8:94:7c:ba:af:be:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Mar  6 22:19:24 2025 GMT
            Not After : Mar  5 22:24:24 2026 GMT
        Subject: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b7:31:19:50:66:d6:5f:e3:89:e4:db:3f:48:
                    6f:40:c3:0e:53:c0:c6:d8:09:ea:6e:69:65:6e:91:
                    05:05:cf:d2:15:42:28:78:13:d5:50:96:43:fa:72:
                    5e:3a:2c:7a:08:49:43:bf:d8:da:2c:4e:99:7b:c8:
                    9c:92:85:ee:29:df:8c:ec:b7:6b:87:ca:b5:c8:31:
                    5a:a9:d1:0a:1b:10:f4:08:cf:1d:91:97:95:e7:d8:
                    67:7a:c5:01:45:77:45:ac:10:26:ae:dd:f6:c3:40:
                    04:e5:c3:02:67:ab:e7:e4:c3:62:a4:c0:70:9d:e1:
                    e7:f4:42:80:70:03:99:b5:38:55:79:e6:9a:46:41:
                    68:9e:1d:2f:35:f2:99:f3:0f:63:b4:cf:77:ef:16:
                    60:17:76:a0:f3:24:1f:81:5e:a8:eb:83:22:a0:49:
                    b3:5d:5e:b3:8a:dd:9a:e6:8b:22:00:30:ee:2c:e9:
                    ac:55:52:c6:6d:4f:9f:68:69:3d:b4:94:e2:ee:14:
                    43:3c:52:ee:69:32:81:7e:76:14:ad:ec:a1:51:e1:
                    aa:c7:11:df:b9:7c:bd:4a:6c:62:8d:0c:0e:fc:7e:
                    fc:10:84:59:a1:15:9e:48:5d:bf:5f:39:92:0d:8e:
                    97:28:c4:85:81:2f:fe:46:90:5e:b6:54:a0:1b:1b:
                    d2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:0a:25:71:54:13:00:a1:5b:82:18:11:d4:09:85:e9:c9:3c:
         0d:8d:c4:ad:8a:5d:78:dd:08:3d:73:03:b1:09:6a:47:5b:1f:
         d5:fd:4b:4c:b8:dc:fb:9f:76:b1:5f:c4:2e:fe:3a:36:f7:c8:
         e6:41:65:d0:6e:9c:5a:e8:0c:96:51:54:77:52:18:a4:1b:61:
         fc:7e:01:15:b7:5b:c0:ad:fb:c4:80:84:25:a2:3a:1a:69:77:
         69:c4:05:aa:40:6c:fd:4f:f0:9c:df:99:79:5b:75:79:75:df:
         43:3a:15:4d:aa:62:a6:6b:21:37:20:fa:bb:b7:60:a4:4a:fe:
         ac:20:7a:34:e5:91:8c:0d:06:28:f5:e2:ff:1e:cd:fc:c7:0e:
         64:7a:0c:9e:d9:9f:9b:16:33:4c:fd:06:d6:07:a2:16:f2:f2:
         f3:ba:e3:3a:1f:fc:f3:ea:9d:22:56:c3:f2:1d:d9:75:ac:4b:
         c3:fa:4e:19:f4:18:c2:e7:0d:9a:15:c7:48:82:12:85:d5:93:
         d6:83:a7:58:3f:2c:c4:86:b6:cc:d9:2d:96:4a:fc:c4:4d:00:
         73:5d:15:a5:58:f0:81:c3:e6:b1:75:57:e7:b3:08:01:1a:5c:
         3d:f7:82:de:9c:6f:10:1e:5b:e3:b7:07:39:39:08:6d:88:fe:
         71:f2:1f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:59 2025 by rpki-client