Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer
File:                     FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer (raw, json)
Hash identifier:          Izatqs8fOQ3u/EpFqI2SZ19VH2/EAsgMkSt5qYTNJeE=
Subject key identifier:   FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5D966F4F4F1A3C71FEF95949DCDE79B312D0DAF0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sat 29 Mar 2025 04:42:31 +0000
Certificate not after:    Sat 28 Mar 2026 04:47:31 +0000
Subordinate resources:    IP: 103.164.170.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:96:6f:4f:4f:1a:3c:71:fe:f9:59:49:dc:de:79:b3:12:d0:da:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Mar 29 04:42:31 2025 GMT
            Not After : Mar 28 04:47:31 2026 GMT
        Subject: CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6d:9a:78:e3:8b:0e:98:f0:e3:2c:62:87:e5:
                    a1:2e:a4:76:e1:f0:4e:f8:57:72:88:f8:88:84:56:
                    f7:9a:de:82:6a:86:0d:2b:09:70:d1:d9:dc:f9:45:
                    14:4c:72:37:16:34:b5:f5:3e:77:14:e4:b1:7d:0d:
                    47:61:32:48:ab:d7:0a:2e:2b:12:c2:e0:24:c7:1b:
                    2b:d9:ee:9e:60:76:a0:14:73:26:75:ee:43:35:ba:
                    c3:74:8c:dc:1e:4c:6d:90:f9:63:2d:a9:7d:5b:0a:
                    f7:c8:19:1e:74:65:d0:7b:1c:e0:11:ea:9a:6a:1e:
                    dc:a7:fc:71:19:d0:7f:b6:68:09:48:9b:bd:58:66:
                    45:15:c9:4d:25:35:82:77:fa:6c:b7:e6:ac:2c:e8:
                    35:11:9a:c6:e5:7b:2e:7f:a5:7b:97:70:1d:44:82:
                    2d:b1:0d:36:7a:29:95:43:fe:3f:7d:5e:57:94:db:
                    ef:f5:cc:77:ad:ec:97:01:22:65:5f:0d:4e:e9:29:
                    e6:9b:87:af:f5:08:21:56:e3:3f:8e:0a:f2:62:bf:
                    68:b6:78:a4:6c:40:0d:2f:73:d7:e4:00:1a:e4:85:
                    6f:c4:37:89:a1:c8:50:e2:d1:6f:7d:fc:a9:6d:30:
                    24:45:53:ad:f2:f9:5c:e0:bf:7d:63:5e:b9:0d:3d:
                    8f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:4b:7a:31:a4:85:63:07:38:a2:30:39:0b:f9:11:0b:9a:b1:
         36:f1:08:58:b8:8e:f4:2d:84:16:fd:a9:a2:04:29:8a:bc:27:
         14:39:1d:e2:6c:4d:d5:0f:3a:7a:3f:f3:a5:43:2a:9f:e7:ad:
         b0:a8:c2:22:c2:c1:6f:10:27:01:10:90:d6:a8:9a:2e:cb:bc:
         a4:81:b5:98:18:ad:e6:31:9d:4d:18:29:11:5b:f7:05:bb:df:
         21:05:ad:f3:c8:d5:f5:0b:75:b8:c0:67:a7:ff:de:64:ce:53:
         89:88:ee:0d:55:18:ae:02:25:00:e1:c7:48:8b:8b:51:81:f4:
         98:fa:5d:1e:be:0c:90:ba:5c:7f:6b:a0:db:02:e2:ba:76:f2:
         36:f2:81:66:f2:37:74:80:fa:c4:e6:94:cb:7c:48:ee:c1:3b:
         84:a5:51:9a:f2:fc:30:ee:46:41:cd:13:4e:56:c4:af:87:83:
         7d:96:09:b6:ea:0e:44:49:40:93:d1:21:18:c5:17:d8:6a:c9:
         5c:57:0e:76:08:2d:e2:ec:0a:f7:4b:91:67:bc:88:93:68:db:
         72:36:f9:a6:b8:eb:f4:09:4f:be:4c:85:bf:80:16:56:f2:84:
         f2:a2:48:e3:33:43:19:21:25:fe:b8:0f:27:8e:05:5e:de:97:
         d4:8d:b9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:24 2025 by rpki-client