Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer
File: 428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer (raw, json)
Hash identifier: btE7kuVYq8PK5VEluxeU5qLjraxPLZ2W/AuK78H8oh0=
Subject key identifier: 42:8A:A4:24:0E:74:1F:27:E3:A2:1E:FC:29:D4:5F:0A:EC:C7:FE:96
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 7E9AF21EF282E17EBFA7984B4F808E9A6E05142F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft
caRepository: rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 01 Jul 2024 18:01:13 +0000
Certificate not after: Mon 30 Jun 2025 18:06:13 +0000
Subordinate resources: IP: 27.111.32.0/19
IP: 43.229.204.0/22
IP: 103.245.180.0/22
IP: 119.235.16.0/20
IP: 202.129.184.0/21
IP: 2403:2e00::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:9a:f2:1e:f2:82:e1:7e:bf:a7:98:4b:4f:80:8e:9a:6e:05:14:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 1 18:01:13 2024 GMT
Not After : Jun 30 18:06:13 2025 GMT
Subject: CN=428AA4240E741F27E3A21EFC29D45F0AECC7FE96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fe:1e:b0:16:31:2a:24:3f:c4:ed:5f:62:58:
ff:9a:31:22:73:3a:ff:56:26:7a:ff:d5:e6:5c:e9:
0d:65:e4:cf:54:59:79:fc:7a:57:29:94:02:41:ad:
8d:ce:ee:a6:a1:da:e4:2c:5b:d5:ce:bd:ee:dd:88:
b1:94:f1:bc:02:80:a3:c4:f7:09:13:7e:c5:93:7b:
8c:9f:c9:4e:48:aa:17:c3:67:f1:08:28:f0:79:0f:
ad:ef:13:12:c1:f2:17:b4:78:97:f8:42:fc:24:8d:
0d:ef:e6:ff:7a:53:50:6e:96:1f:81:b9:ad:33:e0:
7b:02:2c:3a:f4:f3:1e:14:71:f2:4a:5c:82:31:df:
30:93:38:63:5a:0a:9d:42:76:ed:54:fc:59:48:af:
d8:98:4f:3f:e5:e5:6a:df:38:cb:1d:fe:c9:22:6e:
3f:14:55:98:70:cd:6a:cc:53:33:34:80:35:25:fa:
ac:86:6b:07:c4:2f:c2:29:86:0e:a2:71:5e:58:77:
64:ba:f9:3f:d1:4c:73:93:f9:ba:24:0b:f0:4c:8c:
cd:fb:5d:86:2a:a6:5f:2d:90:b7:b5:2d:a0:18:1a:
f8:4f:1f:7d:bd:9a:72:ad:50:02:2a:79:1b:84:c2:
37:c7:9f:b4:95:4f:e5:fb:db:5c:da:8c:6f:12:6c:
e5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
42:8A:A4:24:0E:74:1F:27:E3:A2:1E:FC:29:D4:5F:0A:EC:C7:FE:96
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.111.32.0/19
43.229.204.0/22
103.245.180.0/22
119.235.16.0/20
202.129.184.0/21
IPv6:
2403:2e00::/32
Signature Algorithm: sha256WithRSAEncryption
71:b1:46:2b:f9:f3:d2:ed:6e:7d:6d:fe:db:cc:d1:43:85:27:
a2:f3:68:4b:c7:45:17:4e:49:b9:c5:01:96:56:6b:3a:6b:3c:
e9:2d:8b:49:34:87:97:f5:7b:cf:7c:30:15:c7:ef:9a:7a:25:
12:27:87:16:94:c0:a9:bc:a1:d5:26:e9:58:84:00:20:56:a2:
ee:c0:21:dd:cd:16:bf:fb:b6:92:47:bf:01:81:67:22:fa:e3:
17:76:83:65:4e:6f:9b:3e:7c:d7:6e:65:86:35:5c:54:4d:79:
a0:5f:43:32:13:ee:7f:ea:00:20:0f:97:d1:39:38:65:58:51:
15:56:f4:12:15:2a:1d:c0:e2:b1:68:45:13:cf:cc:cb:bd:06:
37:84:b0:9a:d5:69:52:46:08:66:57:41:df:0a:08:7d:27:93:
19:83:93:e2:cf:c1:d6:1d:ca:c8:8c:18:1a:19:d4:19:af:3c:
16:5a:df:57:9f:14:a7:65:56:d5:aa:e4:f5:ae:da:07:3c:0a:
62:c5:e3:76:d8:95:da:60:4a:8f:f9:42:97:af:7b:db:6c:9d:
c1:3a:c9:0e:e7:25:3c:57:5f:dd:ba:21:9d:c3:f9:d8:70:6f:
8d:91:2d:5a:1d:64:6a:7a:18:3a:65:f5:4b:82:8b:a2:f6:8c:
59:7f:8a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:24:02 2025 by rpki-client