Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer
File:                     DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer (raw, json)
Hash identifier:          N6MIswBYgJZFFlkp1OPdrZGEueFIiVsfjf0pwsGa8DQ=
Subject key identifier:   DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       050A638D10DCC50210AA05A0705B420145A869A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 21 Mar 2025 03:15:37 +0000
Certificate not after:    Fri 20 Mar 2026 03:20:37 +0000
Subordinate resources:    IP: 103.127.106.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0a:63:8d:10:dc:c5:02:10:aa:05:a0:70:5b:42:01:45:a8:69:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Mar 21 03:15:37 2025 GMT
            Not After : Mar 20 03:20:37 2026 GMT
        Subject: CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f8:1a:a4:cf:d3:ca:e1:30:fa:f8:d8:04:e3:
                    c6:ac:4f:e5:28:cd:61:bb:ce:a1:c3:90:87:3e:db:
                    d2:42:4f:cd:bc:e6:88:94:12:c4:49:dc:0d:14:8f:
                    5e:66:88:d5:3b:2c:4a:c5:79:f9:11:56:88:0a:49:
                    86:e2:15:9f:43:fd:ff:d4:64:f2:b3:6a:0a:9e:8b:
                    1a:67:fb:55:30:e0:a7:99:46:d1:52:04:da:ac:62:
                    d2:b6:53:ea:b7:49:1e:be:57:e3:b8:fb:7f:93:78:
                    7c:21:b4:fc:0c:27:14:46:4b:fb:f5:2d:0a:31:96:
                    67:7f:ad:16:6e:be:fe:f7:05:ae:db:ba:b0:c7:35:
                    e1:b0:9c:0d:ba:7c:97:73:36:26:cb:24:09:2d:11:
                    df:45:6d:63:48:7c:71:30:a8:6e:6f:94:f0:b9:24:
                    57:02:02:bb:b7:33:8c:15:30:31:d9:99:78:b6:79:
                    93:ce:6e:35:21:fd:bd:ca:68:16:a7:c7:95:e7:79:
                    5e:1c:7d:e8:29:53:8a:21:a5:8d:1e:5a:b1:28:13:
                    9e:95:ba:8c:11:28:88:de:bf:c2:cd:eb:9d:5b:78:
                    cd:d2:05:76:33:4f:94:f4:1a:ad:70:a9:95:5c:76:
                    c2:04:7c:d7:1a:74:7c:6a:19:28:68:69:ad:53:de:
                    85:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:29:69:a6:4c:ad:a5:d7:8b:70:d1:34:8e:38:67:74:60:bf:
         e7:51:c9:d5:6f:ff:49:01:ec:ab:f2:b2:76:70:d9:44:36:94:
         5a:cf:6c:e8:71:bf:99:ed:ed:d3:66:4a:61:4a:88:d1:5d:93:
         e7:a4:27:cb:57:d8:31:b9:86:91:c3:3f:14:77:d7:bb:e7:68:
         59:b1:22:db:66:09:cc:f4:20:39:ff:27:9e:a0:92:7c:7c:56:
         2d:31:51:73:a8:da:8e:79:6b:bb:41:49:0b:93:5c:03:9b:6c:
         e3:2c:57:0b:c2:da:66:57:d5:c6:9e:e9:a0:e1:0f:68:82:65:
         34:79:18:cf:e0:e6:10:0c:c8:fe:28:8f:a8:d0:e4:6e:a0:5d:
         18:af:2a:0d:fd:0a:67:45:f6:78:77:70:ff:08:17:ac:ed:fd:
         40:29:93:e4:2c:01:c4:41:eb:c8:a6:72:15:7a:8c:11:9e:93:
         62:5f:07:8d:6d:01:4b:46:d6:ea:1f:9e:ef:5e:9e:6c:b7:7e:
         d8:07:bc:92:9b:b1:0f:9e:9b:0e:5a:5f:a4:38:c5:43:f7:a3:
         43:e7:05:a0:f6:cd:fd:ff:fe:f8:1e:07:60:a7:c2:29:d2:74:
         42:29:ef:73:02:2c:c6:c9:7f:9b:4a:8b:ea:c9:1a:71:77:f3:
         8a:a4:be:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:35:08 2025 by rpki-client