Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer
File:                     F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer (raw, json)
Hash identifier:          v/kL9pRrm+mB1WSpoG+8T6yK9AqEMBIx0XDkUQXGMHA=
Subject key identifier:   F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       52B54AD9BBE93217D25E36F5DE0CC7D21ABD97EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 09 Jan 2025 13:04:06 +0000
Certificate not after:    Thu 08 Jan 2026 13:09:06 +0000
Subordinate resources:    IP: 2001:df3:f3c0::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b5:4a:d9:bb:e9:32:17:d2:5e:36:f5:de:0c:c7:d2:1a:bd:97:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Jan  9 13:04:06 2025 GMT
            Not After : Jan  8 13:09:06 2026 GMT
        Subject: CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c4:f3:58:6b:54:9f:11:49:b3:bd:cc:73:05:
                    0b:3b:15:57:f5:0c:08:c9:ec:9e:69:d2:42:a2:60:
                    bd:01:de:29:d1:01:2a:b3:86:f8:d0:5d:94:fa:6c:
                    1d:31:a4:e0:1a:67:03:68:45:23:d8:00:3c:d0:c4:
                    c1:e9:f0:de:9b:54:8b:64:fe:a0:d8:b8:5a:7a:1c:
                    66:52:84:9d:21:77:09:72:d9:cb:89:3b:f0:15:ae:
                    f5:96:ce:5c:9d:53:7e:56:50:cb:b6:f8:e0:78:bd:
                    1e:82:8a:91:b5:d6:6a:f8:3c:5c:9f:01:16:47:45:
                    fa:2f:66:05:a1:ae:be:75:dc:eb:94:44:0a:ab:04:
                    f2:f1:6b:41:f5:b0:43:df:92:05:74:1b:b9:5d:0a:
                    b8:d7:7d:18:4e:01:37:f6:e5:19:4b:ab:7b:d3:04:
                    aa:79:14:23:25:cd:42:0b:79:bb:a7:09:a1:36:d2:
                    b4:76:8c:ae:44:5a:7c:52:3b:bb:05:c2:99:e2:ad:
                    a7:a9:da:b8:e2:30:bd:09:f1:ad:7a:9e:85:d7:e0:
                    bd:bd:0b:76:94:ec:4f:f2:ef:fd:12:c9:1c:78:58:
                    ea:b6:36:49:fd:a0:06:46:71:f4:01:8e:be:98:62:
                    81:47:23:6e:65:00:97:3f:d9:07:a9:b3:d9:38:1f:
                    eb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:f3c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:81:da:a1:a4:fc:a9:91:8d:48:53:2b:3c:9e:f2:ee:4b:04:
         6f:26:9e:b5:d9:5d:34:a9:0d:52:5a:3a:83:8e:ba:49:45:38:
         25:e3:12:fb:71:a8:ba:be:07:ea:c2:1e:c0:6c:32:1e:c9:ac:
         cd:d5:8b:85:ae:6f:d5:b6:59:ab:47:22:37:82:85:89:55:0d:
         bf:49:26:fd:dd:de:a4:95:73:31:cb:03:64:3e:a6:9b:7c:ca:
         d3:1f:bc:ab:31:a9:94:9f:6c:1c:01:ad:23:d8:61:c1:83:7a:
         61:ff:e9:f9:7a:38:9e:fa:c4:e7:8f:20:c8:d1:0b:cf:ad:c8:
         1a:20:29:e1:26:97:fa:16:94:5f:c0:87:9f:24:4f:3f:66:56:
         f3:e0:dd:75:78:06:ad:cf:b5:0e:33:dc:fe:e2:b9:31:1f:a3:
         b9:02:e2:03:ce:f8:5a:08:d8:35:a0:3a:e6:b4:c4:8c:22:29:
         af:15:af:17:0e:ca:33:8f:c9:4b:d7:35:15:be:86:41:d9:dc:
         00:57:19:1c:d0:c6:90:91:80:55:56:c0:bb:b2:87:6c:40:44:
         43:3a:68:9b:43:0f:6f:29:76:cd:5f:e7:71:a5:3d:15:2a:1c:
         21:54:1a:62:da:ed:74:58:3f:03:21:cb:10:a9:3d:65:b0:81:
         1c:58:ca:14
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUUrVK2bvpMhfSXjb13gzH0hq9l+wwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEwOTEzMDQwNloX
DTI2MDEwODEzMDkwNlowMzExMC8GA1UEAxMoRjJCNEQ1Qzk4QjA3MjRDRTc2RTIx
MkRGQjY1NUI0OTI4QjRBQzMyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANbE81hrVJ8RSbO9zHMFCzsVV/UMCMnsnmnSQqJgvQHeKdEBKrOG+NBdlPps
HTGk4BpnA2hFI9gAPNDEwenw3ptUi2T+oNi4WnocZlKEnSF3CXLZy4k78BWu9ZbO
XJ1TflZQy7b44Hi9HoKKkbXWavg8XJ8BFkdF+i9mBaGuvnXc65RECqsE8vFrQfWw
Q9+SBXQbuV0KuNd9GE4BN/blGUure9MEqnkUIyXNQgt5u6cJoTbStHaMrkRafFI7
uwXCmeKtp6nauOIwvQnxrXqehdfgvb0LdpTsT/Lv/RLJHHhY6rY2Sf2gBkZx9AGO
vphigUcjbmUAlz/ZB6mz2Tgf6+ECAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFPK01cmLByTOduIS37ZVtJKLSsMlMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by81ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMTCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkOGVmMTE5
LTdkZGYtNDVlNS04NjM0LTM4Yjc3MjU4Y2JjYy8xL0YyQjRENUM5OEIwNzI0Q0U3
NkUyMTJERkI2NTVCNDkyOEI0QUMzMjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAgAQ3z88AwDQYJKoZIhvcNAQELBQADggEBAHCB2qGk/KmRjUhTKzye8u5LBG8m
nrXZXTSpDVJaOoOOuklFOCXjEvtxqLq+B+rCHsBsMh7JrM3Vi4Wub9W2WatHIjeC
hYlVDb9JJv3d3qSVczHLA2Q+ppt8ytMfvKsxqZSfbBwBrSPYYcGDemH/6fl6OJ76
xOePIMjRC8+tyBogKeEml/oWlF/Ah58kTz9mVvPg3XV4Bq3PtQ4z3P7iuTEfo7kC
4gPO+FoI2DWgOua0xIwiKa8VrxcOyjOPyUvXNRW+hkHZ3ABXGRzQxpCRgFVWwLuy
h2xAREM6aJtDD28pds1f53GlPRUqHCFUGmLa7XRYPwMhyxCpPWWwgRxYyhQ=
-----END CERTIFICATE-----