Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
File:                     094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer (raw, json)
Hash identifier:          Js8FcmYBT0hGZaDJeVIrIufJf95WWsxYbMgVoSt/jpg=
Subject key identifier:   09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       46503E119B958DE46D57EED85AD359EDCF879B9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 25 Nov 2024 05:26:29 +0000
Certificate not after:    Mon 24 Nov 2025 05:31:29 +0000
Subordinate resources:    IP: 103.112.144.0/23
                          IP: 2001:df4:ad00::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:50:3e:11:9b:95:8d:e4:6d:57:ee:d8:5a:d3:59:ed:cf:87:9b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 25 05:26:29 2024 GMT
            Not After : Nov 24 05:31:29 2025 GMT
        Subject: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:59:a7:38:c9:42:0d:63:1e:ef:de:9c:db:
                    2d:2b:91:b0:5f:92:00:58:b9:d6:5b:ac:30:5d:6f:
                    64:24:f4:e2:01:26:45:15:b6:67:bb:75:b6:87:4c:
                    fa:d5:ea:7b:e3:e5:a3:af:3a:14:46:a9:b3:cc:d7:
                    da:3c:88:d4:33:2a:ab:5c:b7:62:b1:58:8b:76:46:
                    e5:e4:89:c8:cc:2f:ef:11:be:a3:e3:ee:8c:64:f7:
                    e5:6b:13:62:30:9d:73:27:59:0e:f3:fb:43:9c:09:
                    ec:2f:4a:e5:af:25:ac:44:69:95:a0:87:a9:ab:b0:
                    81:d4:c2:7c:cc:fd:da:76:1c:77:e3:ef:35:0f:f6:
                    0c:ff:db:5d:28:11:d6:d1:ed:85:ff:f8:fb:0e:45:
                    27:f6:ac:a7:90:b5:78:82:37:7f:30:94:e5:49:5f:
                    e2:a0:7c:d5:57:8d:e2:74:eb:2a:20:0c:09:c5:12:
                    7a:73:42:73:f3:20:04:5d:7a:14:56:ae:7f:2e:68:
                    c8:f1:74:8a:45:69:46:07:c1:1e:a8:c8:e6:d4:e4:
                    f7:ce:20:4c:fc:29:80:07:10:33:41:74:e6:2e:42:
                    9f:0c:d2:b2:91:ec:6c:1d:cc:57:88:fa:bc:c5:da:
                    06:23:76:7d:ce:bd:07:2c:ac:5f:26:5a:dc:60:ae:
                    2b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.144.0/23
                IPv6:
                  2001:df4:ad00::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:7c:df:eb:16:e3:b7:9c:df:80:6f:79:e0:39:76:6d:5d:a1:
         e0:3b:c5:b2:3d:ee:cf:b8:8f:79:8d:f4:b5:14:76:1e:f5:c6:
         43:ff:45:6f:8f:21:a7:db:7b:ae:1d:6c:25:d4:88:ef:0c:c3:
         60:d1:3f:02:ab:61:37:be:9c:51:e1:78:43:1d:8c:66:4b:c7:
         01:7a:1b:f5:51:f3:23:34:81:01:17:24:95:6b:0f:78:1d:cb:
         9e:1e:e3:66:d3:a0:53:b6:3a:4d:8e:cd:ab:68:50:59:3b:c0:
         4a:fe:f5:4e:3c:51:0f:d6:ae:ea:20:38:43:ae:3f:39:31:4e:
         12:e6:da:e1:76:ae:62:c2:32:5a:bd:6f:e2:3f:c3:41:91:5a:
         52:40:9e:94:9e:ed:2c:0c:17:01:bc:72:0b:2c:cf:88:d2:8d:
         96:e5:6b:69:37:14:fa:f9:58:fa:39:f8:10:df:c5:05:5a:f3:
         b4:79:c8:fb:f6:fc:65:14:3b:51:49:8c:8f:48:52:e6:ce:cb:
         c1:2f:23:51:c6:a9:0e:6a:ae:76:35:1e:c5:e2:c4:df:e6:01:
         dd:ee:a9:9d:2e:b4:0b:df:69:16:74:47:cc:2a:cc:eb:0d:81:
         09:29:76:dc:38:fd:4a:92:60:cc:1c:61:fa:a5:58:bf:ef:4e:
         96:95:5f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----