Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer
File: 871B4235DFC56C482416E7BBA192562092FFE055.cer (raw, json)
Hash identifier: a6QX63vNJt3wf+2rJjt8O+Qt7QshYSu9cAQotfBgQm8=
Subject key identifier: 87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 707E0E2C243E5420C32879832BCE7ED87F2C953F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft
caRepository: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 19 Mar 2024 04:18:24 +0000
Certificate not after: Tue 18 Mar 2025 04:23:24 +0000
Subordinate resources: IP: 157.20.92.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:7e:0e:2c:24:3e:54:20:c3:28:79:83:2b:ce:7e:d8:7f:2c:95:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Mar 19 04:18:24 2024 GMT
Not After : Mar 18 04:23:24 2025 GMT
Subject: CN=871B4235DFC56C482416E7BBA192562092FFE055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:60:e8:27:ac:2a:94:fc:6b:2f:84:a4:43:50:
49:df:35:d9:36:42:31:5a:93:c1:f2:1b:36:cf:20:
54:89:b3:ce:43:dc:26:d0:67:40:1e:c1:c5:ec:e1:
8e:d1:26:e2:85:7b:5c:7b:f1:24:60:fb:bb:87:0f:
f5:82:7e:af:1e:8b:e0:19:6c:56:c6:f7:b7:81:97:
22:20:2a:38:eb:52:79:e2:38:6b:da:53:69:9f:ef:
2c:4b:0b:8f:68:6b:3a:40:36:00:ff:a3:9a:4a:06:
57:de:ae:6f:eb:10:3a:44:1a:33:88:a5:cb:ab:a1:
0c:77:b6:a7:a6:36:e5:31:62:d0:dc:00:52:b6:09:
03:dc:9a:2d:8b:80:cc:30:e3:f6:97:3c:84:a1:69:
45:4c:f1:41:16:00:7a:21:58:be:93:f3:1e:65:63:
d6:57:68:5c:44:80:70:a7:2f:ae:64:cf:51:62:75:
b2:1c:07:4a:63:3b:f6:fa:7a:61:f4:15:a3:82:6b:
1c:2b:59:0b:d4:9f:98:2f:0c:82:1b:fd:30:5d:25:
69:69:b2:ae:74:43:b9:13:38:b7:11:92:61:7a:09:
e8:84:2c:29:2c:bb:ac:df:2b:10:92:52:eb:0c:36:
df:0a:dd:46:f1:04:2f:0a:3a:01:e0:32:35:2b:e1:
be:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.92.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:b2:ee:56:8c:aa:c9:38:8b:9b:2c:dc:0f:a0:f2:9c:60:85:
2e:dc:46:b7:d2:8b:91:27:31:21:06:ae:36:8f:61:1d:10:8c:
6d:69:53:cb:7b:68:31:65:ae:f5:41:bf:09:8a:d5:c6:92:dd:
bb:75:32:8d:8b:55:5c:c8:73:c2:92:09:ce:96:bf:f4:e7:b4:
fc:2c:2d:fb:1e:c5:86:5a:e1:a6:20:42:1d:c3:43:a7:1e:34:
8e:bc:7f:b0:ee:4f:d3:b2:07:ac:fe:19:b2:42:00:67:17:80:
c7:67:a7:e9:13:7f:22:90:44:2f:e0:5f:06:36:bc:71:cd:5c:
c4:d2:24:a3:7d:0e:46:75:35:d2:7c:3d:35:89:94:23:c5:eb:
4a:0c:a9:c6:57:0f:52:e4:2a:3e:24:41:4c:66:d6:56:bc:ae:
0d:ca:58:1b:3c:22:64:12:d1:88:b7:5e:31:1c:5d:9f:fc:5a:
63:11:20:2d:27:fd:0a:dc:7d:13:f3:60:25:b3:8a:f8:43:c0:
6c:34:34:47:01:75:de:5f:80:c6:89:b3:fb:87:24:20:8b:82:
d8:95:b3:b8:25:fb:ad:69:e5:61:30:ce:48:57:67:e9:1e:db:
f2:ee:ae:8e:72:1b:8f:e0:2c:0d:8c:bc:b2:e3:c2:d6:54:14:
79:51:81:c5
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUcH4OLCQ+VCDDKHmDK85+2H8slT8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDMxOTA0MTgyNFoX
DTI1MDMxODA0MjMyNFowMzExMC8GA1UEAxMoODcxQjQyMzVERkM1NkM0ODI0MTZF
N0JCQTE5MjU2MjA5MkZGRTA1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPpg6CesKpT8ay+EpENQSd812TZCMVqTwfIbNs8gVImzzkPcJtBnQB7Bxezh
jtEm4oV7XHvxJGD7u4cP9YJ+rx6L4BlsVsb3t4GXIiAqOOtSeeI4a9pTaZ/vLEsL
j2hrOkA2AP+jmkoGV96ub+sQOkQaM4ily6uhDHe2p6Y25TFi0NwAUrYJA9yaLYuA
zDDj9pc8hKFpRUzxQRYAeiFYvpPzHmVj1ldoXESAcKcvrmTPUWJ1shwHSmM79vp6
YfQVo4JrHCtZC9SfmC8Mghv9MF0laWmyrnRDuRM4txGSYXoJ6IQsKSy7rN8rEJJS
6ww23wrdRvEELwo6AeAyNSvhvhECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFIcbQjXfxWxIJBbnu6GSViCS/+BVMB8GA1UdIwQYMBaAFGD4
vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x
LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ
aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by82YTg5NmZkYy01NjM4LTQxZDItOGE5OS02OGNlODE2YmQzY2YvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZhODk2ZmRj
LTU2MzgtNDFkMi04YTk5LTY4Y2U4MTZiZDNjZi8wLzg3MUI0MjM1REZDNTZDNDgy
NDE2RTdCQkExOTI1NjIwOTJGRkUwNTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGdFFwwDQYJKoZIhvcNAQELBQADggEBAGuy7laMqsk4i5ss3A+g8pxghS7cRrfS
i5EnMSEGrjaPYR0QjG1pU8t7aDFlrvVBvwmK1caS3bt1Mo2LVVzIc8KSCc6Wv/Tn
tPwsLfsexYZa4aYgQh3DQ6ceNI68f7DuT9OyB6z+GbJCAGcXgMdnp+kTfyKQRC/g
XwY2vHHNXMTSJKN9DkZ1NdJ8PTWJlCPF60oMqcZXD1LkKj4kQUxm1la8rg3KWBs8
ImQS0Yi3XjEcXZ/8WmMRIC0n/QrcfRPzYCWzivhDwGw0NEcBdd5fgMaJs/uHJCCL
gtiVs7gl+61p5WEwzkhXZ+ke2/Luro5yG4/gLA2MvLLjwtZUFHlRgcU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:58:19 2025 by rpki-client