Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer
File: A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer (raw, json)
Hash identifier: +CBwr3p571pVaAJ94cL1yZPzrxK9XKdv3UVGfP9Nbx4=
Subject key identifier: A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 12E25AC6E81853AF8D4DBD2C67DDBF43D102747F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft
caRepository: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 13 Sep 2024 06:12:06 +0000
Certificate not after: Fri 12 Sep 2025 06:17:06 +0000
Subordinate resources: IP: 103.103.136.0/22
IP: 2001:df3:b00::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:e2:5a:c6:e8:18:53:af:8d:4d:bd:2c:67:dd:bf:43:d1:02:74:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Sep 13 06:12:06 2024 GMT
Not After : Sep 12 06:17:06 2025 GMT
Subject: CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:75:a4:89:5b:eb:04:bc:b7:76:73:ee:9c:
8b:1d:a6:15:16:80:a6:73:ce:73:01:eb:97:b5:a9:
4a:a1:be:c8:23:86:0d:f0:a1:8b:a2:15:f3:c0:a0:
81:b0:4e:2c:42:e9:58:d4:97:52:c5:39:38:95:04:
a1:9b:07:e8:87:18:d5:21:c3:1f:1f:09:76:e4:ae:
e0:2c:8e:ac:2f:5c:d6:c5:8b:fb:07:90:75:df:04:
34:ad:3a:4d:80:15:a2:68:3c:ce:7c:2e:06:66:2b:
89:d4:7b:f0:3d:95:e1:e5:75:8e:67:f4:37:87:22:
86:86:e8:79:f2:dd:e3:56:fe:ea:cb:32:d5:a5:50:
49:6f:8b:f4:9a:b3:68:6c:6a:f7:3b:7a:6a:a5:90:
b4:43:b0:2b:d8:9e:72:a4:f0:c6:58:f4:c0:02:62:
93:85:42:99:8a:36:c3:86:62:0c:70:ef:63:19:08:
4b:9e:9c:c2:79:81:6b:f1:31:c1:63:09:95:39:24:
14:da:1e:a5:bc:64:5d:2d:b8:28:93:91:1c:78:22:
d2:99:e2:95:ce:e2:80:12:80:6f:da:7e:f5:84:bc:
0e:02:b7:05:e9:fb:86:f4:16:eb:28:43:02:0f:52:
7a:1f:30:92:16:ce:9d:c1:48:26:56:4c:da:aa:51:
67:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.103.136.0/22
IPv6:
2001:df3:b00::/48
Signature Algorithm: sha256WithRSAEncryption
2e:a0:95:44:10:51:63:c8:10:64:65:f5:68:36:aa:c9:28:f4:
7c:87:79:7e:b2:9a:8d:48:52:ed:38:e3:0c:3a:61:8a:72:7e:
97:04:4f:80:55:9e:7c:53:5a:cc:21:4a:9f:24:33:09:a3:6c:
bc:f2:d0:f1:ee:b8:6d:73:cc:db:15:8d:51:79:48:f3:78:33:
56:fe:43:30:38:3c:38:fc:e7:5f:27:17:0c:80:99:7e:86:32:
d3:aa:4d:5d:be:93:58:48:fd:f3:b2:18:70:0a:48:cc:79:cb:
2d:43:ff:05:de:2a:fa:d9:24:6a:2d:c4:5f:a3:9d:83:ec:61:
e6:50:7e:56:4b:b0:2b:57:44:d5:8f:97:02:1c:5c:13:84:74:
46:57:63:84:6d:71:78:14:75:3b:d6:e7:7a:bd:78:70:6a:22:
d3:16:e8:76:91:9c:90:35:55:cf:c2:1f:fe:fd:58:ca:c4:f9:
ae:2f:02:34:bd:be:09:12:46:3c:4f:9e:15:45:b2:57:43:2a:
e0:2b:d8:9e:ae:44:e0:0c:0a:b4:bb:27:28:c1:20:7e:e8:de:
bc:fb:1a:a7:ec:7a:f0:58:2a:eb:12:00:7d:c6:28:a1:29:36:
32:6e:34:2d:41:85:97:f2:37:b2:97:f1:f7:d8:71:0b:c2:02:
5c:9e:f6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:30:25 2025 by rpki-client