Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer
File: 052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer (raw, json)
Hash identifier: pM0rs7M61GTaJQO5O802bsxgIEuFF6GfArDUATBxFLo=
Subject key identifier: 05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 21808FD90970F7E948A9947412FEC9224C745C8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft
caRepository: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 12 Jul 2024 21:49:49 +0000
Certificate not after: Fri 11 Jul 2025 21:54:49 +0000
Subordinate resources: IP: 103.161.194.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:80:8f:d9:09:70:f7:e9:48:a9:94:74:12:fe:c9:22:4c:74:5c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 12 21:49:49 2024 GMT
Not After : Jul 11 21:54:49 2025 GMT
Subject: CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:78:07:b7:14:c2:46:35:3b:a4:5e:84:b9:48:
57:cf:37:fa:cf:b7:2e:d7:ea:3f:24:2a:e1:07:9e:
31:ef:45:ca:c6:2c:a9:f2:cb:12:6c:53:eb:c9:12:
13:62:12:db:3d:34:f1:ed:fd:79:09:8e:b4:75:f7:
b7:ec:c2:1f:70:e0:a8:29:17:f5:07:c5:49:be:fb:
04:8e:20:ca:d3:35:51:ca:0f:cd:76:46:73:83:42:
16:c6:70:ea:41:82:39:b9:4c:40:f2:c1:7f:97:1b:
5c:98:e8:a7:45:71:64:17:af:75:b4:15:cc:90:89:
06:e1:ca:a0:75:b8:25:fb:1e:b3:00:18:48:d9:5c:
e3:20:f9:1f:1c:22:6d:d5:0d:10:3c:f7:dc:21:16:
21:95:f8:63:32:bb:46:01:c0:84:7b:2f:17:4a:c9:
8f:8c:87:a5:d6:78:95:5a:ce:22:cc:df:bf:1d:31:
1f:1b:91:fd:6c:c8:cf:85:ca:a2:ae:37:47:b4:f1:
fc:5e:ac:d2:17:c0:7c:36:31:49:aa:1b:39:96:c9:
a0:4f:96:23:d8:d7:03:88:32:97:9c:98:4d:e8:0c:
8d:aa:c3:89:8d:94:e6:46:7e:2d:fd:9d:ee:86:07:
e2:64:c3:a0:53:20:e4:de:7c:c6:08:24:c6:a5:1f:
30:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.161.194.0/23
Signature Algorithm: sha256WithRSAEncryption
14:c3:f5:b9:6f:34:72:b0:c3:2c:87:d9:cd:5f:5f:da:39:22:
77:4c:18:24:05:ab:ae:6f:ce:ae:e2:81:eb:ca:21:dd:19:96:
81:fd:e9:db:f2:62:88:4a:40:bf:7f:67:27:ba:d1:66:83:b4:
e9:d0:6c:eb:f9:81:61:c8:5d:db:78:26:2f:23:8f:1d:3f:02:
db:2c:2e:4b:b8:ec:6f:54:5a:67:f5:83:95:80:86:ba:3d:f6:
e9:67:d2:03:b3:69:62:34:62:68:da:36:d3:7b:40:d8:83:b0:
8c:57:d8:21:6b:4c:c8:d5:dc:ff:8e:79:8b:d7:93:e3:e5:52:
3f:26:1a:34:52:bf:5c:5d:c1:7a:0e:d2:02:d6:e9:cd:04:81:
d4:2e:1f:14:09:8a:c3:c3:60:14:77:bc:d8:8f:71:dd:e8:69:
dd:e1:40:82:b3:79:ea:2b:47:c2:4a:48:0a:18:05:29:08:7c:
fc:e9:01:0c:2b:38:7f:3e:72:ee:04:4a:65:46:39:1e:c1:f6:
83:6c:77:cf:78:2d:31:20:e7:e8:41:0a:47:f4:ca:93:ba:60:
89:18:c0:58:67:14:c2:3e:27:1b:7b:11:f2:46:3c:2c:0d:43:
cf:b1:c9:70:8b:13:79:76:4a:4c:b9:cc:86:d5:a7:0e:c5:50:
51:b2:fe:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:21:42 2025 by rpki-client