Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer
File: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer (raw, json)
Hash identifier: sflcshFn/dDo2IMEzulMJWzhbk/dzRibaLYxfy9DLZc=
Subject key identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 219990102FB1141963A1335C74995A406869BA0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft
caRepository: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sat 22 Jun 2024 23:23:23 +0000
Certificate not after: Sat 21 Jun 2025 23:28:23 +0000
Subordinate resources: IP: 103.231.112.0/22
IP: 202.8.28.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:99:90:10:2f:b1:14:19:63:a1:33:5c:74:99:5a:40:68:69:ba:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jun 22 23:23:23 2024 GMT
Not After : Jun 21 23:28:23 2025 GMT
Subject: CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:ef:a3:2c:2a:0f:53:77:11:cf:2e:17:17:
da:17:b4:5b:d7:ff:63:63:28:4a:82:ac:64:80:94:
4b:6b:dd:8d:74:5a:24:cf:92:a6:68:b2:64:c8:76:
fd:1a:29:af:28:82:bb:3e:b4:08:ec:7e:9b:c4:68:
1b:51:f7:01:cc:79:6d:56:90:1e:8b:17:e6:4c:47:
86:19:98:a8:f1:9e:e1:43:8b:22:52:b6:17:18:eb:
09:53:1a:60:6d:79:08:1b:46:dd:0f:54:32:c1:26:
b2:80:c5:76:b7:41:9a:24:0f:84:60:fe:44:dd:85:
29:39:75:44:d5:60:2b:39:91:0f:3a:ea:80:f4:04:
4f:00:97:8b:77:6f:3c:76:03:69:54:f0:42:5a:aa:
e9:e2:55:1f:29:b7:60:5f:30:cc:95:02:6b:10:eb:
e1:00:2b:45:fd:42:f3:83:5d:da:0c:86:e5:f4:bb:
02:1a:fb:05:a7:04:c4:ba:b1:9e:26:d9:6c:d3:c2:
10:c8:ce:99:5e:f9:df:4e:df:bf:df:00:50:4f:cb:
d8:86:3e:30:26:b5:7b:80:89:8d:dd:6a:78:8e:70:
af:7c:ff:bd:a2:f3:7a:29:ad:5e:13:5e:92:e7:38:
57:b9:de:22:37:12:20:ce:dd:76:83:27:5b:7e:72:
e8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.231.112.0/22
202.8.28.0/23
Signature Algorithm: sha256WithRSAEncryption
24:02:18:7e:95:77:90:b9:75:6f:4a:d8:29:cf:de:ad:38:f9:
48:af:df:fd:0f:4e:9d:d4:57:e8:b6:aa:a5:a5:cd:e1:3d:7a:
a6:0b:00:f0:29:d9:a5:d9:cb:01:0d:33:c7:da:4d:ac:1a:51:
f9:8c:d2:54:4a:16:a5:2a:ee:2a:8f:96:a7:ae:43:40:b2:82:
6f:1e:ab:a4:e1:2e:0d:c9:71:e1:a4:ba:e2:26:da:65:eb:4d:
78:2a:6a:a8:6d:96:96:b7:29:3e:36:a7:5f:8c:ab:28:97:d2:
48:9b:e6:1c:bd:ce:42:38:b8:f6:5d:b5:9c:a7:34:b0:2d:ea:
2c:c3:f4:d4:51:77:bb:b3:18:73:fb:97:91:f4:55:eb:01:22:
20:b2:b0:5b:f5:f2:fe:46:db:b9:37:2b:73:d1:04:0d:f6:ab:
19:a8:4a:bf:6d:f6:23:09:60:96:5d:22:34:c8:b3:9a:45:5c:
1c:2b:a1:a1:da:17:67:63:0d:d7:d0:ba:63:e8:ab:e4:77:e0:
5e:74:99:e5:bb:f5:54:69:05:5a:31:61:1b:c3:57:0f:46:53:
9e:3c:de:74:46:22:62:2d:fc:df:e2:6d:8b:b6:b0:cf:af:8c:
74:cc:3f:d8:da:f6:8f:10:0c:d0:bd:1f:40:82:36:30:70:d0:
01:02:63:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 24 13:02:41 2025 by rpki-client