Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer
File: 3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer (raw, json)
Hash identifier: 7hTeGpXz6qs5RjKjweHBui+ZI0uUmXyhhxvLrt5LKpE=
Subject key identifier: 3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 34CEED6AAED89366BB124EFE4860A962191C931E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft
caRepository: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 23:52:21 +0000
Certificate not after: Wed 02 Apr 2025 23:57:21 +0000
Subordinate resources: IP: 103.167.20.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:ce:ed:6a:ae:d8:93:66:bb:12:4e:fe:48:60:a9:62:19:1c:93:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 3 23:52:21 2024 GMT
Not After : Apr 2 23:57:21 2025 GMT
Subject: CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:69:5b:21:ae:03:13:ae:ac:e2:6a:7e:a7:2e:
d5:7f:71:1e:42:ef:7f:57:59:67:41:85:5b:22:a1:
77:fc:96:2a:31:ce:55:27:63:c5:78:7a:96:e2:78:
4a:2c:63:51:b6:92:65:cd:83:e5:36:91:91:53:64:
71:77:e6:e3:b0:0b:d3:58:98:c7:51:94:65:36:7c:
7d:71:1e:73:18:60:39:3f:c2:3d:af:9f:93:d6:04:
a7:9d:31:69:9b:3b:be:1e:5d:88:bf:47:96:d2:a2:
23:49:bc:6f:d1:7e:a8:0a:8d:16:4f:ed:ed:9f:c5:
41:3a:ae:88:5e:e0:de:fd:11:fd:17:ac:63:8c:4f:
7d:a5:9f:c8:47:78:3a:0b:75:e1:7a:4e:11:93:9b:
9f:34:73:f2:ed:02:5b:db:52:ee:2d:1e:12:68:f1:
4f:91:4e:4d:68:33:b1:7f:d1:6f:61:af:0f:7e:28:
10:4a:63:96:03:ee:ad:9f:ea:cc:c9:7e:e5:d4:e0:
a8:9e:35:27:ad:e8:87:1c:a7:ef:1d:3f:18:e3:6b:
bd:29:6e:4f:b5:8c:01:cf:14:76:50:e0:c7:f5:0f:
b8:5a:29:d2:df:b4:d3:06:06:73:36:88:89:f8:19:
98:fe:fa:e9:aa:10:da:36:d6:92:1f:36:46:cc:99:
de:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.167.20.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:78:a4:4f:10:e6:00:bf:71:4d:b4:ad:82:6e:33:ad:ce:d7:
f1:61:8f:14:2e:bc:93:9f:59:ae:6d:36:8a:33:8f:d5:49:ad:
39:18:15:c7:37:7a:ea:11:99:c2:ce:22:8a:5b:60:d2:53:0f:
43:81:bc:85:89:5d:f4:aa:80:2b:f8:36:b0:1f:ee:9d:72:c5:
7a:5e:88:55:3a:c6:59:bf:6e:02:0d:b7:c9:91:21:01:f3:d1:
0d:64:7c:48:72:ec:bb:77:09:a8:99:df:a4:35:33:a7:73:f8:
d9:9e:90:d1:bc:20:cf:0d:a1:1b:c9:f5:09:35:21:93:3a:a6:
5a:e4:98:c5:dc:1d:60:7c:be:18:5d:36:3f:39:9a:81:58:f2:
37:84:f7:c2:dd:d3:85:fe:70:70:b3:10:3b:bc:da:f0:fa:06:
d6:1e:39:51:16:3d:58:e6:00:ba:2b:69:02:e3:c0:85:c2:00:
e7:76:5e:15:e9:a3:29:79:f1:9d:e9:90:ea:03:f9:da:ff:25:
d3:15:1c:85:5a:c2:ed:23:44:0d:9b:8b:17:f6:7d:6d:c7:2b:
57:c8:c7:37:1f:93:8f:b5:47:1c:de:08:f1:7d:ed:21:76:4e:
ea:67:e4:fc:8e:62:c3:59:74:97:5e:23:fe:b1:1a:7d:fe:7e:
81:56:16:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:19:44 2025 by rpki-client