Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer
File:                     065943D1744CF4841A6D3D50944D2A4DB537A128.cer (raw, json)
Hash identifier:          2uc1Lm1o8w6Q5Z/z5+BH5GIeHrTafBBQPutdkQ37KSk=
Subject key identifier:   06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       1D7D8155535B78A777E7EA14F0212D494BADBFBD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 20 Jan 2025 13:16:33 +0000
Certificate not after:    Mon 19 Jan 2026 13:21:33 +0000
Subordinate resources:    IP: 157.15.77.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7d:81:55:53:5b:78:a7:77:e7:ea:14:f0:21:2d:49:4b:ad:bf:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Jan 20 13:16:33 2025 GMT
            Not After : Jan 19 13:21:33 2026 GMT
        Subject: CN=065943D1744CF4841A6D3D50944D2A4DB537A128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:00:03:2e:c8:b4:2b:07:69:63:4b:02:cf:
                    68:09:bc:59:1e:6b:57:78:5e:c2:0d:52:f5:8a:ee:
                    d8:e9:45:94:73:68:42:f8:ca:15:be:af:3c:1a:ff:
                    39:60:de:f3:3f:ea:1d:cd:d7:46:80:e5:70:03:9d:
                    65:ca:10:77:10:a8:ec:a1:ac:29:2f:f9:80:9a:93:
                    34:f6:eb:c3:45:e8:38:48:53:e4:9a:ec:dc:8d:94:
                    5e:6b:41:91:69:ac:31:1a:0f:b9:28:64:42:b6:3f:
                    65:a8:8b:36:ee:f1:18:9a:13:ad:5e:70:20:01:6e:
                    9f:6e:a6:5b:ac:ce:3b:b5:9e:a7:e4:9d:3f:d2:65:
                    37:b6:a7:e6:c6:63:0c:b8:e1:27:a0:74:e7:23:e5:
                    79:67:d9:01:be:04:c0:d7:a1:eb:9d:59:e8:9d:9b:
                    9c:ed:c5:4a:d9:ba:bf:65:8a:e4:c4:81:04:f7:45:
                    f3:95:28:47:96:f6:03:18:a5:0e:8c:98:38:a7:87:
                    22:c4:98:3c:1a:ff:a4:c1:41:d2:41:9e:4a:de:d5:
                    d8:bb:a6:9b:d4:68:38:a6:29:d3:21:c8:aa:ab:ac:
                    f5:71:62:dc:97:77:e6:d5:ce:c3:a7:b0:95:74:5c:
                    fc:b5:1f:61:4f:ba:d0:4c:0b:ac:9c:80:85:9d:97:
                    fc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:16:4d:de:3f:05:55:7a:f5:21:8c:02:fe:62:97:f5:ec:09:
         76:0e:08:9c:bb:65:53:e1:bd:d5:0b:29:a5:46:e3:8d:61:59:
         e8:a9:05:25:cc:b0:47:37:d5:74:cb:3a:f1:98:f9:19:fd:3a:
         76:db:15:0e:76:59:11:41:03:64:87:98:68:44:25:f4:20:aa:
         3e:4f:7a:b7:76:84:55:7b:72:f1:ae:a2:93:61:e7:21:28:ef:
         a4:0e:69:f5:d7:f6:4b:43:50:28:ac:2d:a6:05:e2:d3:5e:f6:
         88:69:aa:b6:72:5e:d6:31:eb:b1:d5:80:d9:74:2c:b6:81:c5:
         12:a3:24:bf:d9:1e:70:fa:8a:db:89:12:ad:56:6d:84:32:01:
         52:4b:9b:90:73:39:47:3d:bb:57:e4:02:6c:d0:04:df:88:04:
         3e:55:fa:3f:03:97:63:2e:07:00:b8:61:b6:bd:5b:78:db:34:
         af:6b:98:7d:ed:a9:90:e7:f6:08:42:a8:67:78:77:c1:ea:d1:
         98:ff:55:ee:9c:24:f4:c3:64:3e:85:87:1f:33:7a:23:35:c0:
         24:45:a8:fb:a3:95:38:33:a9:3c:84:7a:c9:ce:85:91:80:6b:
         c9:8a:91:6d:37:a1:54:4e:00:9e:e3:cb:59:d8:57:16:c5:61:
         df:a8:ba:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:38:25 2025 by rpki-client