Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer
File: D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer (raw, json)
Hash identifier: k5Xj37jtkcp4m2Nwczu3gsttmOFYCW4cnPBJvq6krXg=
Subject key identifier: D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 4754385C771D16374C31AE661F680E41D7751973
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft
caRepository: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 24 May 2024 16:23:47 +0000
Certificate not after: Fri 23 May 2025 16:28:47 +0000
Subordinate resources: IP: 157.66.176.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:54:38:5c:77:1d:16:37:4c:31:ae:66:1f:68:0e:41:d7:75:19:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: May 24 16:23:47 2024 GMT
Not After : May 23 16:28:47 2025 GMT
Subject: CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:ad:b9:29:30:8b:63:8a:d9:46:28:a1:6e:
b9:e3:4f:ec:62:dd:7e:b3:71:4a:08:9b:97:c2:58:
7b:a9:64:6f:dd:6e:2a:64:8c:bd:d0:e1:d4:e0:18:
70:53:c5:7a:71:b2:49:dc:7e:2d:df:ad:a0:b5:55:
98:c8:bf:04:58:66:03:c6:1c:d0:10:3c:85:79:00:
62:77:9d:8c:2d:38:b5:81:3f:ea:9e:28:cf:bc:b1:
c3:ce:c5:a9:b1:56:e2:e4:4d:cd:96:63:e5:0e:dd:
ee:43:ec:fe:a8:3b:bc:cc:3a:c4:45:b6:ab:5c:0a:
88:94:f2:3c:b7:0b:4e:6b:0e:42:83:ac:a7:c4:9a:
ca:fd:d3:f7:67:9e:4d:0e:ec:84:ef:38:75:bb:a1:
4e:e9:17:63:62:2c:45:d0:88:c6:b0:6a:34:35:ac:
3a:fe:aa:79:5b:34:99:42:57:82:ec:ed:ea:87:dd:
c6:a8:0d:22:12:e2:ab:dc:69:74:61:c1:3d:e7:5f:
75:c8:ae:ee:31:a9:ba:d6:c8:dd:09:da:9c:80:83:
af:f6:cb:8d:27:28:aa:cd:ab:e0:4d:a6:0b:84:d0:
da:51:b1:d7:a7:4e:4b:75:c5:bb:49:14:bf:9b:86:
fd:d6:0f:cc:7e:e7:4c:dd:b1:90:c6:64:a6:6e:38:
2d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.176.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:53:a5:14:5e:83:36:37:1d:de:e6:41:8d:24:f3:a9:b8:e4:
3c:56:aa:fe:99:d7:c5:2e:6c:73:19:ec:df:c2:ae:a3:53:52:
3d:6c:47:e1:30:86:7f:10:5e:04:10:69:59:fb:08:ea:98:05:
0a:af:d1:f1:5d:a3:f2:78:9c:19:f5:02:b5:2e:eb:5e:53:02:
96:97:b4:24:44:30:1f:c4:ca:ab:67:72:ce:90:22:4e:10:c4:
f4:2e:64:d8:89:98:4f:4d:04:99:9d:62:9d:5a:78:a2:db:66:
3f:ff:91:15:ac:b8:b8:7b:24:a1:00:76:ec:df:1f:0e:4c:50:
fe:24:87:bb:0c:87:86:d9:2b:a0:60:55:15:70:58:65:08:21:
a7:58:38:be:40:cc:c3:f1:ec:0d:1c:f1:52:53:a4:fe:a4:e0:
df:08:64:8e:6f:ed:a7:4c:a6:2b:b7:24:b3:04:0c:77:f2:ce:
e1:52:90:63:64:fe:b7:06:45:89:10:be:58:35:40:d7:43:7f:
32:fc:af:4a:7e:93:1c:64:f0:b7:a3:d2:49:b2:df:aa:e0:2c:
45:26:92:a3:bb:cd:00:7b:21:15:14:9b:ec:c8:32:a2:d6:43:
d0:18:af:cc:4c:a9:61:bf:17:1f:05:f3:82:1c:0d:ad:3a:fa:
8d:1c:de:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:02:52 2025 by rpki-client