Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer
File: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer (raw, json)
Hash identifier: JCrmCDkJGqOmbSGDUIVKz9HbW+nL8rEqLGn3UdsESxk=
Subject key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6DAACF712857FCFCEFDCE014203435804662A13E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft
caRepository: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 18 Apr 2024 22:38:54 +0000
Certificate not after: Thu 17 Apr 2025 22:43:54 +0000
Subordinate resources: IP: 202.51.16.0/20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:aa:cf:71:28:57:fc:fc:ef:dc:e0:14:20:34:35:80:46:62:a1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 18 22:38:54 2024 GMT
Not After : Apr 17 22:43:54 2025 GMT
Subject: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:8c:9f:6e:0c:0e:1e:ce:10:c9:e0:c8:3d:
35:12:19:93:f7:39:7d:5e:0c:2f:68:41:02:48:9f:
c9:fe:d1:b8:2e:e7:dc:94:d9:8a:da:7a:b7:7a:34:
0c:41:ad:7b:79:46:59:d0:35:2d:42:6d:9e:78:fe:
0e:d4:17:91:f2:4c:44:59:a3:5f:e7:a7:02:22:e7:
00:17:0e:15:bc:75:2a:1b:a7:a6:5f:c7:74:06:bf:
2b:06:f8:13:a4:15:51:6c:10:55:0f:e4:71:dc:7d:
1f:5e:cc:76:48:56:f3:02:a0:0e:23:31:66:8a:25:
79:4d:d5:9c:0e:4f:5a:29:ee:91:06:b6:dd:59:fb:
99:42:2b:86:a4:70:7d:a3:d5:1e:af:62:ec:69:80:
46:2b:ab:06:6d:38:88:29:cc:7e:2b:a8:95:45:d2:
d3:e1:db:04:57:4b:24:38:e8:c4:1b:9b:b4:5b:d2:
c4:42:13:ee:ea:d5:3c:14:7e:4f:cf:99:d3:ea:5e:
6b:46:ca:94:fc:6f:09:b5:d5:03:c0:98:28:10:61:
f4:f5:88:80:84:a1:53:99:75:ce:b2:89:14:5a:c0:
a9:0b:4d:a7:87:fe:b1:29:bd:71:94:b6:9f:66:c1:
b6:60:e3:26:4c:18:17:53:f7:ea:b2:02:95:d8:bb:
75:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.16.0/20
Signature Algorithm: sha256WithRSAEncryption
0f:a2:28:d4:43:96:ef:62:33:e7:99:f3:1b:40:f9:2b:0e:57:
b3:dd:14:48:87:c4:d5:f3:8e:67:34:51:f7:c6:e9:1d:63:e7:
1c:c0:71:bb:30:a0:58:ef:87:ae:67:2a:4f:17:ef:dd:26:6e:
36:ce:3f:2d:d0:aa:d2:95:5b:1e:74:4d:f1:fd:84:32:51:6a:
39:4e:f6:a6:0b:a3:03:eb:b3:55:c0:36:45:2d:52:2a:fb:da:
d8:91:93:fa:5c:ed:12:0e:20:b0:88:32:ed:99:73:c6:f6:3d:
33:a3:75:ed:02:81:95:f2:b0:7a:5c:f4:ac:f1:5a:12:6b:b9:
46:ff:2a:77:83:b7:0c:ca:4b:cd:09:a0:ee:6b:dd:2a:ec:6f:
c7:fa:6a:e3:2f:af:e4:ed:98:1d:15:b1:b9:d9:85:22:7d:1b:
b4:ec:79:b8:9d:e7:e1:19:bf:b6:3b:c0:22:5d:07:70:3f:e6:
20:57:80:fd:ee:5f:10:b9:f9:4b:9e:14:49:24:c3:43:2d:2b:
30:78:d8:cb:a8:80:4d:ee:3a:01:23:b7:5e:b1:6a:12:63:52:
5c:ce:1e:21:3c:bf:e9:1d:40:88:5d:d6:f6:92:cb:e8:ca:01:
3f:bf:08:01:77:d6:6c:26:e1:3a:a8:f7:53:a2:f8:49:7e:97:
f8:a0:85:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:17:19 2025 by rpki-client