Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer
File:                     FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer (raw, json)
Hash identifier:          a9iZBnSYg6Xq4lW8jfuMzVfDs8GCjtSHJV5Ba1GTjGg=
Subject key identifier:   FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       200DCC368A70ADF44572F4B2F8BEF81E8D9B5549
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 19 Dec 2024 20:51:49 +0000
Certificate not after:    Thu 18 Dec 2025 20:56:49 +0000
Subordinate resources:    IP: 103.134.16.0/24
                          IP: 2001:df7:af00::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0d:cc:36:8a:70:ad:f4:45:72:f4:b2:f8:be:f8:1e:8d:9b:55:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 19 20:51:49 2024 GMT
            Not After : Dec 18 20:56:49 2025 GMT
        Subject: CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:3e:6d:65:1c:68:e4:82:e8:3c:ec:13:5b:
                    5a:9c:e7:62:c8:d3:1d:e0:0d:2b:9c:55:b1:71:e9:
                    24:b3:7d:81:fd:57:fc:b6:63:d2:51:e6:eb:e6:95:
                    77:17:c6:46:57:79:e3:62:75:b7:72:21:75:76:3f:
                    6e:a6:d2:b2:4f:3f:5e:f2:09:6a:cc:69:1d:a0:eb:
                    5f:85:18:a3:fb:62:ec:56:6f:4f:be:36:34:f1:6c:
                    bc:df:90:4c:6a:ca:a8:6c:7c:88:49:e4:64:3e:27:
                    02:6f:0a:86:44:0e:0b:2e:7d:a8:aa:d6:ca:aa:9e:
                    e9:c5:5d:39:3a:a2:41:fb:b7:64:39:ff:2b:54:6f:
                    5a:b9:9f:52:02:e7:86:26:69:13:62:dc:00:f5:d3:
                    5d:b2:83:6e:92:9b:a0:31:b7:a3:f4:c5:15:04:7f:
                    3b:a7:7b:ac:df:1f:c8:ad:63:49:0c:22:70:dd:90:
                    aa:20:01:30:65:1e:e7:86:be:79:75:ae:ac:85:5e:
                    66:7e:4a:cc:13:59:d7:f4:2a:75:6b:1f:e9:b4:18:
                    50:c7:52:1c:b1:f3:c3:7f:dc:97:ff:28:cd:3b:9d:
                    0a:e9:64:55:ff:c3:9f:9f:21:1f:e0:d3:0c:aa:fd:
                    4c:97:72:66:1c:15:5c:2f:ca:5e:c9:e1:cf:87:3e:
                    04:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.16.0/24
                IPv6:
                  2001:df7:af00::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:bd:eb:e2:53:52:28:39:d1:6b:85:ba:5e:ae:04:97:b7:c3:
         b3:70:30:fd:66:e8:69:1c:8e:c9:a5:f3:68:c6:33:7d:56:ce:
         b6:ca:dd:d3:e1:d2:83:9f:ac:20:50:41:c0:a1:0a:ee:17:48:
         24:7a:c1:b4:6f:11:9a:e7:7d:1b:8d:9e:c7:97:b1:81:c0:31:
         ad:b5:0e:83:71:6a:86:af:f0:bc:87:30:cd:9f:4f:46:24:3e:
         c9:9e:6f:78:2d:66:35:9a:64:c9:1b:e4:61:08:20:22:99:25:
         b5:d5:67:a7:ef:ae:ba:46:80:f1:49:f3:1c:9e:c8:2f:74:df:
         8e:cd:01:c5:98:60:b9:8d:e6:dd:90:1e:b7:1c:7f:17:cd:56:
         36:ff:c6:64:45:d9:f9:3f:72:f6:71:9c:64:fe:00:e5:00:70:
         ef:b7:5f:07:38:9e:48:72:c1:37:a5:cd:fe:dd:9d:26:7d:5d:
         35:d9:2b:61:b9:d8:b1:8f:8e:cf:db:cd:5f:c9:98:53:00:49:
         d2:80:c7:8b:e9:a3:d1:71:dd:38:c2:14:f8:9c:41:c1:6a:30:
         43:a9:6f:27:77:fa:59:50:3d:ab:61:f0:9b:2d:40:b8:32:68:
         ef:25:26:89:f8:f5:09:30:18:e9:f1:2b:9c:04:ef:52:90:f1:
         b3:f0:7b:c1
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUIA3MNopwrfRFcvSy+L74Ho2bVUkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxOTIwNTE0OVoX
DTI1MTIxODIwNTY0OVowMzExMC8GA1UEAxMoRkM0Rjg3NjI1MjRDM0VCRjk4MTI2
RTVGNTc5Q0NCMzBDMzdFRUY2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMGZPm1lHGjkgug87BNbWpznYsjTHeANK5xVsXHpJLN9gf1X/LZj0lHm6+aV
dxfGRld542J1t3IhdXY/bqbSsk8/XvIJasxpHaDrX4UYo/ti7FZvT742NPFsvN+Q
TGrKqGx8iEnkZD4nAm8KhkQOCy59qKrWyqqe6cVdOTqiQfu3ZDn/K1RvWrmfUgLn
hiZpE2LcAPXTXbKDbpKboDG3o/TFFQR/O6d7rN8fyK1jSQwicN2QqiABMGUe54a+
eXWurIVeZn5KzBNZ1/QqdWsf6bQYUMdSHLHzw3/cl/8ozTudCulkVf/Dn58hH+DT
DKr9TJdyZhwVXC/KXsnhz4c+BJECAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFPxPh2JSTD6/mBJuX1ecyzDDfu9jMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9iZTVhYTkzZC03ODdiLTRhMTctODdkMC03ZWY0MWIwZjJkZWYvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlNWFhOTNk
LTc4N2ItNGExNy04N2QwLTdlZjQxYjBmMmRlZi8wL0ZDNEY4NzYyNTI0QzNFQkY5
ODEyNkU1RjU3OUNDQjMwQzM3RUVGNjMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD
BABnhhAwDwQCAAIwCQMHACABDfevADANBgkqhkiG9w0BAQsFAAOCAQEAVL3r4lNS
KDnRa4W6Xq4El7fDs3Aw/WboaRyOyaXzaMYzfVbOtsrd0+HSg5+sIFBBwKEK7hdI
JHrBtG8Rmud9G42ex5exgcAxrbUOg3Fqhq/wvIcwzZ9PRiQ+yZ5veC1mNZpkyRvk
YQggIpkltdVnp++uukaA8UnzHJ7IL3Tfjs0BxZhguY3m3ZAetxx/F81WNv/GZEXZ
+T9y9nGcZP4A5QBw77dfBzieSHLBN6XN/t2dJn1dNdkrYbnYsY+Oz9vNX8mYUwBJ
0oDHi+mj0XHdOMIU+JxBwWowQ6lvJ3f6WVA9q2Hwmy1AuDJo7yUmifj1CTAY6fEr
nATvUpDxs/B7wQ==
-----END CERTIFICATE-----