Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer
File: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer (raw, json)
Hash identifier: Yf2cMMSPifRntXljsqyx31Wf91hTThP2d1+/66lw+ic=
Subject key identifier: 29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 33C5CDEC9F2B04CE94A704CB8680BA152E49FE93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft
caRepository: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 31 May 2024 13:49:47 +0000
Certificate not after: Fri 30 May 2025 13:54:47 +0000
Subordinate resources: IP: 27.124.74.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:c5:cd:ec:9f:2b:04:ce:94:a7:04:cb:86:80:ba:15:2e:49:fe:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: May 31 13:49:47 2024 GMT
Not After : May 30 13:54:47 2025 GMT
Subject: CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:7e:24:68:6c:34:08:aa:6d:0a:62:aa:ba:
45:47:31:de:e5:6b:dd:25:e3:8d:aa:68:bb:d2:68:
68:da:9e:11:05:32:a6:93:3a:8f:77:29:c5:f4:89:
7a:c1:16:ed:c0:2a:35:f2:1a:ba:84:ec:56:53:ed:
f6:26:dc:c4:d1:92:40:d6:0e:49:e1:37:ba:80:e6:
54:f1:62:37:5e:ba:cb:8b:78:6c:ca:e0:2b:84:c5:
6f:aa:42:c9:42:39:27:e4:90:ad:7c:d0:9e:d1:c6:
48:3c:0d:ed:05:26:a4:a3:45:26:bf:9c:34:02:73:
cc:43:4e:a6:7e:fe:f7:bf:91:fc:97:cb:db:c0:c5:
a2:0d:5d:f6:36:4c:4c:94:2f:7b:20:cd:6b:1e:77:
23:6b:f2:c5:84:ca:72:a4:04:44:5e:7f:cc:a4:c9:
68:58:f4:88:fb:21:fc:ba:fa:89:96:93:a4:4d:b2:
3f:88:e1:f5:dd:4d:14:27:81:22:0d:8c:ab:79:31:
8f:44:da:57:c1:19:02:69:76:f3:d0:de:03:4d:0c:
fd:95:c7:1f:94:5d:79:c7:88:07:b0:52:5f:dc:f2:
d5:5b:fe:e2:9a:4b:7c:3b:83:af:d0:84:fb:47:59:
df:9f:fd:02:83:59:1a:6e:62:46:e2:01:d9:07:ae:
ae:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.124.74.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:18:b3:91:22:54:2b:a1:ef:80:21:bd:b8:da:9c:29:21:0c:
ae:5f:cc:00:eb:db:e8:e5:e7:e6:c8:bf:db:76:5e:aa:e0:f5:
18:fc:27:62:48:b9:be:63:79:19:ed:63:d8:2a:d0:dc:6e:c0:
ea:39:60:96:39:88:4a:75:86:cb:e5:6f:56:3f:a2:6f:ed:72:
0b:48:b2:67:7f:35:e4:ab:90:79:75:9a:98:c7:62:95:31:75:
a5:8c:7c:fa:7a:a0:81:2a:57:d7:cc:d6:51:01:bd:e5:5a:f5:
63:f5:be:b6:c3:7e:94:fe:10:92:ef:6c:c7:9b:1b:1a:a4:14:
f3:13:3e:11:68:ca:e5:32:36:e2:0f:ea:bc:3f:0a:70:74:1e:
de:32:f3:a8:01:9d:9d:f2:d7:7d:5b:84:5c:b7:e6:6d:54:c8:
81:95:97:3e:ec:9b:ae:94:47:be:7d:f1:c7:af:5d:28:56:5a:
fb:65:de:10:56:37:41:26:55:ed:4e:ea:81:88:54:fa:29:79:
f3:17:43:db:16:ec:d6:5b:5f:32:49:e1:26:1c:ac:70:27:23:
e9:8b:24:72:7d:67:51:40:56:9e:45:06:e4:12:9c:37:26:b4:
9b:ed:4b:a3:1a:02:3d:cc:11:3e:f9:cb:f3:b5:75:e1:2d:b6:
33:22:8d:b0
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUM8XN7J8rBM6UpwTLhoC6FS5J/pMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUzMTEzNDk0N1oX
DTI1MDUzMDEzNTQ0N1owMzExMC8GA1UEAxMoMjlDMDY0MEREOTA3NkRDMDRDRjhB
MzkwRUE3M0RGQzBFMEU3Q0Y5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK9xfiRobDQIqm0KYqq6RUcx3uVr3SXjjapou9JoaNqeEQUyppM6j3cpxfSJ
esEW7cAqNfIauoTsVlPt9ibcxNGSQNYOSeE3uoDmVPFiN166y4t4bMrgK4TFb6pC
yUI5J+SQrXzQntHGSDwN7QUmpKNFJr+cNAJzzENOpn7+97+R/JfL28DFog1d9jZM
TJQveyDNax53I2vyxYTKcqQERF5/zKTJaFj0iPsh/Lr6iZaTpE2yP4jh9d1NFCeB
Ig2Mq3kxj0TaV8EZAml289DeA00M/ZXHH5RdeceIB7BSX9zy1Vv+4ppLfDuDr9CE
+0dZ35/9AoNZGm5iRuIB2QeurnMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFCnAZA3ZB23ATPijkOpz38Dg58+aMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by80ZGFmOWYwZi00ZmIxLTQwYzAtYjM4MC01OWEzOGRiYzlhMTYvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRkYWY5ZjBm
LTRmYjEtNDBjMC1iMzgwLTU5YTM4ZGJjOWExNi8wLzI5QzA2NDBERDkwNzZEQzA0
Q0Y4QTM5MEVBNzNERkMwRTBFN0NGOUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAEbfEowDQYJKoZIhvcNAQELBQADggEBAE0Ys5EiVCuh74AhvbjanCkhDK5fzADr
2+jl5+bIv9t2Xqrg9Rj8J2JIub5jeRntY9gq0NxuwOo5YJY5iEp1hsvlb1Y/om/t
cgtIsmd/NeSrkHl1mpjHYpUxdaWMfPp6oIEqV9fM1lEBveVa9WP1vrbDfpT+EJLv
bMebGxqkFPMTPhFoyuUyNuIP6rw/CnB0Ht4y86gBnZ3y131bhFy35m1UyIGVlz7s
m66UR7598cevXShWWvtl3hBWN0EmVe1O6oGIVPopefMXQ9sW7NZbXzJJ4SYcrHAn
I+mLJHJ9Z1FAVp5FBuQSnDcmtJvtS6MaAj3MET75y/O1deEttjMijbA=
-----END CERTIFICATE-----
Generated at Thu Apr 24 13:02:37 2025 by rpki-client