Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer
File:                     BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer (raw, json)
Hash identifier:          9Kdozh4i93I5d/m+3YuBtEMBF0g1bt8j/7foifD1IQ0=
Subject key identifier:   BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       619FB2BBC48A2CB2F9ACF43AB4E33BA012A09CCA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 10 Oct 2024 18:49:21 +0000
Certificate not after:    Thu 09 Oct 2025 18:54:21 +0000
Subordinate resources:    IP: 202.80.112.0/20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9f:b2:bb:c4:8a:2c:b2:f9:ac:f4:3a:b4:e3:3b:a0:12:a0:9c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Oct 10 18:49:21 2024 GMT
            Not After : Oct  9 18:54:21 2025 GMT
        Subject: CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:66:16:f5:77:8e:df:42:b5:f8:07:1d:ca:
                    ff:75:9b:c5:57:0c:4a:ec:3a:12:d2:9f:fa:50:5f:
                    8e:80:59:8e:dc:f4:b1:2e:a9:a3:dc:b1:7d:8a:bb:
                    74:b1:dc:86:c0:20:af:a8:0f:fa:6e:87:73:78:eb:
                    4b:20:fb:fe:13:b4:ca:08:90:ad:28:fe:63:94:88:
                    d1:ae:2e:b5:86:6b:f1:5a:a7:96:b0:aa:3e:b1:1e:
                    2b:df:04:b5:8b:9b:4f:68:b4:07:e5:da:4d:de:b5:
                    ce:98:68:60:0e:57:78:70:cb:8b:56:b8:50:2c:94:
                    46:bd:e3:94:e5:b9:7b:08:24:3b:0e:7f:2d:51:3a:
                    a7:f4:df:32:81:38:4e:76:59:91:cb:9b:82:da:c1:
                    62:57:c8:51:f3:7f:88:8f:8b:3b:43:6b:6e:7e:01:
                    b0:7f:bd:22:2a:6e:aa:4c:0e:f0:c7:33:eb:04:fd:
                    3d:43:19:ba:e7:ea:ab:5f:3d:18:c4:2d:16:ca:3b:
                    79:3b:c8:a7:a5:80:ce:73:58:ee:ac:8b:c1:2f:ed:
                    2f:5c:6b:fd:f1:66:b6:b7:3b:c1:dc:7c:26:e4:86:
                    ad:20:e8:60:b3:3b:61:9a:12:c3:a5:74:c9:b5:1c:
                    df:21:46:3d:25:91:1e:8a:77:f5:43:d9:0c:7b:62:
                    f3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.80.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         89:ba:7a:0a:fc:13:81:5f:8f:cb:6e:e3:a4:46:9b:62:6f:7a:
         a7:f9:4d:52:66:de:9a:30:57:22:cb:ea:96:24:11:8d:67:15:
         54:80:4e:e9:50:6d:3d:aa:0d:b4:bf:4b:c2:57:4e:3d:93:6b:
         e5:46:90:30:f3:74:19:92:15:f1:97:16:fa:bf:2f:81:9d:ab:
         64:50:15:7f:e4:06:9b:97:bf:5e:4d:ce:97:4f:ef:9d:64:63:
         ed:92:24:d9:3b:7e:a7:11:2c:31:f3:ef:d8:d1:b3:70:c4:d4:
         2d:9f:63:60:44:42:1d:f9:07:cd:c3:3b:d0:67:3c:de:db:72:
         55:5a:81:5a:af:71:24:c3:98:54:d1:c5:3d:4f:e9:fb:cd:ef:
         2b:bb:ac:74:be:3b:0f:a2:d3:5c:f3:e3:75:7a:58:06:cb:4c:
         f6:b6:00:49:44:56:15:8a:f4:3a:11:61:47:7d:cb:83:d5:b0:
         5a:cf:bc:e0:8d:2a:35:9d:a7:5f:18:1d:6f:e9:f2:18:51:26:
         0f:74:16:a1:62:e5:3a:de:83:af:98:bf:bf:dc:fc:37:02:96:
         55:ad:65:f8:4d:49:8b:1a:c3:1d:b2:83:02:02:77:a6:6b:ca:
         01:65:17:7b:66:f7:26:d5:3e:4a:4b:a5:7d:b8:99:e7:1a:b5:
         fa:d7:83:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:37:17 2025 by rpki-client