Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer
File: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer (raw, json)
Hash identifier: cTSTgAuXmm4f4nAU3KkY2gLhGDgGBpR2bIaYwKGQUIg=
Subject key identifier: 3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2E5B4902AEAD44287C3AACF397CD29FD5BA190D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft
caRepository: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 20 Mar 2024 21:48:12 +0000
Certificate not after: Wed 19 Mar 2025 21:53:12 +0000
Subordinate resources: IP: 120.29.224.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:5b:49:02:ae:ad:44:28:7c:3a:ac:f3:97:cd:29:fd:5b:a1:90:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 20 21:48:12 2024 GMT
Not After : Mar 19 21:53:12 2025 GMT
Subject: CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:54:dc:07:68:c4:cc:99:6d:85:47:ea:bd:
fa:29:f0:30:57:d5:81:14:3e:9f:27:81:be:64:27:
aa:7d:45:f4:99:c8:e3:5a:4f:18:71:b4:84:54:b5:
a9:5e:7a:12:44:cb:50:5b:93:23:33:10:13:d4:8f:
9c:81:8a:21:8d:6c:aa:52:e9:e8:ea:19:a5:bf:20:
b2:07:c2:12:3c:dc:55:f4:75:5c:8b:4f:40:95:62:
59:14:52:2c:80:bb:7f:5b:ad:57:af:75:fd:a8:df:
70:e3:22:dc:c6:08:32:43:ed:36:23:dd:66:ba:0d:
0f:89:94:bc:73:b5:d7:55:a0:1f:7f:ae:94:26:81:
89:80:22:18:a3:45:73:09:3a:4e:ea:c9:c7:25:bf:
df:1b:71:48:ae:f9:bc:55:06:8c:c8:ac:47:52:98:
e5:ac:c5:85:70:b5:6e:30:51:63:12:95:68:a1:fe:
ba:47:ad:03:8e:fd:89:b9:73:7a:4a:c8:d0:a9:22:
d6:6a:0b:90:31:94:81:af:52:ce:13:4d:99:c8:b5:
dd:72:aa:35:02:29:37:ed:96:72:60:09:43:73:e3:
7a:c5:f3:97:71:a9:c5:5e:85:3c:78:94:fb:9d:f2:
fc:4a:29:46:d4:b1:0e:73:9c:42:2c:a6:a6:0a:a9:
27:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.29.224.0/21
Signature Algorithm: sha256WithRSAEncryption
85:f3:9d:7a:4d:b4:d8:12:e8:4d:2d:3c:dc:e5:6d:d6:f9:55:
19:86:60:62:18:f0:72:ae:ac:85:8e:cb:31:a6:b2:d2:38:4f:
99:63:8d:bb:c2:47:3c:91:0a:4e:39:98:3e:36:e0:f0:72:27:
07:8c:b0:e2:5c:11:c6:0e:ff:99:59:ad:11:0c:c6:dc:37:0c:
00:c4:49:b1:ca:97:ee:7c:e4:f3:06:62:54:49:33:18:5b:af:
dc:f8:38:77:0c:d5:be:19:81:0d:af:d1:68:41:f0:92:5d:1f:
71:98:18:44:1c:1f:cb:54:bc:45:6c:4c:ce:12:18:c8:cc:e8:
70:64:e5:1b:0a:87:45:56:46:94:9b:59:60:60:fa:f0:f1:b3:
c9:45:9b:f0:47:88:5c:c0:83:fe:ec:47:34:57:10:39:b2:f8:
f1:df:17:2c:7a:bf:4d:9f:6c:12:04:19:4c:01:59:d2:ce:84:
de:02:89:1c:7e:35:6c:c4:32:e9:6b:d7:c2:50:d4:fd:1a:6b:
2b:85:3d:9c:fd:00:29:5a:5f:6b:eb:35:5a:25:96:ad:27:2e:
70:4c:5b:ba:4c:08:01:44:f2:7b:58:19:f8:05:b2:33:fa:66:
11:75:aa:c3:a3:32:b8:75:34:6a:ba:ba:15:c2:34:58:0f:bb:
6a:46:56:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:10:27 2025 by rpki-client