Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer
File: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer (raw, json)
Hash identifier: iuk2g/b3Y5mjWWuAUzevIp0QGztSWgUoSm9JMPIbgi4=
Subject key identifier: 41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 75A1C171DEE519C904F707D91516EA2AC841B393
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft
caRepository: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 21 Mar 2024 13:41:59 +0000
Certificate not after: Thu 20 Mar 2025 13:46:59 +0000
Subordinate resources: IP: 157.20.220.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:a1:c1:71:de:e5:19:c9:04:f7:07:d9:15:16:ea:2a:c8:41:b3:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Mar 21 13:41:59 2024 GMT
Not After : Mar 20 13:46:59 2025 GMT
Subject: CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:18:49:84:f0:31:d7:1b:69:00:06:d5:02:
cf:26:e2:a7:79:58:fa:84:fe:c0:4a:ed:37:60:ee:
d0:ae:69:f8:69:96:40:23:3b:26:d0:91:b0:0d:64:
a8:fd:63:c7:ce:ef:da:a5:b4:0a:1c:db:04:69:70:
6f:13:ed:63:89:e0:80:2b:8a:57:b2:0b:66:6b:90:
04:15:b9:03:61:ea:b0:9c:ef:94:60:31:9f:ca:1a:
5b:ce:bb:03:cc:8c:46:a3:58:4a:d0:0e:19:47:0d:
75:60:0e:a9:40:f7:62:ee:62:c1:64:de:4a:90:41:
49:46:8a:d1:16:dc:af:bd:70:d4:60:18:ca:d0:16:
4f:ab:92:7a:01:5c:0c:fe:fa:f0:6c:c1:ef:8b:e4:
24:73:d3:47:f4:a1:17:e8:00:a3:7c:f5:e1:00:de:
ae:f9:f6:3a:c7:f0:82:e0:5f:05:20:31:22:e5:1f:
89:67:83:d2:02:58:d3:0f:a8:2d:64:1b:d2:f4:08:
f8:82:5d:c7:b6:ae:65:f1:4b:87:54:4c:0b:6b:39:
76:0f:0f:7c:9d:ca:86:a1:42:a7:76:ee:59:e4:fc:
ed:8d:1d:52:74:18:7e:58:f7:c7:8c:d1:80:df:07:
d4:b0:05:bf:ab:e9:4f:65:6f:8a:d0:f6:dd:17:b6:
cf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.220.0/23
Signature Algorithm: sha256WithRSAEncryption
55:d7:03:01:9a:f8:a2:5c:37:91:d8:45:e8:97:c3:71:0a:d8:
16:a6:c0:ab:4a:bb:00:e6:ed:32:ef:06:38:ac:6a:ea:bc:b0:
de:eb:06:80:4c:e7:dc:0f:ea:8c:ed:a4:8c:17:0b:3e:8d:6b:
dc:d4:a2:78:e8:9d:52:f1:48:e9:3f:82:66:88:8b:7c:ca:ee:
78:7a:c7:71:7a:fe:05:77:cb:25:ec:23:7b:2e:06:38:80:98:
2c:8e:9e:81:48:7d:e5:5a:dd:bb:40:7f:5f:15:a5:d2:f4:fa:
4d:25:40:1a:7d:a2:49:2a:85:e3:98:b5:a4:7c:b8:a8:9d:09:
43:56:ce:3d:45:d5:09:9b:3e:1d:cb:34:5d:64:61:f4:38:8b:
f0:42:1d:20:ef:3b:cd:ef:9a:ab:65:7b:32:bd:ab:fe:ec:7d:
2f:e6:03:32:6d:cc:98:da:82:c5:b0:ea:6b:e8:11:15:e3:48:
1e:c2:cd:85:ae:28:15:a9:72:cf:16:58:f7:f3:3f:25:70:e4:
2a:d7:df:89:d7:bc:7c:c6:9c:44:82:4a:44:f7:02:4e:b7:3b:
b6:b1:76:23:eb:04:e6:d5:5b:3d:b9:85:c0:75:74:34:24:4c:
c2:f2:67:c8:33:8d:15:80:f9:24:9c:ab:93:1a:f6:73:74:70:
17:b4:87:d2
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUdaHBcd7lGckE9wfZFRbqKshBs5MwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDMyMTEzNDE1OVoX
DTI1MDMyMDEzNDY1OVowMzExMC8GA1UEAxMoNDFBNDc5QUQ2Qjk3NEI1MEI5OUEw
REZDQkUyNEZGOEFBQzQ0MThENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMinGEmE8DHXG2kABtUCzybip3lY+oT+wErtN2Du0K5p+GmWQCM7JtCRsA1k
qP1jx87v2qW0ChzbBGlwbxPtY4nggCuKV7ILZmuQBBW5A2HqsJzvlGAxn8oaW867
A8yMRqNYStAOGUcNdWAOqUD3Yu5iwWTeSpBBSUaK0Rbcr71w1GAYytAWT6uSegFc
DP768GzB74vkJHPTR/ShF+gAo3z14QDervn2OsfwguBfBSAxIuUfiWeD0gJY0w+o
LWQb0vQI+IJdx7auZfFLh1RMC2s5dg8PfJ3KhqFCp3buWeT87Y0dUnQYflj3x4zR
gN8H1LAFv6vpT2VvitD23Re2z6MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFEGkea1rl0tQuZoN/L4k/4qsRBjUMB8GA1UdIwQYMBaAFGD4
vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x
LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ
aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by8wZWRkNGNjYi00MmUzLTRiNzItOTE5My1lOTE4ZTdiMzA2N2QvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlZGQ0Y2Ni
LTQyZTMtNGI3Mi05MTkzLWU5MThlN2IzMDY3ZC8wLzQxQTQ3OUFENkI5NzRCNTBC
OTlBMERGQ0JFMjRGRjhBQUM0NDE4RDQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGdFNwwDQYJKoZIhvcNAQELBQADggEBAFXXAwGa+KJcN5HYReiXw3EK2BamwKtK
uwDm7TLvBjisauq8sN7rBoBM59wP6oztpIwXCz6Na9zUonjonVLxSOk/gmaIi3zK
7nh6x3F6/gV3yyXsI3suBjiAmCyOnoFIfeVa3btAf18VpdL0+k0lQBp9okkqheOY
taR8uKidCUNWzj1F1QmbPh3LNF1kYfQ4i/BCHSDvO83vmqtlezK9q/7sfS/mAzJt
zJjagsWw6mvoERXjSB7CzYWuKBWpcs8WWPfzPyVw5CrX34nXvHzGnESCSkT3Ak63
O7axdiPrBObVWz25hcB1dDQkTMLyZ8gzjRWA+SScq5Ma9nN0cBe0h9I=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:50 2025 by rpki-client