Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer
File:                     B70932ED6C688D58897E32E1D5C990B20910FF02.cer (raw, json)
Hash identifier:          zmySPzqnwSsaFt2B92kQIXNGPy2+fqBhnVkwRMQtT/A=
Subject key identifier:   B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2EC183D9B6BD9AD8DAD9EC8321A649EBBF2EB20A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 04 Dec 2024 22:46:53 +0000
Certificate not after:    Wed 03 Dec 2025 22:51:53 +0000
Subordinate resources:    IP: 103.129.40.0/22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c1:83:d9:b6:bd:9a:d8:da:d9:ec:83:21:a6:49:eb:bf:2e:b2:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Dec  4 22:46:53 2024 GMT
            Not After : Dec  3 22:51:53 2025 GMT
        Subject: CN=B70932ED6C688D58897E32E1D5C990B20910FF02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c6:2d:5b:93:5a:41:ac:0d:72:16:20:33:2a:
                    e7:e9:ac:71:ad:fa:3a:f7:46:7a:9a:0a:4b:6c:8a:
                    4c:45:34:50:ab:b0:42:0e:97:04:4a:b4:f9:c5:20:
                    ba:c3:b7:86:b1:a8:80:4a:c7:24:dc:88:af:a3:6d:
                    90:52:e6:8c:9a:9a:69:cc:39:fb:17:8c:aa:1c:aa:
                    97:1b:94:bc:76:a7:b0:7d:a2:8d:73:18:f8:89:3c:
                    10:cb:77:3f:a2:ef:02:7e:07:ac:a6:7f:22:3e:96:
                    a5:69:c1:59:c7:3c:44:76:32:97:97:f9:6f:de:09:
                    eb:c7:58:39:0f:20:27:6e:fe:f6:e6:df:33:14:e2:
                    37:30:d9:f5:34:3a:97:21:21:02:0d:0b:8e:b5:f7:
                    67:97:c1:e5:54:d5:a4:84:72:23:38:77:8d:50:bb:
                    07:ee:9a:26:0a:71:71:90:d8:a9:54:a1:bb:b5:28:
                    a0:5e:3a:d1:9e:23:29:84:73:60:75:4f:26:20:90:
                    87:53:e2:df:ec:e0:73:d1:5d:34:ef:0c:20:62:34:
                    a3:89:2e:d8:8a:e0:a7:8b:ee:01:12:0d:6b:6e:91:
                    fc:6b:18:3d:0d:77:cc:be:e9:05:d2:7f:06:5b:ef:
                    1b:44:08:7b:40:f5:a8:bf:36:e6:52:b8:91:1b:00:
                    53:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:e0:91:4a:1c:f5:b8:2a:fc:65:8d:cd:0f:5c:5b:4b:d5:6f:
         be:e9:69:e2:9c:42:15:50:6b:6c:b6:1e:a5:26:f6:b1:ff:21:
         86:6b:ac:22:28:32:e4:82:21:aa:2f:de:5a:e1:a7:be:17:a6:
         ca:ae:5e:d5:63:d7:09:5c:ba:97:9c:0e:c9:be:82:1e:47:80:
         06:03:00:39:0a:2d:5d:8e:ee:0c:0a:74:a5:c2:c4:83:c2:46:
         91:e6:87:03:ea:12:b1:fe:04:2b:3a:c0:14:d9:55:5b:05:b3:
         c1:17:b7:fa:64:4a:26:82:94:33:ee:1c:77:2b:01:2f:0c:6d:
         18:2f:30:5b:3f:33:09:f8:54:c7:e7:d5:8b:80:7e:4a:80:14:
         bd:04:b2:cb:20:eb:35:ba:59:8c:38:34:79:ec:43:a7:9c:ca:
         4b:a3:ca:62:0f:28:67:38:10:aa:ba:ff:9c:e1:d5:08:23:b7:
         24:f5:ba:32:4b:b1:85:eb:6e:34:0d:0f:e6:52:18:b8:b7:d3:
         8c:4d:0b:d9:b1:e8:fc:a0:c5:cd:05:a5:66:d4:63:6b:d0:ac:
         4a:ba:6f:a1:31:df:10:1a:e1:10:0b:7f:bd:d6:3c:89:4a:2d:
         be:5c:cb:cd:00:53:5f:71:13:c7:7a:f6:57:8e:2f:fa:bc:dc:
         6d:d4:06:7d
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIULsGD2ba9mtja2eyDIaZJ678usgowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIwNDIyNDY1M1oX
DTI1MTIwMzIyNTE1M1owMzExMC8GA1UEAxMoQjcwOTMyRUQ2QzY4OEQ1ODg5N0Uz
MkUxRDVDOTkwQjIwOTEwRkYwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMXGLVuTWkGsDXIWIDMq5+msca36OvdGepoKS2yKTEU0UKuwQg6XBEq0+cUg
usO3hrGogErHJNyIr6NtkFLmjJqaacw5+xeMqhyqlxuUvHansH2ijXMY+Ik8EMt3
P6LvAn4HrKZ/Ij6WpWnBWcc8RHYyl5f5b94J68dYOQ8gJ27+9ubfMxTiNzDZ9TQ6
lyEhAg0LjrX3Z5fB5VTVpIRyIzh3jVC7B+6aJgpxcZDYqVShu7UooF460Z4jKYRz
YHVPJiCQh1Pi3+zgc9FdNO8MIGI0o4ku2Irgp4vuARINa26R/GsYPQ13zL7pBdJ/
BlvvG0QIe0D1qL825lK4kRsAU8kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFLcJMu1saI1YiX4y4dXJkLIJEP8CMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9hOTkwZGE0OS05ODYyLTQxZGUtODMzZS1iMzA0ZjBjMWFlNTcvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5OTBkYTQ5
LTk4NjItNDFkZS04MzNlLWIzMDRmMGMxYWU1Ny8wL0I3MDkzMkVENkM2ODhENTg4
OTdFMzJFMUQ1Qzk5MEIyMDkxMEZGMDIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJngSgwDQYJKoZIhvcNAQELBQADggEBAAjgkUoc9bgq/GWNzQ9cW0vVb77paeKc
QhVQa2y2HqUm9rH/IYZrrCIoMuSCIaov3lrhp74XpsquXtVj1wlcupecDsm+gh5H
gAYDADkKLV2O7gwKdKXCxIPCRpHmhwPqErH+BCs6wBTZVVsFs8EXt/pkSiaClDPu
HHcrAS8MbRgvMFs/Mwn4VMfn1YuAfkqAFL0Esssg6zW6WYw4NHnsQ6ecykujymIP
KGc4EKq6/5zh1QgjtyT1ujJLsYXrbjQND+ZSGLi304xNC9mx6Pygxc0FpWbUY2vQ
rEq6b6Ex3xAa4RALf73WPIlKLb5cy80AU19xE8d69leOL/q83G3UBn0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:17:59 2025 by rpki-client