Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer
File: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer (raw, json)
Hash identifier: ISjZswnOsvkLk8/YRCQM6DqzWnZOXdlpO7PAkKLPYn8=
Subject key identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 1314B94002CA139B7D134E1936CDCD810B7F99A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft
caRepository: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 24 Apr 2024 10:47:51 +0000
Certificate not after: Wed 23 Apr 2025 10:52:51 +0000
Subordinate resources: IP: 61.29.252.0/23
IP: 103.130.198.0/23
IP: 117.103.116.0/24
IP: 160.20.222.0/24
IP: 2407:14c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:14:b9:40:02:ca:13:9b:7d:13:4e:19:36:cd:cd:81:0b:7f:99:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 24 10:47:51 2024 GMT
Not After : Apr 23 10:52:51 2025 GMT
Subject: CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:7c:05:4b:9c:56:b1:d0:04:b6:63:90:c0:
24:ea:42:22:cf:2d:83:91:72:38:6b:c6:18:a9:6a:
02:dc:d8:07:f4:b4:be:a6:f7:32:14:7b:fe:e8:d0:
29:09:7d:b4:b2:85:9b:c8:09:96:4f:9b:44:e1:aa:
4b:18:c4:ec:be:93:4e:01:0a:47:30:9f:73:28:61:
a1:db:05:32:d5:cf:9c:46:63:c8:8c:30:c2:7e:61:
6d:1b:d3:2f:a0:53:d5:b6:e3:df:5f:45:0e:c4:ae:
d1:aa:f2:b2:9d:b4:06:cb:b2:50:99:ae:a8:aa:e1:
1c:2b:42:92:7e:d6:8f:11:38:8e:58:15:03:d2:d7:
30:fd:f5:2e:ef:5d:cc:d4:54:ed:fe:75:17:e0:20:
bd:83:05:ec:b4:d2:41:31:ab:6c:45:d6:9c:e8:0e:
15:8b:e0:70:bd:40:44:6d:f4:05:e8:36:11:1e:d5:
12:3b:69:eb:e9:5a:75:8c:b1:66:ec:b9:77:b8:35:
c1:01:be:f3:7c:0f:f3:a4:42:b0:32:e2:7d:10:9d:
8c:c5:f2:3d:e2:05:dc:35:8d:cf:57:7a:27:ca:b4:
81:7f:62:b9:9d:38:be:8e:4d:f9:f5:1d:8c:85:e6:
75:92:36:3a:5e:53:43:35:94:25:ad:be:99:c1:05:
e3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.29.252.0/23
103.130.198.0/23
117.103.116.0/24
160.20.222.0/24
IPv6:
2407:14c0::/32
Signature Algorithm: sha256WithRSAEncryption
00:29:ed:96:b4:69:05:4a:a7:13:c6:05:b4:c3:95:69:7c:c5:
a4:d1:f7:90:fb:51:58:2a:08:1f:f0:58:92:7b:f7:04:d8:4e:
5f:90:eb:ae:71:f0:70:8f:5b:df:5e:12:3b:a6:2f:ef:fc:60:
c3:97:8c:e1:1d:de:dd:b9:0b:92:b1:6e:fd:a9:03:95:33:36:
0b:f8:e4:48:4b:c3:e6:c9:83:fe:d5:a0:a5:e4:be:c4:18:cf:
21:e8:d2:37:96:52:ba:a0:87:22:db:e6:06:a5:12:7f:31:20:
6b:77:fd:e1:4d:29:5c:dc:61:b1:14:cb:9a:f0:aa:f2:6e:77:
3d:2b:9e:ae:a6:a1:54:b2:89:f4:94:be:b1:11:29:d2:44:21:
7f:e2:13:13:59:17:32:df:1d:54:e4:cf:7f:b2:33:78:12:4f:
d7:0b:94:24:f8:e9:28:79:e2:d9:fb:b2:da:ed:9b:a0:47:f8:
26:6f:40:d6:de:25:d5:49:7f:e1:57:23:1f:ae:aa:1f:05:b5:
ef:b0:c2:da:00:5f:2e:03:7b:b3:5c:31:aa:5c:bf:45:7a:e0:
b4:d4:b6:e7:61:b7:93:67:6e:5a:89:dc:e9:1c:5f:c7:ef:f1:
c3:28:59:ae:28:5d:0b:27:62:79:ff:c8:31:c7:8b:30:e9:05:
b0:91:f1:4e
-----BEGIN CERTIFICATE-----
MIIF5jCCBM6gAwIBAgIUExS5QALKE5t9E04ZNs3NgQt/macwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQyNDEwNDc1MVoX
DTI1MDQyMzEwNTI1MVowMzExMC8GA1UEAxMoQjg3N0NEMUM1NDJDM0RFMkNCQjhF
RjE1MUYxNzlCODU3RTkzNzZFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALW7fAVLnFax0AS2Y5DAJOpCIs8tg5FyOGvGGKlqAtzYB/S0vqb3MhR7/ujQ
KQl9tLKFm8gJlk+bROGqSxjE7L6TTgEKRzCfcyhhodsFMtXPnEZjyIwwwn5hbRvT
L6BT1bbj319FDsSu0arysp20BsuyUJmuqKrhHCtCkn7WjxE4jlgVA9LXMP31Lu9d
zNRU7f51F+AgvYMF7LTSQTGrbEXWnOgOFYvgcL1ARG30Beg2ER7VEjtp6+ladYyx
Zuy5d7g1wQG+83wP86RCsDLifRCdjMXyPeIF3DWNz1d6J8q0gX9iuZ04vo5N+fUd
jIXmdZI2Ol5TQzWUJa2+mcEF4w8CAwEAAaOCAtkwggLVMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFLh3zRxULD3iy7jvFR8Xm4V+k3bkMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9hZjZkMTg1ZS1kNGY0LTQ4MjAtYjRiNi03OThjMzA3YWQ3ZTUvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FmNmQxODVl
LWQ0ZjQtNDgyMC1iNGI2LTc5OGMzMDdhZDdlNS8wL0I4NzdDRDFDNTQyQzNERTJD
QkI4RUYxNTFGMTc5Qjg1N0U5Mzc2RTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgD
BAE9HfwDBAFngsYDBAB1Z3QDBACgFN4wDQQCAAIwBwMFACQHFMAwDQYJKoZIhvcN
AQELBQADggEBAAAp7Za0aQVKpxPGBbTDlWl8xaTR95D7UVgqCB/wWJJ79wTYTl+Q
665x8HCPW99eEjumL+/8YMOXjOEd3t25C5Kxbv2pA5UzNgv45EhLw+bJg/7VoKXk
vsQYzyHo0jeWUrqghyLb5galEn8xIGt3/eFNKVzcYbEUy5rwqvJudz0rnq6moVSy
ifSUvrERKdJEIX/iExNZFzLfHVTkz3+yM3gST9cLlCT46Sh54tn7strtm6BH+CZv
QNbeJdVJf+FXIx+uqh8Fte+wwtoAXy4De7NcMapcv0V64LTUtudht5NnblqJ3Okc
X8fv8cMoWa4oXQsnYnn/yDHHizDpBbCR8U4=
-----END CERTIFICATE-----
Generated at Thu Apr 24 12:57:53 2025 by rpki-client