Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer
File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.cer (raw, json)
Hash identifier: 5yVQE1tEZ9uEwiTw31teRCSaog1uih2+dpewiyk9icE=
Subject key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2576508EEBB365269052E4A063F4E9862A73E156
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft
caRepository: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 05 Apr 2024 19:36:51 +0000
Certificate not after: Fri 04 Apr 2025 19:41:51 +0000
Subordinate resources: IP: 103.122.121.0/24
IP: 2001:df6:af00::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:76:50:8e:eb:b3:65:26:90:52:e4:a0:63:f4:e9:86:2a:73:e1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 5 19:36:51 2024 GMT
Not After : Apr 4 19:41:51 2025 GMT
Subject: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:16:10:45:1f:7d:00:f2:d9:17:da:91:30:
69:d6:ce:dd:ed:c1:d5:a8:9d:41:c6:ce:9c:b0:8b:
01:85:dc:29:0b:68:ff:d7:df:17:64:68:b4:a0:26:
15:72:d3:36:50:78:0f:e7:7d:e8:57:58:0e:65:a2:
df:7b:05:5f:5e:e8:c3:4f:06:62:65:a2:97:c6:33:
ce:10:06:9a:2c:fe:df:11:59:ec:69:a5:26:ae:79:
67:a4:b6:4b:f1:05:ea:c6:e9:c3:fb:d5:7e:0b:ca:
21:ae:82:53:a3:d0:91:e5:fb:fd:db:8d:97:6c:c6:
37:74:9b:c2:19:46:2b:a8:18:96:2c:d3:d5:e6:24:
93:30:43:95:db:a4:a3:23:77:c9:10:e9:10:7b:2c:
1e:73:38:67:5a:ea:4c:87:5d:d3:d5:1d:f6:63:46:
be:42:a9:a8:59:32:6b:3a:b7:f9:06:90:8d:b5:11:
99:b5:e2:95:8d:32:ae:8d:6c:81:ba:10:18:2e:cb:
b9:26:2f:1d:7a:a4:1b:be:82:77:ee:0a:41:18:89:
79:ac:90:c0:53:68:ac:37:f4:78:34:d9:bc:75:d9:
6b:6a:ef:bf:ec:26:d7:72:55:80:3d:8d:54:85:da:
2d:91:82:4b:42:bd:42:48:06:42:a4:fd:0d:60:2e:
1a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.121.0/24
IPv6:
2001:df6:af00::/48
Signature Algorithm: sha256WithRSAEncryption
66:01:42:0a:eb:4d:14:2b:5c:b9:0b:81:0b:40:bf:e4:cf:2b:
b2:e3:ec:2e:b0:b2:83:67:b1:2d:01:36:a0:a2:9b:42:3e:a0:
b7:3b:08:77:d9:e2:10:5f:80:d2:57:fb:a2:ca:87:4c:f2:07:
6b:07:15:79:ec:f8:87:d3:40:cb:51:a1:3b:6e:2f:11:94:d1:
6c:c3:1f:e8:60:16:0d:ba:d4:27:ed:13:6f:1b:8d:37:6e:57:
06:4b:6d:ca:7d:d4:b9:95:a7:d6:97:05:da:dc:c3:c8:00:7d:
38:ca:f8:f5:b1:a9:3c:9c:53:46:d9:2c:3c:c1:3f:9f:71:01:
ac:d4:bb:0f:5c:8a:8d:69:5c:72:f5:ac:77:af:8f:d2:6b:b2:
df:98:1c:c9:4c:aa:e2:0e:35:c9:dc:f3:93:1e:1d:1b:b0:7a:
e3:6f:e2:cc:44:f1:e5:07:67:ef:fb:4b:03:f4:42:76:77:a6:
a3:12:49:bb:5c:46:99:bd:cf:f8:cc:40:ad:9b:6f:9d:ba:de:
26:e7:26:b9:4b:29:4a:aa:2c:90:80:ab:68:89:c1:d9:98:1f:
de:8a:fe:e6:fa:31:c5:04:bf:3a:eb:58:9c:79:ac:28:77:43:
f9:8b:15:c8:96:ca:2e:dc:dc:95:fb:f4:c7:45:cf:f9:68:41:
1b:52:46:3f
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUJXZQjuuzZSaQUuSgY/Tphipz4VYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQwNTE5MzY1MVoX
DTI1MDQwNDE5NDE1MVowMzExMC8GA1UEAxMoNDA4NTg1QzFENjJBNEY2MThDMDQy
NEU5QkVEQzNCOTE0MTFDMjI3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALXVFhBFH30A8tkX2pEwadbO3e3B1aidQcbOnLCLAYXcKQto/9ffF2RotKAm
FXLTNlB4D+d96FdYDmWi33sFX17ow08GYmWil8YzzhAGmiz+3xFZ7GmlJq55Z6S2
S/EF6sbpw/vVfgvKIa6CU6PQkeX7/duNl2zGN3SbwhlGK6gYlizT1eYkkzBDlduk
oyN3yRDpEHssHnM4Z1rqTIdd09Ud9mNGvkKpqFkyazq3+QaQjbURmbXilY0yro1s
gboQGC7LuSYvHXqkG76Cd+4KQRiJeayQwFNorDf0eDTZvHXZa2rvv+wm13JVgD2N
VIXaLZGCS0K9QkgGQqT9DWAuGosCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFECFhcHWKk9hjAQk6b7cO5FBHCJ2MB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9iN2UyNmM4My01ZWQyLTRjOGItOGEwMy02Y2IwMGQxZWQzMzgvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I3ZTI2Yzgz
LTVlZDItNGM4Yi04YTAzLTZjYjAwZDFlZDMzOC8wLzQwODU4NUMxRDYyQTRGNjE4
QzA0MjRFOUJFREMzQjkxNDExQzIyNzYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD
BABnenkwDwQCAAIwCQMHACABDfavADANBgkqhkiG9w0BAQsFAAOCAQEAZgFCCutN
FCtcuQuBC0C/5M8rsuPsLrCyg2exLQE2oKKbQj6gtzsId9niEF+A0lf7osqHTPIH
awcVeez4h9NAy1GhO24vEZTRbMMf6GAWDbrUJ+0TbxuNN25XBkttyn3UuZWn1pcF
2tzDyAB9OMr49bGpPJxTRtksPME/n3EBrNS7D1yKjWlccvWsd6+P0muy35gcyUyq
4g41ydzzkx4dG7B642/izETx5Qdn7/tLA/RCdnemoxJJu1xGmb3P+MxArZtvnbre
JucmuUspSqoskICraInB2Zgf3or+5voxxQS/OutYnHmsKHdD+YsVyJbKLtzclfv0
x0XP+WhBG1JGPw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 13:17:22 2025 by rpki-client