Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer
File: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer (raw, json)
Hash identifier: V5hQjuMpiJPKZtzvdaE78+3x80D79Gg+fHl8tVbUkso=
Subject key identifier: AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 36AC3EB9CBA9505613829AD88EA237BEE255282D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft
caRepository: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sat 02 Nov 2024 11:51:39 +0000
Certificate not after: Sat 01 Nov 2025 11:56:39 +0000
Subordinate resources: IP: 157.66.40.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ac:3e:b9:cb:a9:50:56:13:82:9a:d8:8e:a2:37:be:e2:55:28:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Nov 2 11:51:39 2024 GMT
Not After : Nov 1 11:56:39 2025 GMT
Subject: CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cc:d5:76:7c:da:14:c7:44:f5:b9:88:a5:af:
2e:f5:fb:53:20:86:1e:d8:2f:f3:9d:ee:01:a8:47:
71:cc:46:d1:ff:2f:00:9b:15:7b:41:b5:9f:b2:2a:
15:cf:7e:f0:63:cf:cd:a0:ee:64:e3:19:3d:8e:6a:
c7:05:47:a2:f0:56:19:41:ce:53:4e:43:9e:d0:73:
28:8c:d2:d2:ee:23:ef:00:9b:24:8e:9e:4d:61:ce:
6e:88:20:fb:f5:ae:f6:46:f4:e7:fb:69:a4:fc:bc:
19:8b:85:d4:32:7e:79:40:f9:31:92:9c:39:90:a6:
62:aa:ae:da:c0:b2:e5:17:1a:14:1c:a9:41:9b:c5:
95:c6:e5:cf:a8:71:ab:f7:4c:9a:5d:d5:61:34:94:
4b:3e:28:de:01:c6:0f:4a:92:c8:b3:b6:ef:20:09:
c4:42:d1:60:0b:e9:66:97:63:bd:b8:ef:dc:8e:0b:
86:0f:71:0b:6b:21:f9:20:06:ba:3f:98:5e:64:58:
9f:25:77:af:84:cf:71:9c:7e:d0:ac:9d:e2:5c:f2:
b2:3f:f0:7e:17:78:24:f6:d9:be:55:bc:31:8f:9f:
9a:da:53:47:fc:8d:fe:e0:7e:c6:fc:8f:fe:ed:f7:
78:29:30:58:cd:a7:aa:14:b1:34:09:0a:bd:71:82:
13:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.40.0/23
Signature Algorithm: sha256WithRSAEncryption
27:4f:d2:3c:88:34:f6:c4:8e:23:53:88:62:06:e2:93:e8:9b:
80:a9:52:da:ae:65:9c:fc:71:fb:fa:40:c8:41:77:2b:ae:64:
90:01:29:5b:0a:29:92:a1:34:39:a8:62:8f:43:dd:51:be:37:
71:bc:bc:05:97:25:a6:e7:11:f5:16:ac:2a:a9:03:d2:66:c5:
84:0d:f4:6a:6d:52:5b:e2:c9:a0:a8:56:fc:93:93:3b:8e:ad:
af:e4:47:cc:8e:bf:7a:89:49:61:e5:6b:49:49:7f:b7:ad:ab:
85:e3:12:54:b4:32:67:91:04:ba:ca:a1:45:8e:69:62:60:74:
9c:ea:2f:fe:5b:9f:24:d2:ea:0c:08:10:54:fc:d7:f7:61:84:
38:b8:08:13:62:2e:e4:7c:63:f3:7d:61:5a:8a:2c:7e:44:aa:
92:27:f3:17:14:6b:28:5a:3d:a9:ae:d8:5a:fd:d3:ec:3c:69:
64:fd:0a:93:34:e7:dc:67:8a:78:69:1e:3b:c8:39:fe:4d:ef:
42:ad:1b:dc:ab:cd:1c:41:5a:89:b4:af:32:76:8a:0d:d0:2c:
a2:8f:93:f4:c7:9c:63:a2:7d:8c:9c:d4:26:cb:dc:da:53:6b:
ab:59:62:2b:38:d8:55:e7:0f:52:56:98:85:c9:ef:bf:4f:6e:
cf:3e:8f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:20:13 2025 by rpki-client