Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/170979C0E31958FA76259F360B8405233C40BA7A.cer
File: 170979C0E31958FA76259F360B8405233C40BA7A.cer (raw, json)
Hash identifier: kDv5zqGkEVb5D828tOwT3PhzcHXBmW/jN2bABL8xSwg=
Subject key identifier: 17:09:79:C0:E3:19:58:FA:76:25:9F:36:0B:84:05:23:3C:40:BA:7A
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 3A94D5AA36731C388D1892F74A2A1F89593FE027
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft
caRepository: rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 06 Jun 2024 05:04:35 +0000
Certificate not after: Thu 05 Jun 2025 05:09:35 +0000
Subordinate resources: IP: 157.20.38.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:94:d5:aa:36:73:1c:38:8d:18:92:f7:4a:2a:1f:89:59:3f:e0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Jun 6 05:04:35 2024 GMT
Not After : Jun 5 05:09:35 2025 GMT
Subject: CN=170979C0E31958FA76259F360B8405233C40BA7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fc:06:50:c2:86:e8:c7:b3:8f:64:6f:00:70:
cc:c2:2d:e7:98:6f:8f:f0:59:19:0d:6f:bf:9a:8d:
bb:ed:56:19:fd:72:de:e3:39:b9:56:99:e5:9e:15:
69:94:15:a7:43:1d:66:c1:3d:7e:81:55:c1:25:a9:
d7:04:0f:78:f0:be:d0:1c:d0:28:6d:5e:de:06:78:
d3:e2:a9:2e:9e:9d:46:26:eb:e6:3a:f5:ee:a0:14:
89:d5:df:3f:9b:43:fe:ba:b6:05:64:97:a4:34:e1:
ce:46:7b:2c:7e:3a:ab:75:92:a8:cb:bb:1b:3c:9d:
95:fe:12:b5:aa:eb:dc:a6:d0:5e:a6:ba:71:38:29:
55:a2:ab:8b:61:d0:61:87:90:26:bd:9e:1a:5b:29:
df:fa:51:9e:33:07:27:39:ed:52:dc:ac:37:a6:c6:
ef:59:dc:77:97:77:e7:0e:fb:95:19:60:63:03:49:
a3:35:2d:0b:3b:52:b0:64:34:99:9d:95:ab:2e:19:
e9:d0:0b:0c:fd:07:a2:95:65:9b:79:cb:55:ae:a2:
e6:75:62:a2:63:16:74:94:c1:a2:55:5d:8a:7b:cd:
f6:e4:6e:a2:ca:f9:1c:42:d4:42:4d:99:e8:01:e9:
5f:0a:39:c2:66:b0:8c:bc:8c:b1:48:de:34:fd:c3:
07:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
17:09:79:C0:E3:19:58:FA:76:25:9F:36:0B:84:05:23:3C:40:BA:7A
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.38.0/23
Signature Algorithm: sha256WithRSAEncryption
18:cd:24:90:18:ae:c2:5c:c7:fb:48:d4:b7:b4:bc:ce:e2:83:
6f:4b:2b:7f:89:a2:3a:ec:b2:1d:14:4d:46:02:fe:f5:e4:f9:
b4:08:e1:30:86:f3:31:af:b0:9a:db:47:4f:6e:57:76:50:2f:
38:54:79:ad:ac:02:a9:ca:c9:81:44:c9:7b:05:c5:93:5c:6a:
7f:0c:f4:b1:73:60:13:6e:95:eb:88:d6:bc:d4:40:5e:aa:98:
ae:09:d0:86:a7:87:de:af:3f:65:7b:58:cc:de:88:a8:89:9d:
60:4a:54:17:56:3c:d1:d4:e1:89:4d:13:41:e4:86:db:37:8b:
bc:2c:48:6c:29:e4:6b:4c:04:5d:3e:6c:44:ad:83:26:c3:d9:
b4:b5:d0:f5:9e:23:e0:1b:5f:93:75:92:56:76:1f:1b:15:30:
cb:71:dc:a3:50:f9:b8:96:4f:74:ea:15:26:5a:29:2a:d0:77:
8b:1d:d3:a1:78:7e:09:52:88:d0:e1:74:d4:bd:ef:7b:e1:5e:
df:12:2e:0b:06:4c:3a:70:a9:fb:58:cd:9c:07:7e:73:57:74:
f7:c5:8c:dd:11:d6:23:b4:24:2f:c7:13:0b:44:fa:62:a3:2d:
67:59:ba:c4:c4:82:24:4a:cf:6d:cc:fa:c3:9d:ca:67:48:5c:
fb:0e:e2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:57:40 2025 by rpki-client