Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer
File: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer (raw, json)
Hash identifier: A4Qocao8bAcM+VpbQFY9I3QqH7QiWs2gB/TJzJMsoc4=
Subject key identifier: B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4F499C2043B4894401443F9F53330BFCFBADB108
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft
caRepository: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 01 Jul 2024 14:41:13 +0000
Certificate not after: Mon 30 Jun 2025 14:46:13 +0000
Subordinate resources: IP: 103.153.34.0/23
IP: 2001:df4:2d80::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:49:9c:20:43:b4:89:44:01:44:3f:9f:53:33:0b:fc:fb:ad:b1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 1 14:41:13 2024 GMT
Not After : Jun 30 14:46:13 2025 GMT
Subject: CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c4:9e:a4:ae:3e:5e:d9:72:61:8d:47:87:f5:
be:c4:39:e9:8d:01:13:f4:65:48:b4:27:10:b8:f5:
f3:00:b2:63:64:55:b1:d3:8b:0f:83:69:23:97:0c:
84:ac:ba:54:bc:8d:1e:ae:84:32:8c:d2:10:43:f2:
ed:2b:bb:5f:d7:24:d9:99:69:99:db:ea:e3:54:48:
1a:84:01:7a:34:47:27:e6:ae:28:a0:29:ee:35:8d:
76:30:3a:c1:53:18:32:a2:b8:29:2a:94:93:e5:32:
22:6b:63:60:c9:22:54:c9:73:87:20:f1:94:62:a6:
80:2c:d4:50:82:3d:66:81:8d:d9:83:76:40:a0:8c:
18:8d:bd:e7:8a:f3:3d:a9:8b:8e:bd:ae:4e:a9:41:
0c:c0:ab:ea:4b:dc:2f:74:22:28:ad:d1:7e:0d:65:
79:64:f0:28:be:65:cc:10:2c:87:69:a9:cb:5d:78:
aa:9e:46:f9:6d:ca:5c:ba:25:ca:da:27:d0:07:62:
cd:e3:c6:46:ea:c6:fc:b8:7a:65:1f:85:cc:60:c1:
30:73:06:47:26:ac:68:19:c9:cc:77:c0:87:b7:43:
94:28:4a:0a:d4:e6:c2:1f:e3:a1:45:50:2a:50:95:
bc:e8:18:f6:22:f2:1d:64:92:0e:c7:b8:8d:dc:25:
94:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.153.34.0/23
IPv6:
2001:df4:2d80::/48
Signature Algorithm: sha256WithRSAEncryption
8e:77:4a:c2:ae:e8:23:8d:b7:a8:0d:e3:02:4d:19:95:5e:8c:
21:19:b6:51:fa:dd:df:58:39:4f:81:35:e3:99:5d:63:7d:5e:
c9:02:1a:0c:bb:3f:d5:08:c4:93:be:9d:a0:a4:4f:e2:2e:95:
9a:c1:4a:0a:27:5a:38:32:89:68:6c:77:44:bb:3d:47:b3:91:
31:09:68:f4:d1:82:9f:26:c4:c1:63:23:92:6a:2a:32:80:8a:
d4:3d:0a:b1:b9:cd:0e:06:24:b7:92:0f:52:23:43:86:6b:6e:
c1:59:c3:ff:14:23:07:60:fb:41:1d:be:f6:58:2c:a3:4e:6a:
72:64:0a:bb:33:dd:ac:4c:94:3d:64:2d:a9:3a:58:3d:f1:03:
58:1c:b7:8b:27:ba:6f:34:54:36:97:df:32:47:2f:8f:d5:8c:
59:d0:bb:8c:40:22:c8:d2:d6:86:97:17:4e:ee:07:12:1b:a2:
cb:83:64:88:79:9c:a9:66:06:c7:2f:8b:cb:15:0e:ad:51:8d:
ce:77:e0:b8:02:c0:24:2d:95:7a:f7:e4:f9:13:6b:dc:a7:e8:
49:d0:b9:6b:2e:27:07:1f:bd:ff:9f:3a:3c:67:e8:e9:a1:2f:
10:22:42:2f:2a:33:11:67:c0:08:e3:d1:03:be:78:f9:d1:cb:
c0:5a:4b:e5
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUT0mcIEO0iUQBRD+fUzML/PutsQgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE0NDExM1oX
DTI1MDYzMDE0NDYxM1owMzExMC8GA1UEAxMoQjU5MTA1OUI2QUYyRjVENjZFQkJE
MTQwMzFEQTIzRTVBQUZDNjRGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANPEnqSuPl7ZcmGNR4f1vsQ56Y0BE/RlSLQnELj18wCyY2RVsdOLD4NpI5cM
hKy6VLyNHq6EMozSEEPy7Su7X9ck2Zlpmdvq41RIGoQBejRHJ+auKKAp7jWNdjA6
wVMYMqK4KSqUk+UyImtjYMkiVMlzhyDxlGKmgCzUUII9ZoGN2YN2QKCMGI2954rz
PamLjr2uTqlBDMCr6kvcL3QiKK3Rfg1leWTwKL5lzBAsh2mpy114qp5G+W3KXLol
yton0AdizePGRurG/Lh6ZR+FzGDBMHMGRyasaBnJzHfAh7dDlChKCtTmwh/joUVQ
KlCVvOgY9iLyHWSSDse4jdwllF8CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFLWRBZtq8vXWbrvRQDHaI+Wq/GT3MB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9iZGM0MWMxYS1lMDg4LTRlZjYtOWQyOC04MTRjNjE0NTZkMzAvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkYzQxYzFh
LWUwODgtNGVmNi05ZDI4LTgxNGM2MTQ1NmQzMC8wL0I1OTEwNTlCNkFGMkY1RDY2
RUJCRDE0MDMxREEyM0U1QUFGQzY0RjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD
BAFnmSIwDwQCAAIwCQMHACABDfQtgDANBgkqhkiG9w0BAQsFAAOCAQEAjndKwq7o
I423qA3jAk0ZlV6MIRm2Ufrd31g5T4E145ldY31eyQIaDLs/1QjEk76doKRP4i6V
msFKCidaODKJaGx3RLs9R7ORMQlo9NGCnybEwWMjkmoqMoCK1D0KsbnNDgYkt5IP
UiNDhmtuwVnD/xQjB2D7QR2+9lgso05qcmQKuzPdrEyUPWQtqTpYPfEDWBy3iye6
bzRUNpffMkcvj9WMWdC7jEAiyNLWhpcXTu4HEhuiy4NkiHmcqWYGxy+LyxUOrVGN
znfguALAJC2Vevfk+RNr3KfoSdC5ay4nBx+9/586PGfo6aEvECJCLyozEWfACOPR
A754+dHLwFpL5Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 13:03:46 2025 by rpki-client