
Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer
File: 7B29BAF4812476761482CE1C3A92188A2A8334CE.cer (raw, json)
Hash identifier: iq+YZ7rT2VaqRFTYD9j9Y4jGuE8UJK/LLi9ln3iB8RI=
Subject key identifier: 7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 43EF770A2C51082D191C12CFDB412B7F3699ED38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft
caRepository: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 08 Oct 2024 17:35:49 +0000
Certificate not after: Tue 07 Oct 2025 17:40:49 +0000
Subordinate resources: IP: 103.156.232.0/23
IP: 2406:8fc0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ef:77:0a:2c:51:08:2d:19:1c:12:cf:db:41:2b:7f:36:99:ed:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Oct 8 17:35:49 2024 GMT
Not After : Oct 7 17:40:49 2025 GMT
Subject: CN=7B29BAF4812476761482CE1C3A92188A2A8334CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:da:5d:fe:b1:4d:62:9b:d4:86:50:9b:55:
ab:b5:4b:1e:db:b0:d1:f4:ec:4c:e2:8a:a5:64:8e:
fc:f2:1d:e4:72:c3:cb:94:3d:4c:05:80:fd:48:55:
cc:15:dd:95:6e:22:85:fa:92:9c:f3:9e:8d:fe:58:
d1:a0:f6:a5:4c:b1:8d:13:dd:9f:de:86:af:d6:3f:
d9:1f:ce:99:13:8b:b5:46:11:75:72:f6:53:e3:71:
d7:ed:7e:47:ed:33:05:9f:b2:ec:5f:a4:32:dd:82:
d1:58:e3:c9:74:c3:47:56:91:34:b2:92:79:88:8a:
88:ea:6a:a8:e3:ee:55:f6:c7:bb:5d:a7:40:98:82:
0c:f3:0e:c9:c9:50:53:3c:7f:6e:cb:f9:09:6b:4f:
99:59:ec:48:35:ae:52:a5:55:ce:20:85:86:bb:d8:
66:01:91:43:88:ec:97:e5:f1:9f:86:f5:d5:c9:7d:
02:43:ac:03:30:15:d3:4f:99:e0:a2:de:6c:a6:28:
eb:e1:6d:bb:33:f1:04:eb:5d:63:58:da:78:3f:d6:
d0:c0:e9:ca:68:f8:31:fe:59:60:d1:6d:0b:a7:11:
dd:0e:7f:3d:c5:24:d5:c4:7f:ed:6a:57:c2:e4:17:
d8:85:b8:c0:05:64:14:cc:ec:3f:c5:16:66:b3:61:
c3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.156.232.0/23
IPv6:
2406:8fc0::/32
Signature Algorithm: sha256WithRSAEncryption
30:06:ed:f1:43:5f:69:a6:78:a4:e5:8b:6a:9e:3d:5d:d9:9e:
99:29:16:b6:f2:89:dd:e3:c0:6a:6c:87:4b:34:b5:97:94:1a:
e0:5b:72:56:6f:13:bd:fa:35:f7:12:11:fb:cb:0a:b8:a9:3f:
09:20:54:65:16:de:06:25:d3:79:72:07:f9:9c:10:3f:f1:00:
87:9e:3c:42:54:cc:e1:4c:59:26:9e:4c:56:d1:fa:6c:a2:cf:
59:30:5d:44:d6:b7:94:41:c8:44:a3:96:30:30:e7:d4:83:f3:
a6:dc:ce:e8:e3:7c:95:63:00:d6:87:87:b3:74:bc:b1:97:aa:
3c:42:e8:75:d9:32:0c:9e:a5:41:ef:0f:4c:42:e5:74:92:a5:
b4:5c:91:95:07:16:7b:98:f6:2f:b1:f8:5d:84:e9:7b:41:80:
27:ab:36:1f:88:f2:15:17:6d:99:c9:e3:11:9b:da:af:9a:fa:
98:ea:1c:b5:d5:ed:f3:e5:91:68:8b:66:ea:ea:29:b2:b4:6e:
81:e4:3b:06:3d:fb:50:09:57:bd:46:bf:8b:f7:e3:f9:91:2a:
49:e4:37:02:66:11:20:03:bb:e5:99:31:60:a9:62:af:29:76:
39:6a:14:d8:f6:cc:4e:57:d2:2b:55:15:f2:2b:8d:5e:87:6f:
27:0c:98:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:06:10 2025 by rpki-client