Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer
File:                     E4B72563B465301EE966885E5BE212EE92B97305.cer (raw, json)
Hash identifier:          rzVUStG1ET92ZsJm+E6NwOSlRcSRElPQVhlbKw2CXi4=
Subject key identifier:   E4:B7:25:63:B4:65:30:1E:E9:66:88:5E:5B:E2:12:EE:92:B9:73:05
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       30541D44418DEC1AF6DC4B16D81E4249D61D8E22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Jan 2025 05:18:20 +0000
Certificate not after:    Tue 06 Jan 2026 05:23:20 +0000
Subordinate resources:    IP: 103.11.22.0/23
                          IP: 2001:df0:2ec::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:54:1d:44:41:8d:ec:1a:f6:dc:4b:16:d8:1e:42:49:d6:1d:8e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Jan  7 05:18:20 2025 GMT
            Not After : Jan  6 05:23:20 2026 GMT
        Subject: CN=E4B72563B465301EE966885E5BE212EE92B97305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:f4:97:f5:08:c4:2e:5b:69:4c:b5:27:f3:
                    a8:2c:e2:e4:0e:86:a1:44:f9:eb:20:4f:fc:33:dc:
                    4c:dc:d2:a7:04:b6:08:77:f8:a3:f6:2f:0a:03:94:
                    94:63:30:4e:4b:44:66:cb:45:db:4c:8b:5c:64:61:
                    3f:af:2e:07:c8:39:c4:02:49:9d:11:49:d1:4d:ca:
                    fc:e7:af:a5:ef:bc:de:10:4c:ae:cf:de:22:6c:68:
                    c9:3d:da:1d:cd:81:6d:82:e2:d1:88:73:32:b2:31:
                    5b:c6:7a:36:71:5d:17:c1:de:82:86:56:d1:3e:c8:
                    52:0a:73:6c:38:f8:e6:00:28:f4:60:c6:6b:69:b2:
                    55:30:85:69:b8:46:d1:f7:c2:20:33:cf:0a:5a:16:
                    93:83:b8:7f:66:7e:bf:7a:8b:d7:c5:a2:cb:cb:cb:
                    4e:99:f2:1d:51:1d:75:86:2c:f6:83:72:97:90:45:
                    d4:ab:26:62:2f:8b:c4:05:84:42:81:3e:d8:45:52:
                    72:cb:5d:01:38:9f:5d:5f:7a:7d:f8:b9:8a:13:3f:
                    86:91:de:b5:13:12:7e:ab:1c:a3:dc:60:dc:19:c6:
                    59:84:90:f6:f0:ac:3a:1e:8e:ba:ca:16:35:0e:eb:
                    90:a1:c9:b0:f2:2e:5f:38:db:2d:01:23:ed:cc:51:
                    a4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:B7:25:63:B4:65:30:1E:E9:66:88:5E:5B:E2:12:EE:92:B9:73:05
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.22.0/23
                IPv6:
                  2001:df0:2ec::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:8b:ed:99:4d:eb:96:61:7e:2a:05:ce:dc:3f:a9:a2:54:c1:
         6a:20:b3:48:5d:36:2a:84:7d:73:1c:7a:0d:2a:a7:b2:54:e4:
         1d:25:3a:36:c3:ed:d3:71:d4:63:31:02:a2:7c:9d:70:87:5d:
         ea:4b:2b:4a:09:9c:b9:2f:6b:fe:b6:23:87:8e:68:57:dd:c0:
         8c:be:76:f6:35:4f:ed:1d:d7:c5:56:d3:cf:a2:08:5c:2f:bf:
         da:fc:b5:47:8f:21:8d:94:7d:13:68:6a:d3:13:cc:9a:08:99:
         56:83:cc:55:04:68:4b:bb:14:85:26:c2:cb:46:51:50:e9:b9:
         c8:b7:b3:df:04:75:76:4e:10:d3:29:25:e7:28:a2:a4:47:20:
         d9:36:b1:4d:0c:9e:9b:87:52:40:61:fb:57:c2:f9:46:4c:ee:
         b6:c9:67:dd:f8:a9:53:84:e4:af:1a:ee:94:34:a2:a6:f4:db:
         b8:a4:79:0b:e3:2c:3d:cd:7b:1f:f5:89:25:76:cb:dc:6a:83:
         17:5e:64:90:78:18:06:e3:4d:b9:e7:04:75:73:2b:19:04:15:
         4e:69:fb:3f:0b:22:41:9e:d6:0d:c4:a0:4f:13:7b:9e:92:c5:
         a2:b4:94:81:54:c0:0f:7a:d3:48:40:1f:77:eb:37:49:b8:c4:
         ef:d5:6b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:20:32 2025 by rpki-client