Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
File: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer (raw, json)
Hash identifier: rebrnVFkZvwaofpTH1mHaWx89xCX+ZHgONIxrRxAb2E=
Subject key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2ED5BC7A57EA7E6A6B9331255DE25795172C21BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft
caRepository: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sat 05 Oct 2024 17:34:57 +0000
Certificate not after: Sat 04 Oct 2025 17:39:57 +0000
Subordinate resources: IP: 27.111.48.0/20
IP: 103.3.220.0/22
IP: 112.215.0.0/16
IP: 121.52.0.0/17
IP: 202.152.224.0/19
IP: 203.78.112.0/20
IP: 2400:9800::/32
IP: 2407:7600::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d5:bc:7a:57:ea:7e:6a:6b:93:31:25:5d:e2:57:95:17:2c:21:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Oct 5 17:34:57 2024 GMT
Not After : Oct 4 17:39:57 2025 GMT
Subject: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:03:16:68:e6:29:b9:f1:89:54:05:9a:e1:ec:
23:bf:1a:f8:10:60:56:1a:83:1b:14:b3:1c:aa:8a:
9a:4e:b2:19:a1:49:46:fa:c4:28:61:69:18:92:4b:
ee:dc:40:00:75:88:08:7e:62:70:c5:89:3b:b5:39:
6b:f4:1d:60:c4:6d:04:fd:49:76:7f:b7:a4:eb:7c:
46:02:56:61:23:03:39:88:77:3b:f3:99:93:8d:5e:
e2:f1:b1:fb:4f:d3:2e:fd:3a:08:5a:53:06:18:d0:
59:de:85:f6:05:81:86:80:61:97:c0:46:8a:c1:ad:
65:9c:cf:f3:91:4c:81:de:46:67:2c:04:dc:26:9e:
67:35:a1:eb:7e:ac:b0:2f:f9:a5:de:12:12:b8:e1:
a0:7c:3d:3b:83:a7:74:8c:40:61:a0:b0:8a:cd:ed:
38:e2:e4:3e:5a:b1:81:c2:ef:f9:4b:f7:5b:ae:b9:
e6:23:04:bc:bd:39:38:24:30:5c:36:83:42:ac:a1:
a2:c3:a6:1c:5e:ce:32:e6:83:9e:7e:2a:05:54:30:
ec:89:eb:c2:ba:1b:e7:c5:65:bb:4b:1a:22:0b:38:
93:07:4b:42:74:80:d8:dd:8d:27:f0:9d:c9:cd:70:
b6:2e:b9:64:3e:64:18:08:dd:92:76:70:16:93:41:
94:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.111.48.0/20
103.3.220.0/22
112.215.0.0/16
121.52.0.0/17
202.152.224.0/19
203.78.112.0/20
IPv6:
2400:9800::/32
2407:7600::/32
Signature Algorithm: sha256WithRSAEncryption
03:a0:90:e3:77:72:98:bd:4f:37:6d:0c:fb:02:93:8f:32:e3:
83:db:3d:e6:ca:d6:f2:30:bd:76:f4:74:94:41:83:8e:eb:6a:
21:06:b6:58:c4:7c:a0:81:fb:e0:8d:3a:7e:bd:53:c9:00:02:
e6:15:32:47:18:91:29:13:2d:b9:75:4e:32:33:5a:5f:09:8e:
1c:bb:2b:dd:23:42:12:bf:cc:3b:fd:28:6e:e3:5f:54:1d:dd:
68:b5:41:06:ab:6e:f0:e6:42:eb:b9:55:1a:79:11:be:93:6c:
9b:a9:32:21:c7:71:67:b5:86:1f:f7:e4:73:b9:20:fb:72:92:
ac:1a:c7:b5:4b:b0:52:9f:b5:26:48:6b:21:90:3f:42:3c:a3:
e7:5f:35:1a:ad:14:a2:87:07:ca:9c:60:2d:8b:54:9f:d4:d5:
80:51:79:c8:1b:9c:05:b8:2d:fa:59:b8:a0:96:7f:51:06:f8:
a3:62:7b:8c:e4:5a:26:09:2d:fa:df:58:cd:ba:31:7b:cc:00:
d3:2e:95:56:12:4d:24:36:03:56:88:26:f6:67:5a:91:b2:a1:
fe:5e:bd:81:20:15:f7:e8:20:8d:44:91:61:76:6b:69:85:d6:
8b:ef:87:56:ac:2e:52:d1:ad:8c:69:24:9a:a3:52:d0:50:21:
25:85:54:85
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULtW8elfqfmprkzElXeJXlRcsIbswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAwNTE3MzQ1N1oX
DTI1MTAwNDE3Mzk1N1owMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5
QUMyMjExREFGRDIwOTU2ODdEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALIDFmjmKbnxiVQFmuHsI78a+BBgVhqDGxSzHKqKmk6yGaFJRvrEKGFpGJJL
7txAAHWICH5icMWJO7U5a/QdYMRtBP1Jdn+3pOt8RgJWYSMDOYh3O/OZk41e4vGx
+0/TLv06CFpTBhjQWd6F9gWBhoBhl8BGisGtZZzP85FMgd5GZywE3CaeZzWh636s
sC/5pd4SErjhoHw9O4OndIxAYaCwis3tOOLkPlqxgcLv+Uv3W6655iMEvL05OCQw
XDaDQqyhosOmHF7OMuaDnn4qBVQw7Inrwrob58Vlu0saIgs4kwdLQnSA2N2NJ/Cd
yc1wti65ZD5kGAjdknZwFpNBlA0CAwEAAaOCAuswggLnMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFLSTpc6/CeELw12awiEdr9IJVofaMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by80YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBh
LWE0ZWMtNDlkYi1iZTg5LThkN2U3ZmMyYzIyNy8wL0I0OTNBNUNFQkYwOUUxMEJD
MzVEOUFDMjIxMURBRkQyMDk1Njg3REEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwUgYIKwYBBQUHAQcBAf8EQzBBMCkEAgABMCMD
BAQbbzADBAJnA9wDAwBw1wMEB3k0AAMEBcqY4AMEBMtOcDAUBAIAAjAOAwUAJACY
AAMFACQHdgAwDQYJKoZIhvcNAQELBQADggEBAAOgkON3cpi9TzdtDPsCk48y44Pb
PebK1vIwvXb0dJRBg47raiEGtljEfKCB++CNOn69U8kAAuYVMkcYkSkTLbl1TjIz
Wl8Jjhy7K90jQhK/zDv9KG7jX1Qd3Wi1QQarbvDmQuu5VRp5Eb6TbJupMiHHcWe1
hh/35HO5IPtykqwax7VLsFKftSZIayGQP0I8o+dfNRqtFKKHB8qcYC2LVJ/U1YBR
ecgbnAW4LfpZuKCWf1EG+KNie4zkWiYJLfrfWM26MXvMANMulVYSTSQ2A1aIJvZn
WpGyof5evYEgFffoII1EkWF2a2mF1ovvh1asLlLRrYxpJJqjUtBQISWFVIU=
-----END CERTIFICATE-----
Generated at Thu Apr 24 13:03:53 2025 by rpki-client