Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer
File:                     F5908629C575E46230F87489BF209EE6FBCF3860.cer (raw, json)
Hash identifier:          zJksk75CwpmLoHhUBSJMIdruQ7KRNUUN/WWfmW3LQag=
Subject key identifier:   F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1780E63762294620642D104292064634D49D0844
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 15 Jan 2025 19:18:21 +0000
Certificate not after:    Wed 14 Jan 2026 19:23:21 +0000
Subordinate resources:    IP: 103.87.148.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:80:e6:37:62:29:46:20:64:2d:10:42:92:06:46:34:d4:9d:08:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Jan 15 19:18:21 2025 GMT
            Not After : Jan 14 19:23:21 2026 GMT
        Subject: CN=F5908629C575E46230F87489BF209EE6FBCF3860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ba:1e:92:48:de:fb:e6:a0:f5:60:2a:c6:d7:
                    87:29:4d:53:3e:b7:6d:4e:f6:67:6a:d9:1d:cb:d8:
                    ba:e2:29:f3:77:eb:e1:4d:38:43:8a:0e:35:0b:90:
                    90:9f:70:5f:2e:2e:be:34:53:b7:99:8b:55:d8:72:
                    75:c8:a7:fb:f2:50:a7:ef:a7:95:25:00:89:63:20:
                    9c:db:c4:68:a9:a1:a1:cf:1d:73:1a:01:26:93:24:
                    d4:14:03:20:78:38:73:cb:78:d8:9b:d5:47:03:49:
                    03:ab:a3:58:94:93:1c:41:b4:e7:89:a7:88:10:3e:
                    3a:7e:19:44:91:e3:0b:0f:bf:47:9a:a2:fd:a7:6a:
                    7d:cb:87:19:2e:e7:a6:16:bb:d1:06:f6:30:f7:bd:
                    82:9f:aa:6f:32:f3:0f:24:cd:7e:c4:ad:55:c2:b1:
                    b6:9c:c5:cd:44:91:af:70:86:93:36:48:51:2f:7f:
                    fb:43:f4:cf:cd:ca:aa:75:dc:7c:d2:d3:f5:81:f1:
                    8f:f6:99:41:bb:f5:ad:88:a6:cb:ba:02:f4:bf:cd:
                    30:b3:c5:17:5c:6a:ac:38:aa:bc:c2:07:dd:1a:1f:
                    88:c0:ac:c0:8f:b4:d1:e1:4f:91:b8:26:97:fa:35:
                    f9:b1:31:6f:c1:0c:e7:17:08:ce:7f:bc:53:42:64:
                    2b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:a9:29:8f:58:39:24:0c:f3:e3:08:1f:df:b9:5c:4c:38:36:
         c5:e6:8e:34:fe:c7:2f:5f:65:b7:17:b7:2b:54:be:94:a0:ba:
         00:af:42:0a:3a:1a:2b:d2:1e:93:d1:c6:88:d2:f7:84:a9:89:
         6b:c4:eb:63:11:00:33:14:58:69:9b:74:34:06:4e:2e:2a:d1:
         ab:71:e8:36:ed:dd:ff:3e:10:c7:7f:22:24:aa:1a:ca:7c:32:
         18:c8:d5:9d:22:87:c0:94:ad:56:ef:5c:f1:9d:5f:a2:10:32:
         10:e0:f8:10:3c:dd:22:93:28:26:99:9e:26:4c:c8:36:7a:b2:
         9f:1b:9f:dc:b3:01:27:e7:7b:cf:7f:6d:c9:ce:fd:e4:59:56:
         ed:80:57:e9:b8:86:1a:72:dd:fc:71:a6:ca:62:1d:a7:14:61:
         59:68:1b:61:30:bd:1a:f0:77:b8:fa:94:24:cc:f7:ed:63:59:
         96:15:3d:0a:68:2d:44:ab:41:64:bb:b9:75:f5:f3:f7:80:37:
         eb:56:1b:64:90:32:dd:b3:5d:92:4d:81:75:52:c2:3f:f8:ed:
         bf:0c:c2:8d:f1:58:ca:82:59:ed:a1:29:f1:88:51:6c:da:f0:
         69:c3:a9:8a:7d:13:9c:81:64:47:d8:e3:d2:69:d6:41:e8:54:
         3d:76:1a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:31:53 2025 by rpki-client