
Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer
File: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer (raw, json)
Hash identifier: efoYvzLbZNPqip+fb5acaK8rZWgm+fGqFm5C+3OqRjQ=
Subject key identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 7D460023268CB9CFC978CCF6085A3BA4A456083D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft
caRepository: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 06 Jun 2024 05:41:52 +0000
Certificate not after: Thu 05 Jun 2025 05:46:52 +0000
Subordinate resources: IP: 103.172.172.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:46:00:23:26:8c:b9:cf:c9:78:cc:f6:08:5a:3b:a4:a4:56:08:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jun 6 05:41:52 2024 GMT
Not After : Jun 5 05:46:52 2025 GMT
Subject: CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a0:c8:e6:c1:91:50:49:11:3d:fa:7c:a7:28:
c2:c7:c1:b3:59:02:de:0a:5b:e0:df:f6:43:d0:eb:
5a:68:7a:07:c4:6a:6e:c5:fa:eb:c5:78:34:55:37:
62:ea:5f:51:30:f2:e2:99:af:28:0d:22:d1:de:ff:
6b:ad:f1:9f:c3:c8:39:31:20:53:35:39:3f:52:35:
06:1d:e7:51:da:c9:86:de:20:66:5d:df:50:f6:00:
76:ae:e0:6e:48:66:73:7f:99:e1:01:0a:df:e6:2f:
de:dc:98:86:25:ca:b9:43:f9:e2:e7:29:51:41:b9:
a3:65:a3:1b:20:63:00:72:42:1e:63:fd:83:fc:fd:
34:14:5d:81:a6:16:89:82:2b:2a:0e:19:92:c7:16:
00:b4:52:15:c4:d4:bf:28:14:20:e6:0a:21:1d:3f:
66:3e:fa:ae:54:e0:b6:e8:38:92:f3:66:93:80:0f:
01:f8:69:c4:85:26:34:7f:c1:70:54:e7:ba:87:f8:
00:eb:d3:27:b8:3a:31:9a:7b:51:d5:30:57:ab:f8:
1b:7b:c0:ea:6d:98:d4:d1:ae:69:96:a8:17:d3:99:
c1:c2:68:30:00:f9:ef:51:e8:5f:a9:6e:6a:80:f8:
cd:29:0a:02:b3:04:f6:81:76:c7:b9:3e:a5:c9:d8:
7a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.172.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e8:ea:01:d3:76:17:6f:90:2e:e0:76:ba:2c:2d:80:40:6f:
b1:5f:99:62:1f:10:e3:c3:f8:e6:73:8a:fa:d5:75:f8:f7:56:
28:5a:f9:a3:4b:de:40:b0:5e:91:00:5c:7e:52:db:b9:b5:ac:
65:b6:4b:ec:fb:0e:dc:8e:aa:ae:c3:5d:2d:74:c1:53:9f:c8:
6d:9a:c5:bf:09:fb:6d:40:af:94:cc:f2:90:52:27:9d:02:6d:
b0:85:98:81:4b:0b:fa:c4:a7:6c:16:ec:a7:38:b2:32:d9:50:
51:4d:03:03:1e:cf:6e:6e:1d:5c:93:2c:1f:2d:d5:af:e7:97:
ea:15:83:99:fd:94:06:10:ed:da:fd:63:15:59:98:dd:f2:93:
1b:ba:1d:1e:6d:00:93:65:5c:f7:a9:12:bf:48:17:88:45:0d:
97:df:b4:d7:2a:c6:98:97:7c:b5:0a:ba:18:61:69:00:f5:78:
61:33:88:27:3e:fa:84:bb:b9:5d:42:17:6e:f9:90:1d:d7:5d:
9a:68:81:25:56:21:28:12:87:f7:03:1c:fb:94:fd:2f:d6:f4:
e6:21:39:1d:c7:a6:bb:17:25:80:a0:b4:71:35:43:01:3c:77:
7d:1a:2f:64:f9:a7:a5:72:f4:d2:b9:7d:bd:52:7f:36:6a:e2:
cb:bc:a7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:02:40 2025 by rpki-client