Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer
File: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer (raw, json)
Hash identifier: AU14+en75Xxh7acFmCZEWtZxjA1BofTSMsbByMbCqAw=
Subject key identifier: 3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 033FA9A23C08B1F0173D16659498952DEC52F3F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft
caRepository: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 13 Mar 2024 03:20:16 +0000
Certificate not after: Wed 12 Mar 2025 03:25:16 +0000
Subordinate resources: IP: 203.153.96.0 -- 203.153.119.255
IP: 222.165.192.0/18
IP: 2404:f600::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:3f:a9:a2:3c:08:b1:f0:17:3d:16:65:94:98:95:2d:ec:52:f3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 13 03:20:16 2024 GMT
Not After : Mar 12 03:25:16 2025 GMT
Subject: CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:2c:bd:18:90:02:4b:19:d3:11:19:8e:29:
1f:30:bf:69:b3:83:55:a6:58:c7:77:5f:a6:93:ee:
cb:e6:8c:a9:d2:b5:a9:6c:68:f9:74:9f:8a:a8:90:
60:85:c3:c5:1a:95:ee:2c:d8:fb:b3:e3:2b:66:b1:
ca:a3:7c:22:dd:74:83:f9:55:29:40:62:35:13:79:
e7:86:80:85:4b:f9:f4:29:f7:39:1e:58:5f:b9:78:
89:34:3e:8f:c8:36:aa:b3:ca:c5:a9:5a:8d:d4:19:
f5:8e:28:b6:df:ec:b3:0b:6b:5b:43:a9:7b:01:bf:
d8:1b:f3:db:1f:51:c9:8b:d6:8d:52:4e:73:44:e1:
58:4b:58:04:13:ad:5b:a2:86:62:cd:fb:5a:27:25:
2a:c9:65:ae:76:a8:2f:22:13:fd:70:ea:27:ea:ba:
5e:70:b2:14:84:a6:5c:5e:1c:ee:64:db:82:42:74:
8b:13:57:c9:e1:eb:ad:47:c3:02:fe:9c:80:45:c6:
92:a1:bf:e7:de:9d:3a:ad:ad:ea:8e:bb:90:36:50:
38:3d:de:99:53:14:33:f3:cc:df:4d:15:ad:53:78:
38:76:9f:00:69:eb:73:11:80:5f:5c:3c:25:45:2b:
04:3b:76:b3:23:b7:67:e9:98:f3:26:eb:7f:c2:2d:
b0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.153.96.0-203.153.119.255
222.165.192.0/18
IPv6:
2404:f600::/32
Signature Algorithm: sha256WithRSAEncryption
68:4f:d9:45:55:3a:be:f9:a8:0e:7b:08:46:65:ed:b4:62:fa:
c5:72:cb:9e:e2:52:86:d6:55:15:dc:b6:ec:b0:ae:4a:cc:9e:
77:65:e1:30:84:c1:dc:94:9a:fd:c4:b2:7f:ad:55:06:9d:91:
97:97:d8:60:2d:3e:de:db:d9:f5:24:f5:b7:d2:b3:1e:f8:7b:
9c:f2:16:19:3f:c8:d3:41:17:de:3b:15:a1:95:4e:38:32:15:
d8:ba:88:60:14:b5:9b:3d:dd:70:dc:45:f7:f3:9f:0c:ef:73:
e1:30:f5:1d:57:46:1c:c0:93:48:53:0f:6e:93:2a:01:0b:27:
ab:2a:8a:58:d8:c8:75:ed:c6:be:b2:43:af:c0:8c:18:8a:04:
8a:c9:b7:06:4b:d9:38:5f:a4:df:d8:6e:eb:ce:d5:9e:8e:f7:
b4:1e:dc:bc:98:c3:e3:43:fd:08:66:8a:97:81:9b:a7:7b:3a:
bd:b1:6e:70:15:bb:1e:43:91:32:c3:04:b7:dc:b1:07:89:48:
36:ea:46:78:a2:41:6e:2b:b9:7b:22:ae:2d:42:14:c3:ad:f4:
48:eb:37:9b:c7:3c:e6:88:2a:16:2e:ae:fe:cb:6a:f5:9c:9a:
b4:ae:0d:57:46:be:6f:90:ee:f9:b4:91:8d:72:e2:0d:f2:8a:
a5:7d:ba:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:55:31 2025 by rpki-client