
Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer
File: 037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer (raw, json)
Hash identifier: kpZroL/B6Vq7f9faPnTo3iYKSSbF6pIPflu1UM4s+0s=
Subject key identifier: 03:7A:1E:47:FB:1C:CE:3B:6E:6A:93:69:ED:DD:87:0D:AE:80:D6:65
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0C3002F47B0857905FE4FAAB5A62E1385F5A0F4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft
caRepository: rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 16 Sep 2024 07:24:27 +0000
Certificate not after: Mon 15 Sep 2025 07:29:27 +0000
Subordinate resources: IP: 103.239.41.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:30:02:f4:7b:08:57:90:5f:e4:fa:ab:5a:62:e1:38:5f:5a:0f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Sep 16 07:24:27 2024 GMT
Not After : Sep 15 07:29:27 2025 GMT
Subject: CN=037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:d9:19:ac:a5:63:63:1f:93:5f:63:8f:fb:
66:18:2f:78:ce:77:9c:43:08:30:84:00:fc:fb:f7:
d3:2d:d2:80:b3:c1:cb:1f:ef:1c:d9:b3:80:dd:09:
67:b5:52:cc:96:ea:b3:38:b7:7f:ac:e9:25:66:4d:
8a:4d:ed:db:76:14:be:28:90:57:09:36:c7:d9:e8:
69:0f:ca:d2:cf:09:20:92:68:d3:63:68:5c:3b:59:
6e:eb:c8:a7:a2:44:aa:3e:7d:c3:a8:2c:d4:83:4c:
b4:72:ac:0f:b7:9f:83:6a:5d:32:12:06:1c:43:07:
59:f6:35:34:4a:13:28:4e:b1:d2:12:1a:16:6f:44:
38:6f:2c:51:ea:a1:d3:59:64:6f:7c:47:cb:b8:98:
37:68:06:b2:4c:89:a3:6a:96:bf:56:80:94:0c:b1:
00:6a:82:ee:e2:e7:79:fe:b7:69:1b:fc:e4:c4:0c:
74:67:4d:a4:ad:a6:fc:4b:84:f2:5e:51:a0:45:9e:
2c:46:bc:df:11:95:13:b4:9b:2e:a1:74:c8:d1:a5:
a5:f3:bf:e9:c4:7c:30:e2:37:10:48:ef:ca:00:0a:
da:87:89:42:0a:93:a6:c3:26:42:8e:5d:32:2c:05:
10:35:b4:7a:61:3d:c6:84:d3:b2:9d:3b:b2:7c:5f:
c5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
03:7A:1E:47:FB:1C:CE:3B:6E:6A:93:69:ED:DD:87:0D:AE:80:D6:65
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.239.41.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:23:f1:e1:7d:39:03:5d:90:a3:d7:6d:df:6b:d9:08:ab:00:
77:d3:ee:3f:b2:0b:48:b7:57:58:2c:a7:c3:07:f3:ea:b5:14:
e3:d7:a4:d7:4f:21:cb:aa:b1:b0:76:dd:42:54:af:3e:88:43:
6e:93:d3:2d:aa:b4:f6:36:59:57:60:a3:f7:56:15:73:ad:c4:
3e:38:9d:77:85:85:e0:d1:4a:7d:53:41:dc:14:6e:9a:bc:60:
cf:4d:8c:ca:56:6e:6d:e0:31:d4:81:b1:ea:8b:4f:e2:10:10:
cf:7e:13:73:a5:d7:be:de:93:f5:09:43:e5:51:f0:42:58:04:
b7:ed:92:f6:52:93:e2:8f:87:f9:af:2b:b5:2b:52:2f:ff:08:
ac:39:fe:c4:db:ea:e4:44:08:5c:89:45:fa:83:39:67:69:d1:
ea:20:bc:39:a8:cb:7c:8a:7a:25:39:91:76:45:28:d7:bc:65:
32:53:73:1c:d6:9f:8d:a1:06:78:72:bd:09:52:76:a0:23:b0:
7e:12:9b:27:4c:be:a2:1a:b4:02:d4:bd:52:f2:fc:cb:56:13:
f6:0a:b9:c3:5a:de:9d:42:13:96:05:40:4d:c6:9f:05:05:a6:
d0:1c:09:b3:5a:2a:9e:b0:a4:70:ad:4a:1a:29:74:fc:8a:5e:
d8:5f:61:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:21:43 2025 by rpki-client