Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer
File: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer (raw, json)
Hash identifier: DdgHaUwjyrpfXK0dEyiQbloyLCmJmvYz1UD2t5w8UzE=
Subject key identifier: 1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6335EEE8443DB47B2665C7672A2A5D6AF2035D84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft
caRepository: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 09 Apr 2024 10:47:53 +0000
Certificate not after: Tue 08 Apr 2025 10:52:53 +0000
Subordinate resources: IP: 103.107.176.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:35:ee:e8:44:3d:b4:7b:26:65:c7:67:2a:2a:5d:6a:f2:03:5d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 9 10:47:53 2024 GMT
Not After : Apr 8 10:52:53 2025 GMT
Subject: CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:15:79:5b:05:f4:a3:ff:d2:3d:cc:f5:e4:91:
38:76:aa:f1:14:b8:bc:cd:9f:6f:dd:24:61:6d:48:
d8:77:43:be:11:bf:bc:85:40:e2:e0:9c:ab:90:4d:
f5:71:50:b5:66:0a:a2:46:d2:a8:13:2f:71:64:21:
b8:28:b1:b6:42:a3:f1:5e:6b:f5:98:05:c8:39:5f:
b9:7a:3b:ea:fb:ee:42:f0:56:55:b4:36:a4:a8:6d:
1a:2a:57:54:bf:c8:b4:20:39:bc:b1:51:44:d5:f8:
f0:60:98:6a:68:be:8c:cc:44:5b:ca:50:7c:cd:99:
c4:53:2a:82:75:93:c0:2b:59:72:46:c6:62:6c:00:
2d:bf:7b:c5:10:be:70:6c:e6:60:32:f3:6c:b9:ce:
e3:bc:8d:e5:89:ae:c5:5f:77:2e:e3:0b:9b:fb:f0:
13:fb:ae:86:c9:69:65:65:f8:7b:ba:31:08:f1:9e:
29:e7:3f:54:2b:4f:ec:44:2b:fc:68:ce:69:80:32:
aa:ff:fc:e3:42:1f:64:7b:50:18:8c:ad:4b:d7:13:
d0:64:88:10:dd:b2:91:de:14:5b:bb:6d:5f:90:b7:
94:19:31:d9:e2:ce:3e:c7:3e:49:be:30:d5:40:4a:
61:e2:31:58:4c:10:7b:1d:b3:ac:c2:3f:36:f8:0d:
74:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.107.176.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:2b:6f:28:7b:a1:f5:ab:4c:cd:37:42:e7:54:e1:43:a2:db:
65:25:b0:c6:11:81:71:bf:c5:ba:d6:86:13:0a:fd:7a:e6:27:
a7:bc:3a:fe:72:4d:18:a7:d5:5b:d6:73:2d:cd:17:a1:db:89:
58:22:ba:ca:f4:43:bd:14:b2:a7:04:66:e6:bc:d1:a3:f3:be:
a9:c2:93:e9:65:03:9d:5f:72:10:cf:de:d5:3a:f2:1c:0c:88:
ed:6b:e3:bf:fd:ef:c5:21:28:70:fe:67:71:bb:d8:57:60:7c:
d8:09:90:78:a0:85:5b:8b:df:6f:69:06:df:67:63:0a:69:7e:
cd:ab:4a:b5:79:2b:89:50:12:96:7c:1c:5b:33:1d:a1:b1:ab:
6f:bf:4b:f1:a0:84:06:85:8a:79:0d:ac:76:31:15:1f:14:6e:
e8:a2:16:e8:6a:f8:ef:61:91:f9:45:17:d9:5c:ec:d1:7a:79:
72:6b:f7:73:f9:1b:7e:af:5d:5b:84:a3:7e:94:26:93:3a:43:
33:76:b0:8e:10:4a:f3:4b:92:89:4e:0d:e4:dd:d0:d4:e1:77:
c3:b9:2c:18:d7:ec:1c:81:0f:91:0e:86:75:63:4d:6c:1e:8a:
56:3b:2d:c6:9f:e4:26:62:07:8b:d3:f1:67:a5:d0:72:dd:65:
49:45:39:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:26:25 2025 by rpki-client