
Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer
File: 03F45A130990D1072FE172E1EF64AAFAEC347834.cer (raw, json)
Hash identifier: JOxQRSMR58ehl9OomOV2rU7X8JIx/KK2x89pC8xnK0Y=
Subject key identifier: 03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 44D9820EC4300458B4F1AB60300B6EDD3636E710
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft
caRepository: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 14 Jan 2025 01:04:00 +0000
Certificate not after: Tue 13 Jan 2026 01:09:00 +0000
Subordinate resources: IP: 103.143.4.0/23
IP: 2405:4640::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:d9:82:0e:c4:30:04:58:b4:f1:ab:60:30:0b:6e:dd:36:36:e7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 14 01:04:00 2025 GMT
Not After : Jan 13 01:09:00 2026 GMT
Subject: CN=03F45A130990D1072FE172E1EF64AAFAEC347834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:55:16:3c:03:d7:bd:be:7b:6c:39:66:1f:5a:
37:ca:8d:03:e6:fd:f2:ff:7d:20:ea:65:30:74:6a:
fd:48:27:52:9b:b4:b7:30:3d:35:b9:c2:4a:c6:05:
28:61:61:ed:4b:1a:6e:f0:72:4c:40:25:1f:2c:70:
f3:49:21:77:3d:06:30:d0:76:93:8e:1c:ef:fe:19:
22:29:e6:dc:b6:62:fa:e4:04:d5:13:b6:7a:96:3f:
4d:53:be:a0:51:73:e6:ad:21:70:67:ae:83:ce:8a:
67:9c:9b:82:63:19:6a:25:28:b5:84:16:c4:07:25:
74:54:1c:9d:e1:d0:65:79:a9:ba:74:0b:07:d9:59:
43:6c:03:df:96:9c:21:55:85:8f:5b:75:57:92:11:
dd:2a:86:a9:52:fe:13:f2:b0:cd:2a:d2:b9:94:6f:
c1:4e:38:25:d5:c8:8e:f0:ec:4e:ff:cd:62:37:3b:
01:ee:38:69:6b:c2:8b:73:8f:35:0d:5e:38:c7:79:
57:ab:cf:a3:64:35:a1:c7:27:1d:aa:d8:f9:2e:bf:
74:fe:0e:25:46:3a:e8:09:e3:cd:0e:7d:e9:4e:c9:
ea:e3:8e:17:8b:d4:26:df:5a:91:84:92:67:84:50:
7e:19:39:39:0a:d6:40:4a:4c:70:43:f5:2e:7c:04:
e1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.143.4.0/23
IPv6:
2405:4640::/32
Signature Algorithm: sha256WithRSAEncryption
5d:d6:90:85:16:dc:09:84:a1:22:3a:e3:58:83:d8:26:9f:3e:
99:34:fe:bb:cb:28:39:ae:15:e1:1b:e4:1f:b8:f3:1f:24:30:
04:be:18:c5:fb:20:b5:97:14:ca:59:3a:40:55:47:cd:18:62:
ef:b8:27:3f:fa:46:78:47:d7:4e:c1:1f:f8:73:71:34:c4:b8:
74:15:fb:ae:82:98:03:f8:68:56:28:e7:f9:6c:aa:35:5b:14:
e0:39:36:a2:04:d3:17:e7:75:51:e3:5b:eb:c2:2a:69:a7:6b:
dc:4b:92:49:f3:9a:35:92:ca:c2:85:35:b9:e0:d5:fc:ff:88:
12:4a:29:cc:78:37:b5:71:7a:66:66:af:dc:6d:6b:c7:1b:c7:
24:e9:41:df:3e:1f:67:76:50:f7:42:ef:ed:3b:a7:18:3d:95:
24:b9:db:b0:84:ce:4b:20:df:59:25:1e:6a:f7:9e:36:d2:24:
81:cf:c4:81:5b:e8:72:f5:06:26:fa:35:42:a0:6d:01:d1:11:
f1:0a:8d:38:14:e2:0e:bc:df:fc:f1:33:d6:17:40:d3:9c:fe:
36:6d:c9:5d:3e:65:48:64:8c:74:51:82:ca:2a:2e:fb:52:ba:
40:bb:e5:33:94:c6:8b:82:85:24:d9:c1:fa:d0:c2:d6:02:6c:
58:87:7c:b6
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIURNmCDsQwBFi08atgMAtu3TY25xAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDExNDAxMDQwMFoX
DTI2MDExMzAxMDkwMFowMzExMC8GA1UEAxMoMDNGNDVBMTMwOTkwRDEwNzJGRTE3
MkUxRUY2NEFBRkFFQzM0NzgzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALxVFjwD172+e2w5Zh9aN8qNA+b98v99IOplMHRq/UgnUpu0tzA9NbnCSsYF
KGFh7UsabvByTEAlHyxw80khdz0GMNB2k44c7/4ZIinm3LZi+uQE1RO2epY/TVO+
oFFz5q0hcGeug86KZ5ybgmMZaiUotYQWxAcldFQcneHQZXmpunQLB9lZQ2wD35ac
IVWFj1t1V5IR3SqGqVL+E/KwzSrSuZRvwU44JdXIjvDsTv/NYjc7Ae44aWvCi3OP
NQ1eOMd5V6vPo2Q1occnHarY+S6/dP4OJUY66AnjzQ596U7J6uOOF4vUJt9akYSS
Z4RQfhk5OQrWQEpMcEP1LnwE4fUCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFAP0WhMJkNEHL+Fy4e9kqvrsNHg0MB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by83OTk4ZDZlZS02ZmQ3LTRlMmQtYWU0MS02OTM5ZmRiMTUzZWUvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc5OThkNmVl
LTZmZDctNGUyZC1hZTQxLTY5MzlmZGIxNTNlZS8wLzAzRjQ1QTEzMDk5MEQxMDcy
RkUxNzJFMUVGNjRBQUZBRUMzNDc4MzQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD
BAFnjwQwDQQCAAIwBwMFACQFRkAwDQYJKoZIhvcNAQELBQADggEBAF3WkIUW3AmE
oSI641iD2CafPpk0/rvLKDmuFeEb5B+48x8kMAS+GMX7ILWXFMpZOkBVR80YYu+4
Jz/6RnhH107BH/hzcTTEuHQV+66CmAP4aFYo5/lsqjVbFOA5NqIE0xfndVHjW+vC
Kmmna9xLkknzmjWSysKFNbng1fz/iBJKKcx4N7VxemZmr9xta8cbxyTpQd8+H2d2
UPdC7+07pxg9lSS527CEzksg31klHmr3njbSJIHPxIFb6HL1Bib6NUKgbQHREfEK
jTgU4g683/zxM9YXQNOc/jZtyV0+ZUhkjHRRgsoqLvtSukC75TOUxouChSTZwfrQ
wtYCbFiHfLY=
-----END CERTIFICATE-----
Generated at Thu Apr 24 13:12:45 2025 by rpki-client