
Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer
File: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer (raw, json)
Hash identifier: OvFVN9JF6pqdsW0IEXxWFtsOCvw7bVWbBNBgtQr09dI=
Subject key identifier: 49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 281701F04B7059DDFC29A0A0DA35BB8D4FA08380
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft
caRepository: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 01 Jul 2024 16:18:34 +0000
Certificate not after: Mon 30 Jun 2025 16:23:34 +0000
Subordinate resources: IP: 103.146.30.0/23
IP: 2001:df2:3e80::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:17:01:f0:4b:70:59:dd:fc:29:a0:a0:da:35:bb:8d:4f:a0:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 1 16:18:34 2024 GMT
Not After : Jun 30 16:23:34 2025 GMT
Subject: CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:9e:2c:9a:af:bd:ae:fa:1b:85:b6:93:56:
07:5c:da:64:b8:7b:b5:33:53:3b:98:7a:a5:f1:b7:
6f:90:16:33:a7:b8:dc:95:c9:87:3e:33:a7:91:a7:
31:17:45:07:ee:9e:1a:5a:04:2a:dd:21:c5:93:95:
50:32:9d:d6:05:f6:c2:dc:a5:64:cd:7e:da:db:9d:
e3:5c:e4:ec:dc:32:39:4b:a6:c4:4a:6b:7c:8a:53:
b3:5c:76:21:c6:05:cd:43:03:d8:73:8c:8f:90:ea:
17:67:d9:ed:be:e9:88:24:9c:b0:58:96:e2:3c:8a:
00:d9:3c:7c:a8:df:7b:cd:8a:fe:a9:d7:1b:f9:16:
64:46:9a:ad:fd:6e:d5:cf:38:7d:22:7f:6d:2b:75:
16:f3:4c:c4:8c:1f:b7:b7:32:06:c6:a6:7c:c9:d1:
8e:a9:04:2b:b5:09:d9:41:5d:68:90:9d:56:0a:d5:
a9:ee:ef:65:17:9c:49:bd:5a:79:5a:93:d0:e6:72:
01:a8:85:4d:6b:8c:91:ab:45:df:64:43:c7:dd:86:
36:9a:22:13:0c:d7:d4:22:14:0e:41:58:b8:47:8a:
2c:90:20:6d:d4:4c:c8:6a:88:be:b4:8a:50:cb:55:
dd:c9:5b:8e:bf:45:87:71:c7:e7:4a:d4:3d:78:8b:
b0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.146.30.0/23
IPv6:
2001:df2:3e80::/48
Signature Algorithm: sha256WithRSAEncryption
5d:31:c5:f0:51:05:b7:82:00:a7:e6:d4:eb:fe:32:e8:be:0f:
42:50:a2:71:b4:f8:8b:45:d8:6c:8d:5a:77:a8:76:4c:0a:d2:
60:90:9f:80:8d:62:3a:71:e4:12:23:b8:3c:28:84:1e:84:9d:
14:fe:00:e5:0e:18:ca:77:01:c5:a4:ed:d1:cf:be:c4:86:9c:
31:e5:a6:a1:22:07:d4:1b:4f:a5:97:a0:86:4f:06:f7:e3:b1:
64:10:c4:73:f6:f4:84:88:4a:dd:f8:ef:59:d5:3f:f0:97:ad:
48:27:5d:27:14:bf:79:fa:4d:34:13:9b:2c:b0:a2:fd:dd:29:
42:b3:93:4f:b5:86:0c:e0:0f:f3:62:6f:bb:0b:da:3f:18:db:
14:d1:c3:a7:d3:68:6d:31:15:06:1b:16:2b:5a:77:b7:40:db:
1d:36:a5:87:4e:6a:3c:30:43:0c:22:f0:a6:a1:19:1b:fc:b0:
54:0c:1a:fd:0e:8a:87:99:aa:5f:93:b1:a3:67:d6:d5:f2:16:
96:44:b2:6b:41:32:7a:e5:80:e3:23:a4:0a:c5:09:59:5d:60:
bc:db:6c:49:aa:01:51:a0:2e:c6:74:73:e6:0d:be:31:11:0a:
2a:09:96:a4:e6:04:26:bf:d9:53:eb:c7:58:d4:b2:40:68:dd:
fd:c7:62:cf
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUKBcB8EtwWd38KaCg2jW7jU+gg4AwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE2MTgzNFoX
DTI1MDYzMDE2MjMzNFowMzExMC8GA1UEAxMoNDkwQTA2QjIwRjYxOTI1NjhGMUZF
NzVGOEEzOUZDRTdFMkFDODdGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ0Xniyar72u+huFtpNWB1zaZLh7tTNTO5h6pfG3b5AWM6e43JXJhz4zp5Gn
MRdFB+6eGloEKt0hxZOVUDKd1gX2wtylZM1+2tud41zk7NwyOUumxEprfIpTs1x2
IcYFzUMD2HOMj5DqF2fZ7b7piCScsFiW4jyKANk8fKjfe82K/qnXG/kWZEaarf1u
1c84fSJ/bSt1FvNMxIwft7cyBsamfMnRjqkEK7UJ2UFdaJCdVgrVqe7vZRecSb1a
eVqT0OZyAaiFTWuMkatF32RDx92GNpoiEwzX1CIUDkFYuEeKLJAgbdRMyGqIvrSK
UMtV3clbjr9Fh3HH50rUPXiLsE0CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFEkKBrIPYZJWjx/nX4o5/OfirIf1MB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by82YWFjMzU2Mi1kNTQ5LTQzY2UtODUxZi1mZTkyNDcyN2Y5MTgvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZhYWMzNTYy
LWQ1NDktNDNjZS04NTFmLWZlOTI0NzI3ZjkxOC8wLzQ5MEEwNkIyMEY2MTkyNTY4
RjFGRTc1RjhBMzlGQ0U3RTJBQzg3RjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD
BAFnkh4wDwQCAAIwCQMHACABDfI+gDANBgkqhkiG9w0BAQsFAAOCAQEAXTHF8FEF
t4IAp+bU6/4y6L4PQlCicbT4i0XYbI1ad6h2TArSYJCfgI1iOnHkEiO4PCiEHoSd
FP4A5Q4YyncBxaTt0c++xIacMeWmoSIH1BtPpZeghk8G9+OxZBDEc/b0hIhK3fjv
WdU/8JetSCddJxS/efpNNBObLLCi/d0pQrOTT7WGDOAP82JvuwvaPxjbFNHDp9No
bTEVBhsWK1p3t0DbHTalh05qPDBDDCLwpqEZG/ywVAwa/Q6Kh5mqX5Oxo2fW1fIW
lkSya0EyeuWA4yOkCsUJWV1gvNtsSaoBUaAuxnRz5g2+MREKKgmWpOYEJr/ZU+vH
WNSyQGjd/cdizw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 13:17:18 2025 by rpki-client