Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer
File: 919B60E4D7E1171B6624F318ADA1B74502A3A018.cer (raw, json)
Hash identifier: TZKvg2dKO1QyynzjGQU9K3szQBSuJvEnH/GzovoJH0w=
Subject key identifier: 91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 246B7D76C2AE0922075A46FFF45794C927784FFA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft
caRepository: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 01 Jul 2024 15:34:43 +0000
Certificate not after: Mon 30 Jun 2025 15:39:43 +0000
Subordinate resources: IP: 103.106.116.0/24
IP: 2001:df3:a500::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:6b:7d:76:c2:ae:09:22:07:5a:46:ff:f4:57:94:c9:27:78:4f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 1 15:34:43 2024 GMT
Not After : Jun 30 15:39:43 2025 GMT
Subject: CN=919B60E4D7E1171B6624F318ADA1B74502A3A018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:18:8b:2c:24:0d:9f:83:e3:5c:5c:e4:84:
9c:55:19:37:f3:71:ff:18:3a:bc:07:f4:db:44:59:
41:0c:65:bb:4a:02:ab:a0:8e:5b:93:65:7c:d8:1b:
df:73:3b:de:88:78:4f:a7:94:bb:05:e9:63:25:98:
d2:97:ca:a3:3d:fe:28:9e:a2:72:0d:2c:63:25:c3:
58:3f:ff:25:d9:1e:ca:9a:de:0b:15:e6:91:c2:f2:
f5:08:1b:f2:05:10:94:06:05:9a:83:9b:75:5b:cc:
5e:da:46:d3:5e:cf:cb:d4:8f:fe:7f:52:27:53:bf:
2c:ae:8f:91:8a:65:0c:dd:b9:bc:89:4c:fc:eb:6e:
ee:4f:4a:ba:da:4e:41:59:61:bb:a8:6c:98:4a:a2:
b1:41:12:ef:38:22:1e:57:5a:87:b3:3a:75:b9:02:
53:2c:7a:61:83:6b:5c:43:22:cf:48:09:01:b4:98:
29:76:d7:f8:8f:a1:3a:00:23:af:1e:45:c7:f4:2c:
dd:f2:e8:81:7f:85:02:9d:64:e4:06:38:74:75:0a:
46:a7:2b:cf:de:90:df:f4:91:05:9a:f8:04:1e:5b:
b3:04:1b:f3:14:9c:e9:1f:60:32:a7:7f:99:df:e0:
c7:1a:ae:b8:d6:7e:4d:42:a4:98:eb:97:e5:4e:09:
17:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.106.116.0/24
IPv6:
2001:df3:a500::/48
Signature Algorithm: sha256WithRSAEncryption
37:ac:81:28:2b:86:ed:61:6a:b2:58:b2:b0:1d:38:a4:ff:cc:
75:6e:5b:3f:d4:a6:a2:ec:7a:89:f6:06:22:88:d1:f8:6d:f7:
9b:13:6c:61:08:c3:1e:21:25:fb:56:77:5a:82:f3:d3:97:85:
be:fb:1e:23:8f:ba:da:e5:6e:de:f6:02:64:33:22:b2:09:42:
2b:9f:4b:fa:59:30:4a:ec:87:d2:5a:f0:d3:4c:00:75:ee:81:
6f:aa:c2:6a:8a:1c:ba:1c:89:6d:a4:52:21:c4:e6:46:f2:52:
8e:10:52:f0:8c:b9:61:64:57:e2:4e:11:11:b6:c8:5c:e7:d8:
8f:26:0d:32:8b:61:95:dd:6a:a3:40:2d:d0:a2:ff:2d:bb:58:
67:d3:04:cc:14:24:8f:7c:bf:4f:6e:55:92:1d:43:9a:9c:a8:
4d:f3:03:99:80:16:74:c1:30:01:94:bd:f3:74:62:7f:ef:ee:
18:f7:1a:87:a8:29:ef:c4:b1:b7:8b:64:1c:0a:83:07:b5:0b:
24:6f:71:38:95:a9:15:e5:56:81:aa:d6:3e:d7:ea:28:95:67:
74:5d:89:ca:9f:fd:81:73:1f:11:22:7e:56:36:44:75:f3:dd:
bd:27:03:4e:1b:61:cc:87:5e:29:0d:55:16:80:4b:9c:6c:89:
1c:2a:93:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:28:02 2025 by rpki-client