Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer
File: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer (raw, json)
Hash identifier: 3sI0b1XwVErHNPR7IIQVwcpN6nFU6hysMdlRU9xjThQ=
Subject key identifier: 09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 01C3EE18BCBA3195953583F199550AD9630790DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft
caRepository: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 21 May 2024 07:27:34 +0000
Certificate not after: Tue 20 May 2025 07:32:34 +0000
Subordinate resources: IP: 103.143.194.0/23
IP: 2405:59c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c3:ee:18:bc:ba:31:95:95:35:83:f1:99:55:0a:d9:63:07:90:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: May 21 07:27:34 2024 GMT
Not After : May 20 07:32:34 2025 GMT
Subject: CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:0f:59:48:aa:dc:8d:1c:13:fa:e5:35:20:
e2:0e:d4:4f:ab:c6:ae:02:4e:bd:b3:d8:7f:02:96:
4b:fb:38:9b:dd:d8:2f:01:bc:69:ad:3b:4b:cb:4d:
f2:14:32:1c:67:bc:1c:27:37:e1:70:29:c8:5f:7b:
e4:e7:c8:8a:74:2f:5d:96:e3:05:2a:6f:76:ad:ce:
a3:f8:46:de:fd:56:bf:5e:ae:f9:1c:cc:fe:c3:54:
3f:12:3e:86:ff:cf:da:c6:3f:30:bf:f9:32:cf:12:
6c:1c:64:0f:b1:cf:71:b6:1e:7e:3c:70:24:88:47:
4c:c1:a4:94:7d:6b:e0:81:41:5d:f0:d9:28:13:63:
6d:67:5e:32:3c:92:69:d2:bb:34:59:73:e2:12:2a:
cf:d4:c4:8e:2c:68:3d:1f:0f:9b:2b:bf:05:b1:02:
4e:a0:0b:30:42:74:50:f8:cb:e7:dc:5f:1b:a5:77:
32:ba:1c:e7:89:fe:f3:e0:e8:ee:ae:7a:91:46:9c:
35:a3:f2:04:57:99:31:ca:3d:bd:c6:bc:38:54:dd:
7b:eb:46:b5:38:2b:08:e9:46:86:ce:d4:f3:96:fb:
1f:1f:fa:bb:0d:76:eb:73:fb:cc:22:54:cf:69:49:
c9:c5:39:c4:52:fd:e9:b9:78:35:95:04:b5:7c:11:
ce:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.143.194.0/23
IPv6:
2405:59c0::/32
Signature Algorithm: sha256WithRSAEncryption
11:ed:65:ff:34:56:71:59:34:65:14:81:c0:3e:56:c4:25:a6:
32:ff:c0:09:b9:ea:67:e6:fd:8f:83:26:ad:69:ab:91:19:83:
ee:2b:c2:c7:6a:d5:6c:55:93:03:e1:b0:1f:7b:18:79:ca:9a:
1f:2e:19:09:0a:56:27:88:06:1f:b5:c9:27:8d:ef:2f:c1:1c:
ea:69:08:d7:fe:68:d2:c4:c3:68:79:5b:d5:1f:54:d4:cc:31:
a3:8a:bc:2e:75:00:37:69:46:0d:e5:eb:10:76:94:08:f2:70:
98:68:27:45:c2:bb:e7:85:44:42:75:15:53:bc:20:97:97:ad:
b6:83:30:dd:cf:87:43:1b:4c:90:74:31:a4:1a:18:fd:11:6d:
5f:57:6e:93:5f:d0:b0:b9:e5:f2:52:89:ad:93:2a:8f:2f:16:
82:be:4a:9d:81:91:67:f7:04:cd:2d:b4:ee:d3:7f:ef:c5:c7:
71:7e:38:9e:34:55:6b:56:8f:f0:a8:b1:67:86:78:d0:c7:a5:
01:b8:23:7c:b5:69:99:0a:ca:95:3c:57:a2:ff:ee:2c:62:6d:
83:df:8f:47:a6:83:a1:d8:28:bd:32:2b:1a:9a:e6:a8:42:9a:
3f:ea:ad:e9:79:dc:02:5e:b9:1e:4d:40:26:0e:be:52:37:94:
24:3c:0b:0d
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIUAcPuGLy6MZWVNYPxmVUK2WMHkN4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyMTA3MjczNFoX
DTI1MDUyMDA3MzIzNFowMzExMC8GA1UEAxMoMDlGNThGNjQxQzVENDJCRDJEMjU1
N0ZGQTJFQTA2MUI2NkFDQkRBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMHeD1lIqtyNHBP65TUg4g7UT6vGrgJOvbPYfwKWS/s4m93YLwG8aa07S8tN
8hQyHGe8HCc34XApyF975OfIinQvXZbjBSpvdq3Oo/hG3v1Wv16u+RzM/sNUPxI+
hv/P2sY/ML/5Ms8SbBxkD7HPcbYefjxwJIhHTMGklH1r4IFBXfDZKBNjbWdeMjyS
adK7NFlz4hIqz9TEjixoPR8Pmyu/BbECTqALMEJ0UPjL59xfG6V3Mroc54n+8+Do
7q56kUacNaPyBFeZMco9vca8OFTde+tGtTgrCOlGhs7U85b7Hx/6uw1263P7zCJU
z2lJycU5xFL96bl4NZUEtXwRzq0CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFAn1j2QcXUK9LSVX/6LqBhtmrL2oMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9iMmUwNmY3Mi0xMzIzLTRmYmQtYjI2ZS05ZWQ5YTlhZGQ4ODAvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IyZTA2Zjcy
LTEzMjMtNGZiZC1iMjZlLTllZDlhOWFkZDg4MC8wLzA5RjU4RjY0MUM1RDQyQkQy
RDI1NTdGRkEyRUEwNjFCNjZBQ0JEQTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD
BAFnj8IwDQQCAAIwBwMFACQFWcAwDQYJKoZIhvcNAQELBQADggEBABHtZf80VnFZ
NGUUgcA+VsQlpjL/wAm56mfm/Y+DJq1pq5EZg+4rwsdq1WxVkwPhsB97GHnKmh8u
GQkKVieIBh+1ySeN7y/BHOppCNf+aNLEw2h5W9UfVNTMMaOKvC51ADdpRg3l6xB2
lAjycJhoJ0XCu+eFREJ1FVO8IJeXrbaDMN3Ph0MbTJB0MaQaGP0RbV9XbpNf0LC5
5fJSia2TKo8vFoK+Sp2BkWf3BM0ttO7Tf+/Fx3F+OJ40VWtWj/CosWeGeNDHpQG4
I3y1aZkKypU8V6L/7ixibYPfj0emg6HYKL0yKxqa5qhCmj/qrel53AJeuR5NQCYO
vlI3lCQ8Cw0=
-----END CERTIFICATE-----
Generated at Thu Apr 24 12:51:46 2025 by rpki-client