Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer
File: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer (raw, json)
Hash identifier: ErQasCOLQOm/uMRFl8xpvN8TgCwk6yS17C/q1s0zz/o=
Subject key identifier: C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 53F401400AADE17B5D5968AD5757BA26CCD4FE5D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft
caRepository: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 08 Aug 2024 08:50:27 +0000
Certificate not after: Thu 07 Aug 2025 08:55:27 +0000
Subordinate resources: IP: 160.25.248.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f4:01:40:0a:ad:e1:7b:5d:59:68:ad:57:57:ba:26:cc:d4:fe:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Aug 8 08:50:27 2024 GMT
Not After : Aug 7 08:55:27 2025 GMT
Subject: CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:6a:dc:5f:86:89:9e:d0:3e:4a:ad:b2:75:
34:a0:55:e1:92:88:00:fe:e1:36:5c:1a:b9:8f:99:
f8:cb:83:d1:01:ad:d4:cf:f8:99:fa:83:e3:85:33:
65:84:13:96:b4:00:66:bf:77:07:70:d8:c6:16:39:
48:fa:a8:1c:78:e4:c8:3c:1a:12:ce:da:4a:c7:69:
64:bd:b8:d6:55:8f:43:26:2a:c7:21:58:4c:c8:39:
90:03:ce:56:3f:d0:23:eb:e7:e1:21:60:88:d8:7f:
4e:39:2c:29:f3:3f:e6:a5:d5:36:a9:47:ad:ec:f9:
3c:af:e3:27:ce:e2:1c:dc:c3:65:64:36:33:f0:00:
7b:2c:5d:85:31:4d:3f:d3:57:29:f5:67:b9:72:1e:
ff:da:c2:b9:cd:0f:87:bb:54:94:29:d6:49:f9:38:
9b:8c:65:c7:f2:b0:59:34:b5:9a:63:6a:0d:18:08:
41:38:83:ca:5e:2f:ca:53:a3:3f:65:0a:73:b2:d8:
38:7a:85:3f:84:6d:1e:bb:ea:6b:6a:c0:88:05:75:
27:f5:d6:05:e7:fa:78:dd:25:9b:b8:9a:5d:a3:da:
2e:dd:5b:e6:ce:b3:a7:4a:c3:39:72:f0:8d:c3:37:
85:bd:1d:81:be:95:ae:99:30:f0:a9:f3:27:9b:24:
4f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.248.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:b7:a5:16:96:61:d6:60:67:3f:cb:82:96:cb:f1:46:6c:a1:
f2:8e:86:8c:ad:a3:53:ed:ab:21:35:5e:99:84:19:74:f8:6d:
d9:34:0d:1b:94:23:e2:38:86:31:70:70:0b:a6:ac:91:6d:44:
69:3b:be:10:6a:a3:34:7b:4f:ab:b8:13:60:69:57:25:57:bc:
5a:06:4d:8b:d0:89:2b:f2:c6:c0:86:58:f4:ea:2c:6b:6b:e3:
b8:1b:cb:3a:65:f1:d9:c8:8d:b8:08:94:18:bc:3d:c2:b2:20:
cb:c0:b8:10:8e:37:72:83:82:3c:e3:c9:a4:2a:48:e5:d2:a6:
51:8c:d3:74:c6:69:b8:1b:da:8d:c0:e8:a2:14:2a:b5:54:f4:
15:c8:88:5d:75:c1:2a:a9:a5:df:f3:aa:06:63:16:91:29:e1:
1d:f7:48:7e:58:f3:c9:35:c6:da:68:4a:9b:95:ba:b6:68:aa:
88:f4:42:e6:de:db:7c:9b:11:63:34:c4:63:08:67:58:c5:b8:
df:08:f6:74:17:3a:0b:83:68:db:17:38:27:b0:24:7f:72:df:
e4:0b:f5:42:10:e9:26:e4:29:ff:bf:44:47:3c:f7:c3:c9:4b:
a8:1c:0c:bf:ea:31:e1:34:b6:51:be:62:71:44:9f:20:70:6f:
7e:12:d1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:35 2025 by rpki-client