Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer
File: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer (raw, json)
Hash identifier: uMwPXtr6bGkMvar3e09HN/ip5Pqa3zUavwdv3wfAQUA=
Subject key identifier: 2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4045C62E552FA50D39E695824C606A9B5702DA29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft
caRepository: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sat 27 Apr 2024 19:28:34 +0000
Certificate not after: Sat 26 Apr 2025 19:33:34 +0000
Subordinate resources: IP: 103.169.2.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:45:c6:2e:55:2f:a5:0d:39:e6:95:82:4c:60:6a:9b:57:02:da:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 27 19:28:34 2024 GMT
Not After : Apr 26 19:33:34 2025 GMT
Subject: CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:e4:d5:f4:b0:13:dd:0f:7a:be:d2:e6:e9:
d2:a5:92:91:ca:b7:61:1f:38:03:1d:92:d0:e8:89:
3c:ac:b2:71:fd:76:b1:f8:c7:37:60:e2:8b:fe:ed:
ec:ca:a0:24:f6:80:2c:43:1c:ba:6e:56:9b:3a:5b:
c0:06:d4:4c:16:1d:59:71:75:23:d8:a9:39:38:b6:
09:d5:0d:aa:97:85:fa:b4:5f:c4:29:a5:53:bc:89:
03:32:b9:f1:7e:23:aa:58:a9:1f:7f:10:6f:cb:35:
e1:38:88:92:0a:07:6e:9b:ee:c8:f5:72:c1:5e:4a:
ad:e1:da:8c:11:cd:31:09:86:50:15:e9:7c:7e:a5:
6a:c6:9e:d8:64:a0:8c:a0:21:f4:ea:f3:d9:9a:7b:
2a:ab:01:da:b1:2c:68:78:c0:28:ad:8f:29:7c:1f:
56:20:3a:27:ac:cc:a8:29:7b:41:68:11:f1:06:38:
0f:1f:6f:7a:ba:0c:2b:e2:bb:f8:58:97:19:b0:32:
78:ef:29:8b:a8:d4:2c:7e:66:26:86:4b:a4:a6:9c:
97:8f:e4:af:28:a2:54:1a:2f:3d:a9:90:71:79:d0:
91:c1:33:33:32:89:3d:3a:89:cb:5d:04:a8:83:17:
f1:d9:d6:23:66:50:7c:78:bd:b1:e0:3f:1e:d1:80:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.2.0/23
Signature Algorithm: sha256WithRSAEncryption
25:29:4e:e3:f6:59:3d:07:bf:7e:b5:c5:4d:d3:ec:4b:f1:b6:
e5:a7:98:03:b8:b3:97:5e:80:c8:4a:67:98:f5:d5:f7:5c:6e:
cc:86:c7:1a:6a:06:2d:4d:cd:0f:0c:92:fb:a8:ab:25:54:93:
8f:22:d6:33:45:09:59:46:78:23:b9:5b:f1:f7:d7:a0:64:e0:
8a:78:4b:d0:8c:ae:f1:df:40:65:3a:b7:8a:b6:22:13:13:13:
84:85:1c:e4:76:13:b2:b7:b9:7b:02:6f:97:bf:3c:dc:5c:08:
fc:5d:a6:1e:ec:4b:43:8b:ff:a0:4e:a0:ea:33:fa:f9:27:b5:
fa:7e:48:c1:b2:42:e6:c7:42:d6:f1:8e:77:07:81:66:7c:ae:
b0:61:05:08:ee:f5:85:d4:fa:81:d1:b4:ce:c6:53:22:9f:2a:
26:78:cd:3d:50:d5:24:4a:34:1e:41:70:9d:55:18:35:34:6f:
e4:6b:36:ef:dc:36:13:0d:5a:14:24:24:1f:21:78:69:61:fd:
1c:b1:b9:b4:c1:7d:f6:fe:9a:ee:3c:48:ef:91:79:74:ad:76:
db:37:70:d0:4e:be:74:38:5f:4c:76:10:1c:66:d1:9a:7d:ed:
45:f5:7a:d8:a9:a1:8d:7d:b5:fe:61:53:6a:59:b1:2a:7e:11:
b1:49:7b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:51:43 2025 by rpki-client