
Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer
File: C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer (raw, json)
Hash identifier: +Aq2/27lqv/FvBS618tH8b3vJAi6O2pRvBDtVsAyJCo=
Subject key identifier: C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 23144DB495A2B61BCFFCBF65EBB5A9375345AC17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft
caRepository: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 20 Jun 2024 03:28:34 +0000
Certificate not after: Thu 19 Jun 2025 03:33:34 +0000
Subordinate resources: IP: 103.186.192.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:14:4d:b4:95:a2:b6:1b:cf:fc:bf:65:eb:b5:a9:37:53:45:ac:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jun 20 03:28:34 2024 GMT
Not After : Jun 19 03:33:34 2025 GMT
Subject: CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:7f:84:19:1b:0c:43:49:31:35:42:1b:3f:
0b:bc:74:a8:59:3e:c8:bf:52:48:e4:b7:01:43:6f:
41:cc:0d:e8:d2:09:89:95:26:af:7a:0c:75:1e:3b:
cc:01:23:a8:83:5c:41:86:b6:77:a6:b6:1e:f7:53:
9c:e5:d8:9a:83:47:10:ba:01:be:a5:11:2b:70:e8:
e6:9f:74:09:fb:6e:75:37:cb:95:49:e2:03:cc:1f:
2e:83:a8:bd:2a:94:f6:b8:5d:fc:d2:39:89:fc:48:
14:66:ce:36:16:53:a1:9e:f7:e8:e3:b3:03:2c:d9:
42:12:70:c2:2d:c8:20:61:db:bd:74:18:83:78:ae:
31:5f:c5:4d:9b:64:43:66:8f:bf:24:4c:ec:bf:89:
98:19:ed:c7:f4:0e:aa:08:37:7b:32:95:31:1b:cc:
7e:55:58:4a:5a:ae:da:a6:22:fd:2c:08:cb:6b:96:
da:a2:d2:ef:52:13:10:47:6e:54:ef:e9:80:7d:8d:
80:59:e2:a2:12:b5:58:e3:0c:f3:96:6b:ec:6f:a4:
3a:24:6a:f5:28:93:93:d6:06:0f:8b:8b:c3:89:a9:
ff:80:09:2d:b8:db:43:fe:de:81:7b:0a:9b:38:02:
fa:2f:a7:e3:48:f2:58:c2:78:92:a7:2e:12:9c:17:
66:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.192.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1c:33:cb:0b:5a:86:f8:e9:3b:15:db:4c:b3:0b:44:78:fe:
38:dc:68:d9:b0:2d:ff:49:af:10:d7:c4:61:3d:a3:1f:49:82:
82:a6:43:f8:5d:b7:57:a2:f7:6a:45:6d:d1:77:c8:f1:1c:71:
82:6b:43:17:53:9c:ad:81:52:e2:43:29:6f:ee:51:d6:f3:bc:
85:df:b3:bc:bd:cb:00:24:35:3b:ca:49:32:4c:6f:d7:99:24:
3a:22:03:54:3f:b5:90:45:58:28:3e:e1:48:91:ee:ae:e7:6b:
68:82:38:c6:21:30:a4:55:52:c5:4b:e9:e6:04:33:82:3d:b8:
80:6e:e2:3a:d7:eb:cd:98:c9:ed:09:d1:a7:ef:35:ec:09:bd:
00:1e:9f:90:38:a3:47:f6:80:4a:d4:38:7e:bd:5d:9d:25:90:
1f:28:ba:84:2e:a0:56:3e:52:c4:d6:ff:b5:3c:de:99:2a:79:
f3:3e:34:00:1a:de:3a:d2:98:91:6c:01:39:7b:89:dd:8a:46:
47:78:ec:e9:1e:7b:ef:41:69:02:d4:4e:75:04:cd:7b:5b:b4:
bd:94:ce:60:bd:75:73:53:13:a4:ee:03:fa:1a:ea:2c:05:cb:
75:eb:e8:37:5f:85:dd:dd:d7:37:36:30:86:43:8c:9e:31:06:
67:b3:e5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:05:51 2025 by rpki-client