Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer
File: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer (raw, json)
Hash identifier: yS3UP5DElfl5gqOO2LzblcnXShNiInRKKI+Cyz1mrsk=
Subject key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0D6A98EC8B3ADDFC5EA5149C40E967F88DCA146D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft
caRepository: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sat 11 Jan 2025 14:31:51 +0000
Certificate not after: Sat 10 Jan 2026 14:36:51 +0000
Subordinate resources: IP: 103.26.128.0/22
IP: 2401:1340::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:6a:98:ec:8b:3a:dd:fc:5e:a5:14:9c:40:e9:67:f8:8d:ca:14:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 11 14:31:51 2025 GMT
Not After : Jan 10 14:36:51 2026 GMT
Subject: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:bd:ea:99:47:ed:86:f5:47:43:99:8c:a2:
ed:7a:59:ea:6c:a4:1b:dd:22:93:24:af:cd:75:cf:
cb:a9:72:9e:ba:ad:c3:ee:43:33:9f:60:b8:b8:68:
29:29:09:29:f2:ee:24:cd:a5:6a:b6:c9:fd:92:45:
03:23:1d:df:ea:f9:ec:97:78:1d:07:59:24:42:df:
bb:b5:ef:3c:19:ad:a7:46:62:f0:2c:72:ad:3c:cd:
63:f4:d4:6b:b5:c4:07:f9:d2:c0:fd:68:b3:40:f3:
25:6c:29:c1:50:21:66:a4:92:cd:e6:1b:f4:ca:78:
00:d4:73:2b:d0:17:cf:5b:e2:57:2a:18:e3:f6:5e:
1f:94:39:14:03:13:36:e6:1c:e6:70:7e:9e:f0:c3:
fd:49:f1:24:20:55:8e:02:f2:42:0c:32:10:a9:d6:
0a:52:83:0c:d4:93:fe:69:8a:0a:d7:b8:3d:77:ce:
b7:7e:14:36:09:4b:53:82:66:54:52:75:08:f8:fd:
be:17:5c:b6:cc:70:72:4f:8b:3f:8b:ba:ba:43:53:
2f:f8:d1:63:31:ce:b7:bb:a0:28:c0:8d:48:d6:b3:
96:eb:38:8d:d1:9d:4a:e8:bb:37:9f:0b:58:94:1a:
a2:4d:ae:4b:00:f6:09:e7:de:79:5a:af:1c:72:59:
a6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.26.128.0/22
IPv6:
2401:1340::/32
Signature Algorithm: sha256WithRSAEncryption
43:17:50:63:e9:3b:b2:a5:e2:5f:fb:d0:cc:3a:09:a8:11:be:
82:79:9f:33:d6:e1:2c:5d:32:c3:3e:83:02:65:e3:62:8e:83:
c4:15:a0:d8:4a:70:b6:28:14:3d:f6:22:4e:6f:31:cd:a5:a0:
24:68:87:29:cd:5f:40:21:06:a4:f7:ab:ca:84:74:6f:72:72:
33:b4:b0:90:97:e2:ba:83:c4:8a:d1:46:2e:08:0c:3b:35:43:
1d:8b:1e:dc:b0:01:d3:84:fc:51:6b:a7:26:b9:a0:66:36:24:
98:0f:fb:23:a2:5b:a1:b8:6f:c6:7f:74:97:4c:39:08:15:ab:
4d:98:db:f1:58:f2:f5:19:99:00:73:22:ff:0d:9f:7b:10:14:
02:53:48:69:00:2b:50:12:4d:84:d1:9c:a4:83:cb:59:c3:3e:
a7:eb:d1:23:63:21:c4:91:d5:c8:09:d2:33:a1:e6:aa:ef:0f:
2c:90:83:ca:33:ed:f0:35:11:16:0d:e0:52:db:3d:89:6e:9e:
fd:dc:6c:ab:53:e6:fb:63:68:d1:c0:96:8c:80:42:45:89:d2:
8f:81:8c:10:d4:3d:09:17:18:7f:2b:f7:59:80:87:d1:4c:6a:
e8:c6:cb:e0:85:42:f3:3f:76:13:93:8c:df:a9:56:0e:16:98:
0e:7e:e6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:57:48 2025 by rpki-client