
Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer
File: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer (raw, json)
Hash identifier: vM2zkNFJy7Jm8l2b3C8Avkp9itLImkrVnCQ00MOzXfw=
Subject key identifier: 0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 7333E450760B44B3DF1C4F6FB4D645F7B8F920A8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft
caRepository: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 11 Sep 2024 08:48:59 +0000
Certificate not after: Wed 10 Sep 2025 08:53:59 +0000
Subordinate resources: IP: 157.20.98.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:33:e4:50:76:0b:44:b3:df:1c:4f:6f:b4:d6:45:f7:b8:f9:20:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Sep 11 08:48:59 2024 GMT
Not After : Sep 10 08:53:59 2025 GMT
Subject: CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b3:a3:c8:34:03:33:c6:39:a8:ea:d4:8c:9b:
94:57:76:f7:88:d1:55:20:67:cc:40:7e:d9:65:91:
18:a0:d0:c8:97:b8:8e:26:67:d3:a9:07:bd:42:33:
7d:ff:fc:ae:de:fe:e4:b6:d1:3d:17:ea:c9:74:81:
5f:ee:e3:f8:9d:21:ea:5c:e6:f8:05:c9:6a:30:00:
41:6d:71:50:b6:bc:45:6c:c9:09:6e:5d:b5:6b:d1:
92:e1:b6:c2:e3:29:68:8b:e9:c7:2c:b2:92:7b:7a:
49:5f:4e:98:ce:7c:d5:26:ec:2a:6a:df:39:7d:33:
50:20:49:82:65:8c:93:f9:fb:4b:e5:d5:a2:77:6d:
09:2b:60:f8:f0:da:40:bd:0c:11:40:34:d5:d9:ed:
ac:83:bb:cb:d0:d0:79:e8:b6:ea:f2:dd:a8:2b:26:
40:1c:de:8d:65:9e:dd:da:41:fd:74:ff:15:be:91:
04:49:71:0f:6a:11:bb:c5:30:3d:62:f9:ca:e5:93:
07:ce:be:a2:b1:cf:3b:ec:0b:df:1f:cb:2b:db:5b:
43:c6:54:35:84:7f:a5:5d:b3:da:f5:50:c5:1e:63:
39:61:4c:62:1d:23:99:f3:7a:02:7b:5d:ca:b3:9c:
4e:45:7f:70:58:46:86:77:c9:c3:80:74:48:c8:3f:
2b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.98.0/23
Signature Algorithm: sha256WithRSAEncryption
24:a2:69:52:cd:5c:5c:32:55:4a:6d:72:b7:3b:bb:88:d2:f4:
a1:57:b4:78:b7:6a:66:ca:ef:31:0d:ba:cf:16:d7:42:82:00:
c8:58:fb:e1:dd:6b:a2:47:7e:ac:cf:09:d5:58:19:ca:74:e1:
a2:95:26:90:92:c7:df:90:10:23:b6:2a:84:92:ef:32:ca:ac:
f1:96:35:6b:5d:f8:36:f5:bf:63:eb:4f:b2:19:d3:d7:7e:5b:
eb:a0:e8:89:4c:c9:e6:66:ce:95:6b:c2:13:be:39:b9:80:9a:
9e:6c:58:04:1e:17:9b:2d:fb:73:a4:d4:25:4c:57:2a:45:cc:
e9:7b:c7:55:dc:5c:53:f7:b3:30:fd:f5:67:a9:f2:00:63:24:
5a:38:50:9b:1e:f5:fc:9a:11:5e:92:e0:4b:7a:77:12:cc:58:
42:81:76:b6:1c:d2:2f:ab:fd:ab:d3:ad:42:10:87:70:c4:3e:
a0:68:ed:20:5a:35:07:e9:03:41:dc:ff:56:ca:5f:e7:80:ba:
15:0f:10:0a:5a:f0:b8:d6:17:64:c9:5a:a9:d5:28:d4:a6:44:
de:6d:86:1b:c1:c8:43:3a:6e:cd:34:ae:a4:a9:10:21:b2:dc:
0f:26:62:97:3c:b0:93:d2:22:67:29:b5:64:9d:d1:59:9c:5d:
f1:33:18:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:58:06 2025 by rpki-client