Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer
File: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer (raw, json)
Hash identifier: aKmOEXydAmct1a4QvYk/dzpLTufZqgLC6YWKllhCMJo=
Subject key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 20ACAC3FAB56CF7D95AE2FF278CB79370E502E9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft
caRepository: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 02 Oct 2024 12:50:04 +0000
Certificate not after: Wed 01 Oct 2025 12:55:04 +0000
Subordinate resources: IP: 103.140.74.0/23
IP: 2404:f9c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ac:ac:3f:ab:56:cf:7d:95:ae:2f:f2:78:cb:79:37:0e:50:2e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Oct 2 12:50:04 2024 GMT
Not After : Oct 1 12:55:04 2025 GMT
Subject: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:e5:77:aa:d0:a8:84:a9:d0:37:bf:12:5f:
ee:ee:fe:9b:15:16:f0:a9:c7:81:2a:79:69:35:ea:
cb:d1:26:ed:9f:f5:ff:af:ee:66:b2:53:42:6a:b7:
50:c1:43:e5:09:dd:90:8e:44:53:fc:86:10:c9:b3:
94:7c:7b:14:f0:ae:d3:6a:94:69:1a:04:de:dd:58:
88:fb:ab:6d:05:a2:30:7c:e1:3c:cb:3f:fc:74:5c:
bf:35:f3:90:d2:05:bc:65:4c:b3:f8:7d:d4:6a:2c:
7b:1a:5e:c8:21:1a:5e:6f:42:18:2f:33:cf:54:28:
77:04:bb:1c:fc:02:7e:44:56:c4:de:43:55:e4:6e:
74:ce:be:92:bd:3a:b8:d3:a1:54:a1:d4:16:40:85:
9d:84:2a:a9:c6:48:66:83:fd:eb:15:2c:66:7d:3d:
91:b9:e0:48:d5:ec:78:9f:46:b2:30:16:4f:4c:ff:
dc:dc:82:30:f1:27:09:f9:76:c2:7d:95:9c:ca:3b:
68:37:06:92:60:c4:9a:ef:7f:1f:3f:8b:8f:fe:98:
13:62:31:9c:70:dc:17:67:33:94:06:6c:74:47:82:
48:95:55:d6:e8:77:23:f1:e5:c3:6a:bc:7c:ff:ad:
3b:b5:07:0a:31:fe:93:54:42:c7:39:f7:42:9a:1b:
15:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.140.74.0/23
IPv6:
2404:f9c0::/32
Signature Algorithm: sha256WithRSAEncryption
4d:e1:80:4e:b9:e1:f6:b0:a7:64:26:a0:58:86:4c:e0:02:3e:
49:67:df:e0:1b:37:56:42:ab:87:f9:be:0a:a7:5e:2e:b1:97:
e5:b2:ce:0c:a9:f4:7f:dd:a2:52:00:e9:4c:54:ae:e6:16:60:
11:42:fb:8b:44:79:7b:97:07:67:d7:1e:0a:75:dc:b9:80:7a:
f4:72:f1:b8:90:91:e8:ef:f8:a1:31:f8:e0:2d:8d:cc:8c:b0:
2f:77:44:3c:ea:04:e3:33:69:13:0f:dc:24:22:3b:3a:89:e6:
20:86:52:ce:f7:62:fe:9d:b0:9c:0b:7b:ec:89:49:e5:e2:de:
96:35:7c:00:0b:30:d8:ba:64:85:77:74:be:23:58:b7:f5:97:
1a:73:8f:15:e2:c5:03:79:d1:ee:94:6c:31:49:cb:25:83:ce:
c7:f5:be:b7:f7:be:37:6f:42:51:5d:96:57:09:4a:6e:58:59:
c3:fc:14:bd:00:73:d2:b8:25:70:56:cf:6e:23:9a:6e:e4:89:
c9:a1:1c:0a:87:9b:45:60:83:a6:0c:3a:75:eb:42:18:c7:b2:
8a:23:c3:be:50:f4:54:49:e9:c0:47:30:ef:3f:c9:a4:e2:05:
fc:9b:a6:92:6c:38:80:da:40:d3:4a:13:ef:c3:b1:5c:2e:d8:
2a:3e:4c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:00:18 2025 by rpki-client