Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer
File: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer (raw, json)
Hash identifier: a986jEw3A03xGbDMunn165NUc8glObY0mTMYRnrGFx0=
Subject key identifier: B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 13DAA80734A79A9319D11FE2E90266CAEBDF5721
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft
caRepository: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 19 Jul 2024 04:19:17 +0000
Certificate not after: Fri 18 Jul 2025 04:24:17 +0000
Subordinate resources: IP: 160.25.58.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:da:a8:07:34:a7:9a:93:19:d1:1f:e2:e9:02:66:ca:eb:df:57:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Jul 19 04:19:17 2024 GMT
Not After : Jul 18 04:24:17 2025 GMT
Subject: CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7c:12:aa:33:3f:9f:49:60:df:fd:03:80:50:
fa:0c:d9:51:28:b1:a7:28:bc:34:cb:4d:0a:9e:29:
d6:91:64:68:52:a0:d9:87:68:bf:34:0f:0f:b3:51:
4e:c5:bd:15:56:ca:33:e0:d0:41:c2:95:1e:76:e6:
2d:51:aa:fe:b5:98:ca:10:2e:3f:fb:e1:b8:eb:53:
a6:95:b8:65:07:a3:3f:7b:fc:8f:df:36:83:cc:13:
5b:5c:42:ca:a5:d8:59:ba:74:a6:3e:62:0b:26:01:
74:29:8d:71:87:88:14:91:64:05:24:e3:de:fc:6e:
ee:00:a6:26:33:b4:f8:96:84:fa:71:a2:d0:cd:49:
79:60:8e:a5:1e:81:41:20:79:47:7e:d8:dd:99:58:
9c:6a:cf:3e:d7:32:43:a8:5d:33:ff:be:41:fa:83:
4d:e8:e4:f8:a0:4c:fe:75:c5:25:82:bf:03:1e:22:
4f:7d:0e:41:4e:1a:b2:5d:9e:36:d6:ac:b8:65:39:
b7:1c:7d:d8:8d:db:92:24:16:ca:72:e4:11:56:3f:
c4:fe:26:92:1f:0e:a1:81:f8:a5:89:bc:a8:64:a2:
60:ff:88:8d:01:95:6c:23:c6:6a:20:2f:26:63:f7:
59:70:28:8d:a3:6b:20:55:79:96:c9:91:73:34:1f:
42:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.58.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:d2:f4:b2:8a:fa:9d:d9:84:3e:ee:a2:73:da:b8:41:0c:16:
62:6f:ce:ba:09:c6:01:55:30:8e:3b:0e:9d:1c:e0:4b:f0:ee:
ca:98:3f:ab:8b:3e:97:e5:e9:06:12:6b:f3:17:f7:fc:8c:01:
c0:91:93:48:98:b9:99:d3:84:9b:30:8e:9b:21:78:e2:44:12:
e9:2c:a1:c8:7b:6a:d1:58:b5:40:75:04:31:93:de:4c:dc:42:
c9:18:3c:0f:f3:78:89:06:b2:be:3a:3a:a7:7b:d5:2a:72:1b:
5f:a4:55:ce:93:a4:47:51:05:d0:5d:92:6c:f4:7a:e7:20:12:
39:b3:0b:72:e3:1b:96:ca:40:57:79:44:f9:c9:61:aa:7a:b7:
e3:ad:93:0a:c5:06:f4:ff:80:c0:bb:81:18:b3:4d:3d:8b:55:
9c:bd:9c:24:b7:05:20:ae:44:a2:22:06:c1:d9:22:c8:32:8f:
3f:f7:08:07:51:c0:88:16:4b:a0:7b:b3:9e:5d:07:80:68:82:
e0:a5:b4:34:8a:7b:23:15:4f:78:3b:50:90:99:e0:fa:7d:33:
37:74:2c:2d:4c:ff:3d:f4:ce:e1:b9:7b:51:66:e0:85:7e:00:
e6:83:db:c1:aa:88:b1:9b:f5:bb:ad:02:c5:9f:82:93:8c:5d:
37:e7:55:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:51:13 2025 by rpki-client