Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer
File: 1A43B9C67646D3B8444E277C64D1FD489A45E536.cer (raw, json)
Hash identifier: ZqeSVg0oDsLXGidEUwSphrE0WeV+0fZE5LXU3GM8gE8=
Subject key identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 327CC8868F3CD0F5AFA5B90EA869A09F85D59727
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft
caRepository: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sun 16 Jun 2024 17:18:08 +0000
Certificate not after: Sun 15 Jun 2025 17:23:08 +0000
Subordinate resources: IP: 157.66.125.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:7c:c8:86:8f:3c:d0:f5:af:a5:b9:0e:a8:69:a0:9f:85:d5:97:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Jun 16 17:18:08 2024 GMT
Not After : Jun 15 17:23:08 2025 GMT
Subject: CN=1A43B9C67646D3B8444E277C64D1FD489A45E536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:13:99:86:6d:3a:71:c2:e3:e7:bb:1e:ae:ef:
79:99:0c:c5:f3:35:a9:13:d3:7c:7f:5d:4a:e9:2e:
58:33:6f:db:63:9f:ac:c6:dc:fe:f0:53:66:37:f1:
7f:0c:f8:f0:5f:be:84:48:69:28:e7:d6:8a:0c:7a:
76:e6:f5:b0:45:13:b7:fd:7d:33:b8:33:02:a3:cb:
d9:f8:e7:4d:19:df:f3:1c:b6:75:f3:70:86:81:fa:
3f:61:a2:d9:c1:ee:d7:0c:b0:06:54:4d:6e:3a:35:
8c:b0:83:b0:3a:be:08:60:79:4d:71:b0:28:53:7f:
77:52:95:23:a3:03:27:d2:9d:05:fe:7d:75:76:e1:
c5:ff:16:ec:01:90:f6:53:f6:b4:4f:13:8f:50:87:
07:64:95:b2:34:b3:2a:e7:8e:e9:00:f7:8f:4c:1c:
da:22:c7:03:81:79:75:ce:45:aa:99:77:f7:1f:67:
7c:13:8f:e4:83:ec:de:5e:c1:fd:3f:1a:40:ce:72:
74:a4:de:53:ad:88:5b:c5:2b:6d:33:51:18:22:7f:
e5:56:7b:3b:2f:87:12:83:67:de:1e:7f:70:e1:2a:
3d:20:c6:10:d9:49:03:fd:67:0b:32:e8:c8:9e:7b:
56:72:5b:e6:f1:b0:2f:54:a4:f7:32:b1:5c:e5:00:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.125.0/24
Signature Algorithm: sha256WithRSAEncryption
34:98:6d:95:00:d6:38:0c:a0:a3:15:a7:b8:ca:e0:eb:da:f9:
0c:2d:e8:f4:16:13:7b:01:97:58:39:84:8a:76:24:d1:a3:96:
a8:d9:02:d9:6f:cf:4a:02:a5:23:ad:e4:ee:cc:a5:fd:5a:b8:
ad:60:23:25:d0:62:b1:f5:e6:08:eb:e5:cd:62:ff:cf:b4:19:
b2:c0:6f:a7:9e:ed:46:71:45:64:16:b5:a3:e7:7b:cf:01:94:
1c:3c:d5:d3:d8:b9:13:be:9d:57:44:3b:6f:07:73:a0:13:78:
7c:d0:a1:8a:f0:50:49:ab:c0:3a:25:e7:78:a0:01:dd:ba:d3:
93:dc:8e:e6:87:1e:56:c2:24:4c:e7:4e:e4:ac:99:5f:41:27:
dd:55:43:88:46:b8:d2:52:c8:5f:07:12:d7:01:63:d0:0c:8b:
03:0e:1a:e1:4c:03:c8:b4:3c:18:85:99:30:00:97:06:93:db:
b1:25:10:02:4e:82:db:b4:3f:88:25:88:b2:31:3c:c7:04:80:
7b:8a:b4:15:15:6e:7c:8d:02:4f:b0:d2:b4:16:4e:00:07:3b:
e6:81:c5:8a:fb:e0:3a:19:8c:43:49:d0:ca:27:6c:62:e2:04:
42:8e:71:44:5a:da:1a:ed:45:15:e2:33:a7:cd:c7:ca:b1:eb:
d9:54:f8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:24 2025 by rpki-client