Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer
File: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer (raw, json)
Hash identifier: I9rD0rgWGFyRKlat2YCww9sFrm22E/ArglWMOEHrpBE=
Subject key identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 690C2E8DC2318E743E0D1B7C5952668A7636A468
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft
caRepository: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 19 Nov 2024 12:09:45 +0000
Certificate not after: Tue 18 Nov 2025 12:14:45 +0000
Subordinate resources: IP: 157.66.238.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:0c:2e:8d:c2:31:8e:74:3e:0d:1b:7c:59:52:66:8a:76:36:a4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Nov 19 12:09:45 2024 GMT
Not After : Nov 18 12:14:45 2025 GMT
Subject: CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fa:50:ec:08:ba:3c:0b:0c:8a:a6:27:5f:fa:
02:ff:93:9f:d2:d5:5a:aa:63:4c:41:e7:d0:87:c9:
0b:4e:4d:c5:21:d8:29:08:e5:49:ec:49:8e:7b:fe:
c8:e4:8d:93:18:77:44:13:40:78:13:c6:7a:f2:84:
4d:e4:09:48:e3:28:31:c5:66:18:61:70:f6:a8:cb:
16:d7:3a:d1:7b:40:71:c7:c1:3f:b5:37:51:ce:7b:
be:b3:9a:e4:22:2d:d1:d1:f8:3b:a2:9a:42:07:5c:
14:bc:f1:b7:d2:25:2e:40:b6:b8:88:28:bc:e3:03:
b2:71:c3:84:5e:1b:0a:bb:22:26:17:27:17:0e:6a:
26:55:8b:ec:04:0b:d3:b9:53:f4:19:89:06:e6:a5:
16:e0:80:eb:e3:d6:09:f7:a5:6b:aa:7f:c8:a3:5d:
59:c4:60:63:e4:3b:d6:14:33:72:fc:75:a4:a2:0e:
e2:80:3d:e9:e2:02:c8:c3:50:56:ab:f3:99:23:cb:
8b:03:a0:c6:fa:a4:08:0d:86:6a:ab:36:51:d1:9f:
46:81:d7:01:55:79:d0:e7:62:af:86:ac:c0:24:26:
03:86:6d:8e:9b:96:45:8a:9b:c2:f7:86:c1:36:17:
19:e4:08:77:56:a4:c5:70:29:1c:1c:b0:86:fc:4c:
4e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.238.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:21:53:65:fe:fc:b6:42:a4:41:0d:3d:85:17:2b:2c:29:92:
84:f2:86:ca:f6:0e:18:f7:06:4c:7e:ab:af:64:7b:83:72:95:
78:7f:7a:21:ab:dd:71:43:ca:4c:89:95:14:66:f6:43:4d:43:
c4:f2:2c:c2:28:09:cf:43:94:51:ef:c8:95:42:7f:68:e0:cb:
53:bc:72:d2:23:ac:8d:53:ba:9c:66:a8:c0:4e:24:be:ce:40:
12:e8:1c:b0:d8:cb:06:8e:3b:d9:7e:7c:8f:ee:cc:42:1c:b5:
d8:8a:d2:70:30:79:7c:b7:45:33:1a:39:30:08:03:27:ab:60:
25:af:7c:88:c2:6a:4d:06:26:32:f1:e8:d9:08:04:c1:5e:ca:
fe:71:08:43:6c:e9:b3:0b:21:a1:da:4a:36:69:22:04:7f:55:
24:14:99:05:4a:74:b1:59:9c:39:33:bf:3a:58:6d:77:fd:23:
2f:cc:a9:a2:f3:34:0e:8d:7b:19:1c:4d:13:aa:d3:60:8b:9e:
cc:c3:ba:1d:84:7c:e8:72:22:b9:48:44:41:08:5d:31:94:b6:
98:60:e7:82:a4:e5:37:f4:82:5f:55:84:1d:93:48:b6:05:51:
af:cb:9e:c4:41:7e:ac:33:a1:cb:c5:df:17:8a:c7:92:fb:03:
96:a6:b0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:02:56 2025 by rpki-client