Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer
File: C4632299E016D269164FA40AEF99CC8602E2B7C1.cer (raw, json)
Hash identifier: dapycRXOm9tOaM3lGlo3IVWliQqoCdB3hGXhqgAFvfk=
Subject key identifier: C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 3A1EC02120B9315AD5EB298F342121E29BF0F4A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
caRepository: rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sat 13 Jul 2024 23:38:24 +0000
Certificate not after: Sat 12 Jul 2025 23:43:24 +0000
Subordinate resources: IP: 160.22.64.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:1e:c0:21:20:b9:31:5a:d5:eb:29:8f:34:21:21:e2:9b:f0:f4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Jul 13 23:38:24 2024 GMT
Not After : Jul 12 23:43:24 2025 GMT
Subject: CN=C4632299E016D269164FA40AEF99CC8602E2B7C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:36:7e:13:a2:14:a0:8a:83:9f:0e:28:99:c8:
e2:cb:22:49:7c:22:25:32:fe:67:39:01:93:e1:3e:
0d:ef:3a:bd:17:54:0a:a9:94:4c:e5:60:6d:c3:fd:
de:ad:45:75:64:0f:97:73:90:25:a2:c9:db:7f:48:
7a:a9:d6:b1:ce:74:f6:06:e7:2b:4b:77:45:24:64:
d5:62:00:4b:7c:1b:31:64:d2:0c:b0:3b:47:ad:8c:
67:33:ed:b9:5b:d3:be:51:0f:17:4b:be:b8:2b:ab:
2b:6d:d0:3b:6e:f1:93:9b:d3:17:9e:2b:fa:b2:46:
1e:bc:d9:a0:87:78:b6:45:67:e7:63:20:0d:69:17:
22:6e:89:48:63:8d:0c:03:de:7c:57:b7:8d:2c:7e:
0c:8f:76:bd:fc:b9:26:32:bc:70:41:e6:a1:56:c9:
e6:e7:ad:07:43:3d:3f:16:a6:fa:95:d4:ec:3f:f2:
6e:9f:6b:ef:87:79:41:1c:38:c3:48:38:84:35:f3:
e6:a1:83:3a:61:7a:ad:21:7e:7b:98:c7:6a:96:56:
34:d8:87:be:c6:e1:96:58:22:84:71:12:bc:5a:5b:
0c:ae:82:a4:a5:e6:45:f9:7d:a1:96:82:92:b8:d5:
6e:26:fa:e5:c5:6f:bc:42:43:07:6c:de:63:25:08:
c6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.64.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:a5:b6:dd:04:38:d9:ef:a0:97:24:38:f2:53:4b:2e:b8:d3:
7c:97:cc:49:52:d0:19:25:29:ad:a6:6f:b9:f9:2c:5f:4d:c0:
14:90:f7:b3:9d:54:21:c2:e6:3b:77:31:02:be:90:59:4e:e5:
cb:1c:65:cd:ce:7e:c2:f8:b2:5a:c8:8f:ba:19:20:7e:45:c3:
33:9c:56:27:c3:3e:16:fa:58:92:f7:17:00:20:68:08:44:77:
ea:74:6f:65:b8:9c:2c:de:c9:7a:0f:a0:be:1e:c9:88:e4:97:
e8:e9:24:10:91:81:46:e3:5b:2d:57:9c:0f:66:1d:cf:17:72:
43:72:db:e8:5f:88:54:69:bf:3d:f6:aa:20:7f:d7:0f:db:b8:
0c:d4:ef:67:8b:5f:0f:ee:fb:4b:66:e2:6c:af:ee:8f:91:af:
51:55:25:03:9e:64:6c:e9:52:69:58:8c:86:1c:e5:8e:66:59:
22:48:75:0d:5a:1b:e8:10:30:fb:96:06:a1:a0:37:3f:47:93:
c4:d0:df:03:db:c7:5c:13:76:6e:bd:97:7d:fa:b7:cf:11:56:
8d:06:e0:f2:58:c9:2c:e5:fc:5a:36:6b:d1:11:67:33:82:44:
17:c9:10:4a:c2:d9:fe:8e:ff:5f:7e:61:33:92:f2:41:5b:13:
96:46:66:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:18:44 2025 by rpki-client