Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer
File: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer (raw, json)
Hash identifier: wRRyPcpbiaLcZleRRUXdNm+ta+PvImxLhln8Hg27p1s=
Subject key identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5F7243B4FE21A53CE21F4ED813E881AF8AF7EC7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft
caRepository: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 19 Jul 2024 00:33:08 +0000
Certificate not after: Fri 18 Jul 2025 00:38:08 +0000
Subordinate resources: IP: 103.160.68.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:72:43:b4:fe:21:a5:3c:e2:1f:4e:d8:13:e8:81:af:8a:f7:ec:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 19 00:33:08 2024 GMT
Not After : Jul 18 00:38:08 2025 GMT
Subject: CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:93:e2:32:46:25:43:6f:71:57:b1:a4:87:
8d:4a:5c:b6:07:a5:30:aa:20:16:f4:68:7d:73:43:
3a:45:95:d3:ed:b6:ee:41:37:46:72:d5:3a:d8:7a:
90:f7:aa:4f:4a:f3:5d:fa:d7:3d:65:e0:7a:fd:67:
d6:4c:5e:e2:2e:4e:b7:90:ed:93:0a:1f:1c:fd:d3:
1c:e6:85:eb:fc:e3:77:89:c7:69:1f:c2:f4:7d:2d:
a9:2d:81:21:97:bb:c6:7e:2f:83:0e:8a:54:46:37:
ec:9d:46:39:d2:d6:96:9b:ab:b6:c0:f8:98:96:d2:
a6:23:68:35:93:80:f9:b1:da:4e:a4:86:a4:ad:d7:
44:d7:d4:40:f6:dc:3b:d7:47:00:ba:ad:38:af:6f:
8a:50:85:ed:b6:fe:13:12:af:f4:63:c2:a3:0b:a1:
dd:04:14:78:af:8c:e1:36:b8:8b:2b:56:59:1b:47:
8f:00:fa:eb:3a:bf:7a:71:45:1a:a6:48:8d:15:99:
38:dd:8c:83:5d:f8:1c:e7:2a:16:ea:a5:44:52:2b:
76:7e:02:31:88:bb:41:32:e0:3a:c4:6e:3d:c9:5b:
b4:ca:8c:8f:25:2c:d6:25:d2:3b:59:6e:cf:0b:fe:
1f:74:53:30:75:39:3b:d1:33:66:52:1b:3d:1f:8b:
5a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.68.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:84:0d:c0:99:47:b9:89:8a:1f:d9:ee:e9:91:bc:73:d2:43:
37:fc:13:fe:9f:a9:8d:c9:9b:23:96:cc:e7:c5:60:b5:42:ef:
f8:31:1d:0d:bc:e3:04:58:8d:09:20:2d:7f:e9:5a:69:ce:80:
f1:35:73:73:80:c8:93:aa:ab:e4:09:f1:be:e1:be:5f:66:b5:
c3:f7:7b:74:69:1c:bc:bf:c2:04:5c:dd:fa:24:29:60:5b:75:
ca:70:7b:12:73:75:8c:27:f3:0d:59:05:a1:80:06:65:1a:72:
99:83:43:53:66:12:66:80:d8:af:b3:c5:d5:af:b6:80:ae:00:
e6:73:b8:0c:36:fa:cf:25:ba:65:06:e7:f6:a3:f7:96:39:6f:
7c:00:9f:bc:d5:dd:5a:dd:44:3b:2b:1c:55:9c:51:bd:91:48:
f2:c3:74:7c:e1:83:52:0c:89:55:a9:df:bd:db:6f:ce:f4:31:
46:85:27:74:ea:b8:e7:3c:f7:db:ec:71:39:d3:40:13:ec:d3:
3f:5f:0c:0a:d3:8c:39:61:13:b3:42:20:e6:02:b9:3d:e4:ce:
22:f6:11:ae:b0:0e:e1:a2:48:55:9e:9b:cf:16:0f:16:f3:03:
ed:ae:66:9d:da:93:d2:5c:a2:36:9b:41:03:6a:e6:f0:22:93:
d6:fb:77:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:26:25 2025 by rpki-client