Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
File: 473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer (raw, json)
Hash identifier: qJQIvn8oDDCrSOnga+4yfomOOJntp7Mqbgg4M1UzYrE=
Subject key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4A40F0C7C3E5696BEA45F501F9592F9EB953A147
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft
caRepository: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 16 Sep 2024 09:18:12 +0000
Certificate not after: Mon 15 Sep 2025 09:23:12 +0000
Subordinate resources: IP: 103.136.162.0/23
IP: 2404:97c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:40:f0:c7:c3:e5:69:6b:ea:45:f5:01:f9:59:2f:9e:b9:53:a1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Sep 16 09:18:12 2024 GMT
Not After : Sep 15 09:23:12 2025 GMT
Subject: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:07:27:15:8b:2f:bc:3b:bd:93:83:a7:01:74:
33:2b:21:c5:9c:d4:e1:3f:e8:94:9e:ca:27:0e:c4:
e6:2a:57:bd:f6:cc:c2:ee:3f:4b:34:f5:a3:80:90:
0b:fd:1d:ce:ee:2e:ae:2c:41:e9:22:27:12:9b:db:
82:ee:a0:e8:17:52:01:4d:20:34:34:54:95:c3:5a:
1b:54:97:04:8c:7d:f3:06:ab:48:e7:e7:75:0b:27:
6a:88:3e:ad:de:d3:0f:7b:9d:a6:9a:a1:a2:e4:d0:
79:c8:68:c1:a7:b8:1f:c2:33:1a:e2:76:be:d2:03:
06:a6:62:b2:2a:49:44:1e:8d:3e:54:09:2e:aa:98:
fd:b9:14:ca:4b:82:32:16:15:e1:2b:a9:e6:5c:a7:
c4:86:1b:df:fb:f6:3e:f1:a6:21:b0:1b:2d:3e:42:
92:6e:5a:20:7d:f3:5a:bd:ca:e4:46:fe:5e:99:19:
b4:df:3b:42:71:6d:dd:56:15:b3:81:01:32:5a:eb:
90:af:e9:45:3d:b2:b2:db:66:87:6e:06:35:fa:3a:
03:c5:90:84:a8:44:5f:fc:7a:1d:1d:e8:c9:21:ed:
af:60:0d:12:62:79:69:36:d0:42:ae:04:5e:38:1e:
08:d9:74:3c:0c:65:09:68:68:b7:4f:61:66:89:6c:
ae:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.136.162.0/23
IPv6:
2404:97c0::/32
Signature Algorithm: sha256WithRSAEncryption
40:f6:69:d3:f1:4e:12:ef:da:01:7c:d2:3b:df:74:dc:dd:91:
c4:88:66:85:4a:7f:f8:41:77:1f:c6:a4:09:00:ce:57:2e:ed:
b4:39:e9:2a:ea:a5:ce:f1:fb:27:f5:59:07:48:75:9c:c0:13:
e4:de:3f:b6:18:67:4a:55:19:64:0a:00:0a:ab:6a:87:f4:d1:
e7:e2:99:11:31:4e:f4:74:e2:d4:f1:c5:d8:76:f8:b1:52:2b:
9a:89:7e:89:00:41:89:01:1a:4d:09:1f:f1:c6:9a:9c:00:8d:
ce:de:f6:e9:19:77:eb:23:cb:ca:d8:90:37:52:90:51:8b:3e:
a0:32:f8:e5:ab:51:0d:e8:cf:15:c9:08:23:5a:15:26:80:a7:
9c:5e:9c:3f:97:ea:99:34:49:c3:3f:a2:8f:b6:2f:b4:a2:7f:
a4:7b:97:e6:8a:07:ac:97:1c:53:cf:71:b0:16:0a:be:85:07:
60:dd:cd:d6:5a:30:93:a7:85:9f:38:7d:3b:28:3f:1d:07:b3:
94:3a:72:8a:d3:23:67:a8:7d:76:ac:d8:91:e0:f0:dc:97:f1:
63:42:b0:87:bc:ca:bc:9a:b8:6b:71:43:d4:0d:88:09:17:e1:
d1:84:cf:26:d8:8b:fe:0e:cc:12:da:47:13:33:ef:62:a5:70:
b8:19:a1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:10:23 2025 by rpki-client