Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
File:                     B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer (raw, json)
Hash identifier:          uErx6/kA1+oxIbDStCCqf6ePHh/Hanus5yxbVwohZ7k=
Subject key identifier:   B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6BA7DB89BB2679D56C74BCE43A40F73978B18A12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Feb 2025 23:47:10 +0000
Certificate not after:    Tue 10 Feb 2026 23:52:10 +0000
Subordinate resources:    AS: 59153
                          IP: 103.253.212.0/22
                          IP: 202.10.32.0/20
                          IP: 2001:df1:7800::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a7:db:89:bb:26:79:d5:6c:74:bc:e4:3a:40:f7:39:78:b1:8a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Feb 11 23:47:10 2025 GMT
            Not After : Feb 10 23:52:10 2026 GMT
        Subject: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:33:fe:91:78:fe:87:f0:5a:30:67:6b:5d:7d:
                    da:30:18:76:a7:98:15:3d:be:47:a8:a4:4c:b9:fc:
                    83:85:03:b7:8d:a4:94:60:e3:51:e4:0d:40:93:c4:
                    75:fb:0e:2b:26:53:c0:1d:e4:33:28:4f:2a:88:00:
                    cd:09:24:2e:50:2c:cb:94:2a:fd:ef:a1:9e:93:82:
                    23:12:22:69:10:a9:1c:0f:29:46:1c:7e:2f:80:8f:
                    c0:88:16:82:40:b1:36:35:28:da:eb:74:cf:65:fd:
                    c4:2b:12:3c:50:1e:0a:9f:f2:44:cc:6a:82:24:51:
                    9c:c9:29:db:fc:d4:9d:ca:25:91:fe:8c:4d:bc:56:
                    40:04:6c:5e:82:7b:71:0a:39:ab:80:21:38:67:14:
                    ac:e5:df:70:74:2d:70:f5:96:39:22:59:2b:08:5d:
                    ce:94:d3:46:c6:7e:a4:77:d9:d8:d9:7f:7a:cd:51:
                    bb:72:15:3b:85:44:a5:6f:67:47:3f:7f:df:35:c9:
                    0d:5b:e1:b0:54:26:4f:3b:47:6d:88:4a:38:f0:45:
                    16:f9:5e:e7:d2:f1:c3:76:64:8c:4d:d2:82:f0:70:
                    54:8a:49:00:67:c3:be:37:2e:56:63:60:69:ed:40:
                    06:c0:0c:e5:c9:44:58:4d:0f:7a:1e:93:1f:70:e2:
                    2d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.253.212.0/22
                  202.10.32.0/20
                IPv6:
                  2001:df1:7800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59153

    Signature Algorithm: sha256WithRSAEncryption
         01:86:3a:aa:fc:2d:7b:1b:dc:96:c4:50:2e:26:ea:af:53:b3:
         b2:25:25:00:09:c5:b0:d9:1e:bd:4b:a4:6c:e2:1b:f2:be:a9:
         1d:e9:f1:e4:81:32:18:79:57:4a:c9:2f:c8:0d:d0:db:ee:1a:
         49:d0:43:6d:01:3b:e4:09:9c:ce:08:ee:ae:ad:78:8a:06:41:
         c8:e0:07:e9:88:f7:ab:8a:83:5b:33:5a:cf:59:88:87:3e:cc:
         3c:d3:0e:aa:00:2b:70:46:e8:d2:06:d7:40:70:c0:6d:c7:fa:
         ff:30:99:39:40:39:41:b8:1d:ef:ba:29:11:19:22:cc:f4:87:
         bc:c8:80:26:e1:02:83:43:81:15:0b:98:fb:8b:ca:2c:98:80:
         e2:8f:e4:d1:61:be:79:f9:d4:cd:54:0e:57:fb:fe:5c:10:d3:
         7b:cb:b3:49:72:e5:8e:61:97:c6:8b:ef:ed:db:01:ab:08:e0:
         c9:83:8c:e2:85:27:fe:c2:f6:1c:54:c5:eb:5d:3c:5d:f7:ac:
         a1:51:25:4d:d6:84:91:6f:a8:f3:72:3d:4c:c1:fe:7f:db:8c:
         07:26:6d:00:e9:eb:13:d7:8d:d9:08:85:d3:ab:d0:e5:66:b1:
         44:5f:45:d6:24:39:54:5a:ba:d1:25:9e:f8:4b:b2:c8:b1:a6:
         ff:6f:8a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:27 2025 by rpki-client