
Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer
File: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer (raw, json)
Hash identifier: IiZBJ5HYUAulKG9zQ0O8237xlBf7EKTmhKLXpZuGc5g=
Subject key identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: A4BA7E0C9A86E3828D373832A5B4ABD775D39B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft
caRepository: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 01 Jul 2024 14:34:34 +0000
Certificate not after: Mon 30 Jun 2025 14:39:34 +0000
Subordinate resources: IP: 103.153.40.0/23
IP: 2406:3e40::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a4:ba:7e:0c:9a:86:e3:82:8d:37:38:32:a5:b4:ab:d7:75:d3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 1 14:34:34 2024 GMT
Not After : Jun 30 14:39:34 2025 GMT
Subject: CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3d:bc:9e:40:1f:06:23:99:dd:c5:e0:d4:d7:
4c:ac:98:15:1e:58:5d:e3:56:35:07:a6:bf:17:98:
b0:59:a0:d3:fb:0a:07:1c:8c:cf:d1:dc:77:38:34:
02:e3:40:b8:bf:a4:3b:c7:ac:b0:72:43:84:03:46:
fc:1f:f8:74:81:ae:ff:ad:9f:74:46:ba:b4:2f:11:
4c:f8:58:f7:dd:c4:d1:26:ec:a8:93:4a:e2:bc:16:
eb:dd:20:46:c8:f3:98:aa:1c:e6:94:e0:8a:3c:4c:
30:37:9e:33:0d:a4:cd:74:f4:6c:22:bc:6e:a4:f8:
2e:8e:e9:f5:b1:f8:8b:eb:86:03:be:2e:7e:d4:18:
26:e5:b7:37:43:c9:dd:c5:ba:6e:8d:9d:e1:4e:3f:
4f:9a:b0:be:f4:e8:3e:9a:70:75:c9:f4:43:44:31:
e4:3b:b1:01:fb:b8:95:f1:23:ec:d1:3f:39:5d:bb:
0d:38:ef:2e:5b:10:cb:66:b8:d6:15:d6:de:a7:9b:
23:74:3f:16:1d:7f:51:90:27:8c:84:47:38:4a:4c:
53:49:01:6f:dc:60:99:ca:90:39:7f:60:e1:fc:c4:
4f:d0:b0:ba:a6:cc:43:0a:32:71:ce:d8:21:1a:48:
0f:21:e7:66:ba:ec:a7:f7:b6:50:ec:4f:61:73:3c:
3b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.153.40.0/23
IPv6:
2406:3e40::/32
Signature Algorithm: sha256WithRSAEncryption
90:4a:59:30:6b:94:13:1e:a9:07:35:1f:30:45:b9:92:12:fa:
2a:70:29:a4:d8:a0:95:8c:64:7b:e9:09:0c:4b:5b:f0:12:4a:
38:b1:51:db:2b:cb:ec:fc:c7:3b:4f:6c:aa:cb:d3:cc:49:fa:
cd:4b:ac:17:94:cf:37:be:ac:c5:42:ee:e5:8b:bd:55:79:00:
f3:6a:b5:59:91:80:73:79:26:f8:6d:44:63:e0:ee:a5:23:cd:
97:30:1f:b7:7d:a6:71:8a:57:61:b6:be:90:03:14:0b:f0:9d:
33:74:3c:20:ed:bd:90:81:91:44:27:8e:6c:2f:76:50:94:46:
3e:c2:a7:dc:63:1f:ce:db:91:fe:8a:4d:e9:35:93:14:fd:d5:
ed:3c:ed:d4:7b:64:7d:c6:47:7d:02:4a:4f:df:89:cb:37:8f:
cd:be:d0:fe:9f:80:0d:af:65:c1:b4:2b:08:72:91:23:d3:01:
bd:f4:98:12:87:92:a5:e6:2b:47:8c:9e:32:82:1d:9e:42:62:
b7:92:1f:75:b4:bf:3f:da:e9:61:0b:ff:8e:9f:48:ef:51:77:
7c:b3:3d:91:ac:1f:13:79:a8:00:d1:d6:97:16:df:42:42:d8:
de:ac:40:51:f1:75:b3:aa:23:36:a1:53:fe:0b:cc:cf:b9:ad:
63:9b:2a:91
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIUAKS6fgyahuOCjTc4MqW0q9d105swDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE0MzQzNFoX
DTI1MDYzMDE0MzkzNFowMzExMC8GA1UEAxMoNUIxMjIxMDNEM0MxQzczMEFFQ0U1
OUE3RUQyOEE3OUREMEM3OTk0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKM9vJ5AHwYjmd3F4NTXTKyYFR5YXeNWNQemvxeYsFmg0/sKBxyMz9Hcdzg0
AuNAuL+kO8essHJDhANG/B/4dIGu/62fdEa6tC8RTPhY993E0SbsqJNK4rwW690g
RsjzmKoc5pTgijxMMDeeMw2kzXT0bCK8bqT4Lo7p9bH4i+uGA74uftQYJuW3N0PJ
3cW6bo2d4U4/T5qwvvToPppwdcn0Q0Qx5DuxAfu4lfEj7NE/OV27DTjvLlsQy2a4
1hXW3qebI3Q/Fh1/UZAnjIRHOEpMU0kBb9xgmcqQOX9g4fzET9CwuqbMQwoycc7Y
IRpIDyHnZrrsp/e2UOxPYXM8OxUCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFFsSIQPTwccwrs5Zp+0op53Qx5lIMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by82MTcyZWVmOS1lYzZhLTQ1NTgtODE4MS1hMTFmZTY1YjhmZjgvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYxNzJlZWY5
LWVjNmEtNDU1OC04MTgxLWExMWZlNjViOGZmOC8wLzVCMTIyMTAzRDNDMUM3MzBB
RUNFNTlBN0VEMjhBNzlERDBDNzk5NDgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD
BAFnmSgwDQQCAAIwBwMFACQGPkAwDQYJKoZIhvcNAQELBQADggEBAJBKWTBrlBMe
qQc1HzBFuZIS+ipwKaTYoJWMZHvpCQxLW/ASSjixUdsry+z8xztPbKrL08xJ+s1L
rBeUzze+rMVC7uWLvVV5APNqtVmRgHN5JvhtRGPg7qUjzZcwH7d9pnGKV2G2vpAD
FAvwnTN0PCDtvZCBkUQnjmwvdlCURj7Cp9xjH87bkf6KTek1kxT91e087dR7ZH3G
R30CSk/fics3j82+0P6fgA2vZcG0KwhykSPTAb30mBKHkqXmK0eMnjKCHZ5CYreS
H3W0vz/a6WEL/46fSO9Rd3yzPZGsHxN5qADR1pcW30JC2N6sQFHxdbOqIzahU/4L
zM+5rWObKpE=
-----END CERTIFICATE-----
Generated at Thu Apr 24 12:51:48 2025 by rpki-client