Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer
File: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer (raw, json)
Hash identifier: zNk165mnLyXv1DMBJYf32jpkbEmQ3KVsRQGb5Zucz2c=
Subject key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 41FC5D2B597EF44B36E51040244EA32794E4FB47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft
caRepository: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 27 Aug 2024 06:32:01 +0000
Certificate not after: Tue 26 Aug 2025 06:37:01 +0000
Subordinate resources: IP: 202.74.72.0/22
IP: 2400:7dc0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:fc:5d:2b:59:7e:f4:4b:36:e5:10:40:24:4e:a3:27:94:e4:fb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Aug 27 06:32:01 2024 GMT
Not After : Aug 26 06:37:01 2025 GMT
Subject: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:61:15:48:83:66:f8:9d:ae:f8:97:0d:f5:a3:
fb:58:9c:4e:58:2e:81:ba:2b:7e:dc:65:82:72:bc:
98:de:d4:01:aa:07:b9:c2:0e:22:81:20:7f:85:9d:
eb:ce:94:2d:51:b2:cd:69:41:8b:16:3f:97:95:11:
5b:ab:9d:0f:ec:8e:d7:17:8f:92:8e:8d:31:03:6f:
c2:5e:26:fe:8a:72:eb:d1:79:e3:21:1a:5e:f7:2f:
4e:9d:f5:a9:45:f8:07:c5:c5:35:84:3e:9f:33:c5:
80:4a:9f:eb:2b:ee:90:61:e2:e7:7c:bc:55:cd:93:
d3:1b:0d:f2:9c:4a:6b:7e:2a:94:2f:8b:c9:5c:65:
e8:84:1f:d1:b9:53:7e:a7:d0:d2:93:4a:57:45:03:
1e:ff:6e:cd:4f:3b:02:70:d3:07:58:33:bc:62:33:
e2:96:fb:00:97:a7:0e:0c:02:6d:86:bc:cc:69:4f:
7d:b9:a1:af:d9:4e:9d:10:5e:ab:19:34:1d:1c:8d:
ee:40:2f:5e:98:e1:80:99:55:1b:5d:d6:c6:ef:70:
10:99:cd:5f:25:9b:59:63:4c:e5:f0:75:37:91:bb:
b0:4f:30:9f:2a:ec:ec:9a:7f:5d:ee:25:35:0b:24:
08:78:5b:79:ca:ff:68:0f:4b:74:19:4f:8d:cc:5d:
c3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.74.72.0/22
IPv6:
2400:7dc0::/32
Signature Algorithm: sha256WithRSAEncryption
6e:5c:75:0b:4b:f5:98:67:ad:35:02:06:20:13:6d:90:98:68:
e5:47:60:ed:b8:45:94:29:64:e3:35:4d:d3:c7:13:c3:d8:39:
f5:ff:fc:93:d1:d5:a7:89:d6:1d:39:d5:4d:27:09:eb:27:eb:
6f:7b:8a:b4:ee:12:34:d2:6e:57:83:06:8b:1c:e0:e2:da:a1:
ed:86:06:6f:fc:e7:55:66:29:e5:51:89:d5:6d:28:92:3e:72:
12:c0:fe:d4:a9:f8:dc:c2:51:3a:28:7f:4c:5a:36:f2:65:e3:
b8:85:ff:11:3b:4c:85:4f:e1:31:9a:68:3f:9d:d2:8e:bb:78:
14:c8:f6:1b:bf:4a:d8:ae:64:d7:09:ba:c1:ce:8e:8f:15:ef:
e5:06:59:49:4a:e7:6a:66:ff:d8:f5:22:96:b5:58:e9:11:f4:
4f:40:c5:8f:18:ab:47:7f:1b:3b:58:d1:51:88:17:80:f9:ce:
00:68:18:45:40:46:35:fa:66:4f:8e:6e:d2:30:8b:0f:44:c0:
84:eb:1f:ff:65:13:2d:42:28:da:d6:dd:fc:85:1f:75:6d:93:
cf:c3:5a:8c:9f:f9:9f:d5:ee:67:4f:a3:bb:ea:8b:bc:19:0e:
43:5f:e9:c4:4c:e1:d9:f8:51:88:3b:08:a0:eb:81:db:1d:42:
58:6e:35:d1
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIUQfxdK1l+9Es25RBAJE6jJ5Tk+0cwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgyNzA2MzIwMVoX
DTI1MDgyNjA2MzcwMVowMzExMC8GA1UEAxMoOTY3RTk0QjNERTc3MUU0QzU5NzdG
RjFFMEMyQTYxQTFERjQ0NDkzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJxhFUiDZvidrviXDfWj+1icTlgugborftxlgnK8mN7UAaoHucIOIoEgf4Wd
686ULVGyzWlBixY/l5URW6udD+yO1xePko6NMQNvwl4m/opy69F54yEaXvcvTp31
qUX4B8XFNYQ+nzPFgEqf6yvukGHi53y8Vc2T0xsN8pxKa34qlC+LyVxl6IQf0blT
fqfQ0pNKV0UDHv9uzU87AnDTB1gzvGIz4pb7AJenDgwCbYa8zGlPfbmhr9lOnRBe
qxk0HRyN7kAvXpjhgJlVG13Wxu9wEJnNXyWbWWNM5fB1N5G7sE8wnyrs7Jp/Xe4l
NQskCHhbecr/aA9LdBlPjcxdwwkCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFJZ+lLPedx5MWXf/HgwqYaHfREk5MB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9kNTBjODY3Yi0yY2I5LTQ1N2ItODU2Yi1hMmFmYTM4ZjU3Y2MvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q1MGM4Njdi
LTJjYjktNDU3Yi04NTZiLWEyYWZhMzhmNTdjYy8wLzk2N0U5NEIzREU3NzFFNEM1
OTc3RkYxRTBDMkE2MUExREY0NDQ5MzkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD
BALKSkgwDQQCAAIwBwMFACQAfcAwDQYJKoZIhvcNAQELBQADggEBAG5cdQtL9Zhn
rTUCBiATbZCYaOVHYO24RZQpZOM1TdPHE8PYOfX//JPR1aeJ1h051U0nCesn6297
irTuEjTSbleDBosc4OLaoe2GBm/851VmKeVRidVtKJI+chLA/tSp+NzCUToof0xa
NvJl47iF/xE7TIVP4TGaaD+d0o67eBTI9hu/StiuZNcJusHOjo8V7+UGWUlK52pm
/9j1Ipa1WOkR9E9AxY8Yq0d/GztY0VGIF4D5zgBoGEVARjX6Zk+ObtIwiw9EwITr
H/9lEy1CKNrW3fyFH3Vtk8/DWoyf+Z/V7mdPo7vqi7wZDkNf6cRM4dn4UYg7CKDr
gdsdQlhuNdE=
-----END CERTIFICATE-----
Generated at Thu Apr 24 13:02:40 2025 by rpki-client