Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer
File: 35AF7B054A8CC95835EC5A2F9275004D39521553.cer (raw, json)
Hash identifier: U8AscFQ1cf7smWymsqAvFs2Mca9I9pJPnLfoAHaCi7k=
Subject key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 29F1D7AAA6226267E62836C297795F9344324CA7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft
caRepository: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sat 02 Mar 2024 19:37:17 +0000
Certificate not after: Sat 01 Mar 2025 19:42:17 +0000
Subordinate resources: IP: 103.173.164.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:f1:d7:aa:a6:22:62:67:e6:28:36:c2:97:79:5f:93:44:32:4c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 2 19:37:17 2024 GMT
Not After : Mar 1 19:42:17 2025 GMT
Subject: CN=35AF7B054A8CC95835EC5A2F9275004D39521553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:43:c6:45:aa:ef:ff:72:39:a5:37:fb:b1:77:
f1:38:27:67:bc:8b:50:21:da:5a:97:77:d2:a2:72:
3e:ae:c8:27:dd:28:1a:35:11:41:ce:f7:bf:b7:04:
b0:94:b5:ed:eb:cb:d2:73:04:c8:a6:1a:38:de:bd:
8d:28:cd:48:8a:e6:64:93:5a:20:d3:9e:14:f1:74:
22:a9:35:4e:e6:6c:e1:c2:47:3f:02:a2:05:2e:f5:
4a:aa:0d:14:ea:a3:4b:8e:55:e7:19:27:d2:18:6e:
28:f2:18:91:2f:fa:7e:ba:58:df:9c:22:91:18:73:
1f:0b:cb:2e:a7:10:5a:5a:3f:7e:73:35:2b:fa:8f:
f1:5c:9e:ad:17:57:74:b4:88:45:07:00:72:4a:5d:
ea:c7:70:58:17:81:2d:8a:bb:72:c6:f9:b9:d5:53:
b3:d1:47:15:ca:9a:9c:39:df:67:af:4a:8e:2d:bb:
73:f5:51:60:41:6a:d7:93:c8:8f:b3:8e:83:e3:3e:
ad:89:7a:38:36:5b:8d:c6:00:ca:e3:c2:7a:07:2d:
4f:fd:2b:74:46:9e:90:3a:ae:09:d1:12:a0:8d:a4:
7d:5d:d4:52:aa:a2:a5:f3:96:29:e7:3f:82:1a:5c:
62:29:47:c8:a7:9e:29:98:f3:ad:19:5c:fd:c8:8e:
86:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.164.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:f8:a4:6c:ac:dc:70:be:5e:34:8b:0a:29:fb:49:eb:d3:ad:
0d:b8:45:cd:68:39:18:0b:e4:b1:b3:0c:40:7c:f6:30:0c:8a:
f7:62:6d:c8:19:1a:5d:2b:25:7c:97:9e:1b:f9:fd:13:cb:92:
25:66:b3:39:f4:5f:c5:8a:36:b0:28:92:3a:86:7c:5d:2a:98:
9e:21:89:fc:63:1f:9a:d6:23:34:8c:27:c6:d3:80:4d:b8:89:
5f:aa:9b:3d:4d:80:1a:02:38:b7:b4:22:c3:9b:cd:37:3b:f2:
21:6e:da:98:a0:f2:0d:74:9b:37:9f:ed:f5:fd:c3:98:2d:08:
2b:85:0b:a4:29:7c:aa:95:1d:02:b4:74:e0:6c:ff:8c:bd:64:
a5:0b:2e:24:cf:7b:60:bd:8b:c4:b9:51:26:e4:f6:32:07:6c:
98:fc:97:ef:71:66:2f:2b:13:04:b1:4d:75:22:f1:f9:c3:8c:
56:f7:31:ef:ce:b4:41:4f:b5:5a:43:41:e4:e8:1b:47:3a:b3:
da:79:65:34:d3:53:69:f8:ae:80:82:8f:5b:07:51:88:47:73:
d0:b4:8c:1c:5c:17:ad:79:49:04:c2:f4:b0:64:9d:a9:45:fd:
0c:4d:eb:ac:ac:a2:e1:b7:bb:e7:ed:e2:13:12:4c:8f:2b:a0:
75:5b:ec:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:06:13 2025 by rpki-client