
Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer
File: 29692979765B670997413579D7BF5663C05BBD1A.cer (raw, json)
Hash identifier: TawDVkgj8ouxX+4+R8+DEKQfTnPraHeFcpmuAo0ACvI=
Subject key identifier: 29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0F5CD91C316CF5B9F30CCAEA2C20EEB3C277A180
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft
caRepository: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 19 Dec 2024 22:48:33 +0000
Certificate not after: Thu 18 Dec 2025 22:53:33 +0000
Subordinate resources: IP: 45.251.72.0/22
IP: 103.9.124.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:5c:d9:1c:31:6c:f5:b9:f3:0c:ca:ea:2c:20:ee:b3:c2:77:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 19 22:48:33 2024 GMT
Not After : Dec 18 22:53:33 2025 GMT
Subject: CN=29692979765B670997413579D7BF5663C05BBD1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ad:c7:d2:7e:18:9d:58:ac:49:18:c0:3d:9d:
59:70:cd:b0:70:de:f2:1a:d3:0e:64:ca:cc:1d:03:
12:39:af:ca:9c:42:9b:cc:7a:36:f2:5d:3f:6c:1f:
c6:d7:ac:bb:6e:ee:25:23:f6:21:01:af:8f:90:5e:
66:4a:28:94:ce:c2:c7:1b:e0:1f:92:48:d4:12:77:
4d:25:f8:50:cf:26:98:ed:f6:dc:70:16:73:1b:6d:
d9:45:b8:46:71:d0:b9:29:25:eb:ff:e5:41:23:0a:
f4:ee:dd:af:9e:a1:7a:fd:d5:10:c3:4f:33:62:52:
78:a3:e5:9e:86:3b:1a:fc:8f:d7:d4:f1:a3:5c:3a:
91:df:d4:97:17:87:0d:2c:1b:a0:da:b5:ab:24:4b:
47:80:a6:a1:1f:47:8d:ef:33:9f:6d:54:66:0d:ef:
b2:21:04:61:c4:8b:b8:a1:2e:ab:49:56:4e:8a:24:
9b:dc:a1:f2:35:14:f4:9a:25:2f:1f:98:97:56:fb:
ed:30:8e:15:f2:38:8a:d3:72:ff:69:23:ee:fe:37:
4a:9f:02:48:9d:eb:f3:b4:d8:3e:c7:cd:d5:98:54:
24:5b:f6:7c:af:f2:f0:91:04:95:15:25:5f:be:16:
7f:74:9b:dc:fd:e5:be:78:e0:5e:d3:1c:aa:b0:28:
f5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.72.0/22
103.9.124.0/22
Signature Algorithm: sha256WithRSAEncryption
16:2f:18:d9:04:2d:17:70:65:99:f7:a1:31:f3:28:1b:64:ca:
0a:4a:95:0d:ac:38:ed:7b:06:3e:28:7a:0d:2f:df:8d:97:a4:
7f:13:61:bf:0b:59:48:f7:37:84:c2:7f:ec:c4:fc:ce:b3:e4:
5a:85:ed:37:82:14:b2:7d:86:d5:16:d6:f2:79:f3:e2:91:6f:
29:f1:99:4e:d6:e8:48:89:6c:d7:2e:23:cc:33:5f:5c:8e:bf:
81:36:4e:da:fa:26:fa:b5:fb:18:45:7a:f5:fa:a3:22:bd:d8:
56:6c:27:e7:77:5a:19:6d:1b:9b:8f:d5:dd:e8:3a:ba:b5:46:
6c:61:8a:a4:08:2c:f8:27:4d:fd:bd:9a:ab:3e:ef:9a:4c:2a:
83:55:e0:d0:68:1e:02:cf:bd:83:e0:13:77:1e:55:ca:fc:06:
a1:0f:b0:64:64:13:8e:ac:46:3a:1a:b8:84:36:2f:75:b9:8c:
b0:4f:e8:d9:c5:b4:9e:ad:75:74:d4:1d:65:e6:4f:44:f2:6a:
22:6b:ab:9d:d1:06:3e:75:f2:62:5c:16:90:29:10:e5:3b:3f:
95:52:45:ea:a5:5a:98:7e:6a:f3:62:17:f2:a2:c1:da:de:31:
9a:26:fd:87:43:b9:91:f9:cc:2e:10:55:80:88:49:29:8d:0c:
fe:0c:0e:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 24 13:03:47 2025 by rpki-client