Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer
File:                     6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer (raw, json)
Hash identifier:          TIK614B7vNcZcANXlM3j/jF6+hG1DQ3fTRJdCmpEjwc=
Subject key identifier:   6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       686DE577DF7327B92E67A7FD9E30995E95BD64CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Oct 2024 07:12:14 +0000
Certificate not after:    Tue 28 Oct 2025 07:17:14 +0000
Subordinate resources:    IP: 2001:df4:56c0::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6d:e5:77:df:73:27:b9:2e:67:a7:fd:9e:30:99:5e:95:bd:64:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 29 07:12:14 2024 GMT
            Not After : Oct 28 07:17:14 2025 GMT
        Subject: CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:e1:cd:bf:db:75:05:a3:4d:86:13:1a:6d:
                    6c:88:8f:55:b8:25:20:15:49:99:4e:2f:7b:30:81:
                    63:bc:c9:55:14:39:d9:43:7d:5d:91:1a:bd:84:33:
                    51:09:1b:6a:87:1c:ae:5c:6c:8c:15:64:8b:08:36:
                    25:33:e7:78:db:9d:b9:c0:39:9c:3b:f5:d3:b4:98:
                    34:f6:de:4c:94:b6:47:11:c1:7e:41:78:f8:fb:ae:
                    ec:d8:50:b6:87:fa:7d:36:9c:a5:07:25:e5:88:0f:
                    f9:fe:2d:17:41:5d:62:18:56:6c:9e:09:39:3e:89:
                    42:8e:8a:61:a0:08:a6:ac:a0:30:4b:70:28:c3:fd:
                    2e:fb:15:fc:2a:fa:35:da:a4:b4:29:a5:af:cc:df:
                    eb:1c:ae:7c:e9:d4:8d:25:51:82:b5:67:99:96:ee:
                    20:d1:88:b3:4d:df:49:40:9f:af:04:56:01:25:fd:
                    9d:be:2a:80:ff:9e:4e:e7:68:93:1c:1e:06:87:55:
                    4d:ee:72:7d:9b:3f:d7:75:ce:7f:83:2e:d6:32:6c:
                    60:2d:42:32:7a:f1:34:0c:25:5c:8b:7f:cc:64:3f:
                    04:dc:97:d1:a3:23:a0:c6:d0:53:95:2a:b6:ef:0f:
                    31:fe:17:ec:fd:7d:3a:55:6e:f2:fa:ec:16:24:09:
                    28:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:56c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:77:4b:65:7a:dc:fd:32:da:21:a4:6c:95:bf:fa:e2:a4:d8:
         09:74:bc:3c:dc:f1:88:b1:a3:19:bb:5e:66:42:30:ab:31:d7:
         a2:97:b0:aa:3b:eb:05:64:13:d2:51:63:2b:2e:9e:d7:bf:bb:
         63:dd:8f:9f:21:fb:14:8e:98:a1:a5:e5:ce:fa:3c:c1:9f:1d:
         a3:60:0f:d8:a4:b1:df:18:2a:8c:a8:a5:63:b7:29:a2:c8:bd:
         37:5b:b7:2b:5d:b1:66:1f:fb:84:b3:f6:78:62:b1:bc:8d:e6:
         77:b7:39:3c:c9:18:2b:91:1e:69:09:3f:d4:df:1c:14:97:8d:
         e7:21:dd:00:cc:02:41:f9:79:b3:97:9b:71:6e:d3:c8:58:08:
         e1:df:46:38:60:e3:9d:0a:fd:0f:87:68:59:41:01:50:b8:cf:
         16:ad:02:f2:bc:eb:f1:2e:c6:76:9b:dd:c7:80:9d:cd:c3:3a:
         65:1f:8a:0c:50:88:b5:b1:72:f0:ac:3d:b0:36:73:33:d4:2a:
         bf:e1:e5:26:25:55:ae:16:37:f2:2b:33:c6:9a:e2:48:6c:f4:
         26:24:cc:6f:9e:72:1c:11:b7:42:ee:3f:41:3f:24:2d:ac:3d:
         2d:8a:97:13:dd:9e:fc:68:87:30:79:9c:c1:5b:bf:e7:11:be:
         e6:1d:8b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----