Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer
File: 3FFB3838E6BD431731306308CFEC299A86723365.cer (raw, json)
Hash identifier: 26VRUV41SFV2OZt1DBrVITMTBXU6c9owmdXqy+IzWYQ=
Subject key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5B1C59F2FB723883C56E54D1EF0F24F0863DC80D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft
caRepository: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 06 Mar 2024 10:42:14 +0000
Certificate not after: Wed 05 Mar 2025 10:47:14 +0000
Subordinate resources: IP: 103.96.144.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:1c:59:f2:fb:72:38:83:c5:6e:54:d1:ef:0f:24:f0:86:3d:c8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 6 10:42:14 2024 GMT
Not After : Mar 5 10:47:14 2025 GMT
Subject: CN=3FFB3838E6BD431731306308CFEC299A86723365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:43:8e:39:f0:9c:56:0c:31:ff:4e:15:59:d9:
95:7d:63:e0:7d:ce:4a:bc:8b:eb:b8:00:a2:9d:72:
19:20:62:18:dd:bc:30:15:52:37:62:05:12:bd:48:
25:cb:43:19:48:0c:e6:8a:95:44:52:b3:69:15:b9:
7a:2d:01:6f:87:21:f0:19:84:53:fd:03:61:03:31:
15:8f:d7:ee:9a:aa:2f:3c:29:ea:40:95:a8:56:4f:
fe:d0:d1:58:81:68:a1:a1:85:99:1e:59:b8:ef:75:
41:65:1f:77:d8:44:66:c5:4b:77:67:c9:ec:17:92:
f8:2a:b2:b9:cd:1a:46:f1:7d:f6:55:ba:c7:fb:14:
16:31:2f:01:3e:15:c8:5c:da:cc:49:b4:cb:56:2c:
59:17:6c:25:72:06:b2:97:fe:1d:33:02:1b:a9:7a:
ec:d7:2c:c1:21:3c:31:52:3f:cd:d5:28:01:25:f7:
a8:c8:60:2d:f9:08:3b:df:15:86:fa:40:6d:3b:d1:
9c:f9:dd:29:e8:2e:7c:f0:1e:1d:79:4d:38:a6:10:
c1:c3:e0:5d:d0:76:ec:eb:d9:00:24:ca:1e:39:0c:
88:78:64:02:83:1a:67:3c:ce:52:19:4c:56:7e:65:
b6:95:2c:4f:c5:4d:a4:51:f6:f1:49:21:08:87:04:
c6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.96.144.0/23
Signature Algorithm: sha256WithRSAEncryption
18:df:55:b8:68:37:1a:9c:f2:13:eb:4f:26:56:9a:f7:27:eb:
ad:97:67:80:79:cd:59:20:25:b2:50:49:06:a8:ad:18:c1:4a:
27:fd:62:8b:81:f8:d5:dd:92:4c:16:9c:8a:aa:9d:5a:eb:a4:
5c:e0:49:f6:55:ce:2d:ad:00:76:86:29:6f:62:56:b3:1d:c6:
34:87:6a:df:63:09:3c:a1:e8:c1:09:ff:08:fb:a9:8c:8d:f6:
1d:99:f2:11:73:64:5d:bc:e7:f9:39:19:cd:a9:e6:4a:d7:63:
6d:77:b5:78:47:8d:49:74:0e:a6:bf:c4:8c:60:96:91:5b:7f:
d0:35:67:3f:cb:bd:c4:ff:9c:5c:bc:b1:9d:50:b6:1a:ff:41:
62:6c:53:3f:9b:88:06:ee:04:97:cb:98:d1:41:1d:51:ad:b6:
4d:a9:10:97:80:29:f7:b5:a9:10:2b:81:63:fd:58:77:ee:18:
a1:7c:29:c2:61:84:88:2c:1a:2a:c6:7b:bc:71:56:46:77:0f:
f1:00:87:eb:c1:43:56:c5:16:14:74:20:89:a0:fd:49:f8:7f:
5a:15:d2:01:f2:3b:7f:40:d8:17:83:9c:1c:bb:9c:59:b5:3d:
11:21:36:75:c0:cb:71:3c:ba:37:86:19:44:68:df:ea:a6:c2:
2d:0e:f6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:15:17 2025 by rpki-client