Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
File: 9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer (raw, json)
Hash identifier: X+FlhRT8O7ur7ZjCg3zAbnrIiOZEh1GlauPi0MB7cck=
Subject key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0A9C3CD4FC76C03984BA409D2BF19364D2261235
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft
caRepository: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 01 Jul 2024 11:32:30 +0000
Certificate not after: Mon 30 Jun 2025 11:37:30 +0000
Subordinate resources: IP: 103.3.58.0/23
IP: 103.241.178.0/23
IP: 120.89.88.0/22
IP: 202.47.88.0/24
IP: 203.29.26.0/23
IP: 203.148.84.0/23
IP: 2402:a100::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:9c:3c:d4:fc:76:c0:39:84:ba:40:9d:2b:f1:93:64:d2:26:12:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 1 11:32:30 2024 GMT
Not After : Jun 30 11:37:30 2025 GMT
Subject: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:07:9d:54:65:85:8f:d6:62:87:8f:dc:6b:
1d:16:b1:a5:35:81:c2:5d:0c:4b:43:fe:2a:45:b2:
32:5a:34:4b:f4:b8:e7:68:eb:94:8a:c7:70:2f:1f:
e0:b1:a6:49:7b:cc:3a:da:1e:d6:80:80:27:9e:41:
29:39:fe:29:85:a0:4c:1a:7d:d6:a8:6a:2c:c7:df:
a9:9b:00:e8:46:9a:19:cd:f1:03:7d:0b:86:73:7c:
d2:5b:ae:4e:96:c2:d3:4c:36:0a:19:d3:5e:5e:82:
06:8b:1e:1c:c1:c3:fd:88:b8:46:4c:9a:d1:76:25:
d5:d9:08:5b:38:1e:33:7d:e5:a8:6b:31:67:e9:b2:
ca:6c:ae:de:44:60:7b:59:f9:37:e8:52:8d:b8:e7:
33:f3:b2:45:ca:8e:00:d7:be:7c:ce:5b:17:91:c2:
ee:cf:68:78:57:cd:40:01:27:52:8e:28:03:ad:25:
bb:8b:b7:95:8b:ff:a0:cd:bb:cd:21:f0:82:66:2d:
0d:3a:f8:d2:58:3c:0c:09:c0:8f:32:cd:25:64:20:
b0:09:77:b4:4c:ab:50:cd:35:61:72:3a:9b:c8:63:
e6:2e:bc:de:ef:af:05:97:b2:9b:c2:31:e2:15:8e:
fd:1f:ec:4b:e1:dd:cd:17:2b:75:89:da:fe:a7:18:
23:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.3.58.0/23
103.241.178.0/23
120.89.88.0/22
202.47.88.0/24
203.29.26.0/23
203.148.84.0/23
IPv6:
2402:a100::/32
Signature Algorithm: sha256WithRSAEncryption
67:bf:50:fe:af:4c:e7:33:e9:b1:d9:b2:c1:58:a7:aa:43:0a:
b4:57:61:df:32:21:0c:a4:e8:07:cf:bd:8a:51:02:02:b7:83:
65:70:ec:bb:e9:df:f1:1c:be:59:c6:67:e4:d0:83:69:c4:3d:
19:f9:67:5a:cd:03:41:55:38:09:f2:0b:70:c1:f3:be:db:e0:
02:d3:ec:63:75:34:37:09:d5:3d:72:a5:3f:e8:04:b8:96:a9:
08:2c:c1:85:20:db:64:d2:4f:cd:e1:bb:0c:b5:34:56:8f:70:
da:32:f8:26:4d:f8:00:44:bf:90:9c:f4:bb:fe:51:b3:fe:56:
9f:6b:40:bb:1a:8f:98:57:89:2b:7e:2b:69:db:2e:66:56:10:
b3:a6:5c:2d:1b:ee:eb:ec:9d:f3:21:82:5d:7e:10:1b:d2:01:
a8:ce:86:75:33:8e:be:03:03:89:aa:4f:41:1b:3f:8c:c6:e9:
5c:7a:a5:16:1c:ec:93:f1:01:ec:13:f3:53:de:45:50:cf:23:
21:31:a4:6c:67:1b:cf:55:4e:8d:eb:bc:59:3b:f8:bd:1d:0d:
54:57:d9:e3:ba:e9:1c:57:7a:72:3d:23:a4:df:62:6f:0c:8c:
2f:9e:60:13:c3:be:96:c4:2d:d5:24:38:b1:70:71:de:ba:01:
c9:53:5b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:00:21 2025 by rpki-client