Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer
File: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer (raw, json)
Hash identifier: 59SqgbHMuDzshiT7NWD1J2g5w7QJshXKFuELga2Md8w=
Subject key identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 750D9BC61A3D559A40847649C7618156CB2A7551
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft
caRepository: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 26 Jul 2024 00:13:23 +0000
Certificate not after: Fri 25 Jul 2025 00:18:23 +0000
Subordinate resources: IP: 103.211.4.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:0d:9b:c6:1a:3d:55:9a:40:84:76:49:c7:61:81:56:cb:2a:75:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 26 00:13:23 2024 GMT
Not After : Jul 25 00:18:23 2025 GMT
Subject: CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a7:aa:26:a3:5e:ff:ec:6a:91:41:7a:b9:aa:
4e:3f:9d:70:63:9a:ea:1c:11:c1:ce:0e:51:c9:89:
a3:ee:a7:7e:27:88:a3:b5:eb:cc:e4:e0:e1:f6:53:
69:e7:80:7d:3f:72:37:7a:10:7f:17:e8:3f:78:67:
33:91:d8:f5:0f:57:2c:ed:8b:d8:44:72:99:ea:6e:
88:16:3b:23:d8:ee:0a:61:fa:74:a3:8f:bd:21:15:
f8:df:db:18:59:19:cd:d9:68:4c:a2:9f:d5:04:fb:
ea:d7:dc:61:86:18:a7:70:97:04:62:ff:d2:9a:04:
54:32:d4:b3:03:04:80:9d:f4:af:e9:ec:9e:d2:ed:
2f:fc:8f:6d:18:ad:5d:f8:d6:87:ce:05:da:65:09:
39:0e:9a:ce:6a:bb:de:42:e4:2b:f2:d2:f2:0a:10:
62:0b:46:5b:b2:59:b7:f8:9a:86:5a:86:58:d0:15:
c1:4a:9f:71:77:e2:ef:d8:5b:08:ee:ac:c1:b6:ee:
67:ea:b2:69:d3:46:0f:38:f5:dd:bc:95:80:3b:f9:
02:30:67:0e:c8:65:e9:43:50:cc:05:82:26:ab:29:
82:b2:75:6a:be:3b:cc:d1:83:93:c5:ea:74:28:8a:
92:d6:52:c3:7a:da:21:37:ea:58:b6:1e:d2:a5:d3:
72:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.211.4.0/23
Signature Algorithm: sha256WithRSAEncryption
43:c3:c3:80:c4:84:51:57:60:b4:43:77:58:7d:10:67:ae:32:
ee:ff:e2:66:f0:8f:ae:93:d7:76:72:4f:e0:4d:08:9a:31:5f:
47:4a:45:ad:70:7f:7a:ee:45:60:4c:54:7b:72:aa:fd:b7:d8:
f8:69:90:8e:fe:7b:d1:80:57:ed:00:fc:a2:5d:b5:44:c2:8a:
16:7b:57:84:cb:51:98:ac:23:7c:c7:b6:6d:91:9c:9a:1d:87:
ab:f1:23:b6:48:eb:d7:85:e6:7d:02:05:3e:3c:2f:4d:03:1a:
27:90:b7:5d:47:c6:1a:80:52:97:89:06:c8:e5:62:2c:60:51:
dd:63:32:81:ba:e9:cb:22:c9:3a:55:3d:1d:55:21:2d:43:88:
6d:63:ff:5d:30:11:2d:aa:68:35:52:6f:c2:39:9f:47:6a:aa:
24:3a:2c:af:e9:e9:65:b8:98:91:7e:e0:fb:2a:ef:6b:5a:73:
5b:f7:bc:39:6b:d5:a3:0c:d8:51:09:0d:15:65:d3:3d:26:1c:
67:c5:88:e7:ab:c0:1c:b7:73:13:d3:35:23:9b:14:e0:a0:de:
8b:02:dc:d1:d3:51:7a:d0:8d:7d:bd:08:73:26:91:4f:da:2a:
1e:e4:3b:e3:d8:08:30:2e:88:3b:89:c9:0a:f0:35:8a:b5:6e:
68:e4:d1:82
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUdQ2bxho9VZpAhHZJx2GBVssqdVEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcyNjAwMTMyM1oX
DTI1MDcyNTAwMTgyM1owMzExMC8GA1UEAxMoRDA0M0MyQTJCMzk1RTZBN0JDOEEz
MkYxQUU2QzE5MzRCMDIzNUZBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALunqiajXv/sapFBermqTj+dcGOa6hwRwc4OUcmJo+6nfieIo7XrzOTg4fZT
aeeAfT9yN3oQfxfoP3hnM5HY9Q9XLO2L2ERymepuiBY7I9juCmH6dKOPvSEV+N/b
GFkZzdloTKKf1QT76tfcYYYYp3CXBGL/0poEVDLUswMEgJ30r+nsntLtL/yPbRit
XfjWh84F2mUJOQ6azmq73kLkK/LS8goQYgtGW7JZt/iahlqGWNAVwUqfcXfi79hb
CO6swbbuZ+qyadNGDzj13byVgDv5AjBnDshl6UNQzAWCJqspgrJ1ar47zNGDk8Xq
dCiKktZSw3raITfqWLYe0qXTctMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFNBDwqKzleanvIoy8a5sGTSwI1+nMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by8zM2FkMzc1Ny05M2EwLTRiMzMtOTEyOC0yNGFhNjEzMDRlZmYvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzYWQzNzU3
LTkzYTAtNGIzMy05MTI4LTI0YWE2MTMwNGVmZi8wL0QwNDNDMkEyQjM5NUU2QTdC
QzhBMzJGMUFFNkMxOTM0QjAyMzVGQTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAFn0wQwDQYJKoZIhvcNAQELBQADggEBAEPDw4DEhFFXYLRDd1h9EGeuMu7/4mbw
j66T13ZyT+BNCJoxX0dKRa1wf3ruRWBMVHtyqv232PhpkI7+e9GAV+0A/KJdtUTC
ihZ7V4TLUZisI3zHtm2RnJodh6vxI7ZI69eF5n0CBT48L00DGieQt11HxhqAUpeJ
BsjlYixgUd1jMoG66csiyTpVPR1VIS1DiG1j/10wES2qaDVSb8I5n0dqqiQ6LK/p
6WW4mJF+4Psq72tac1v3vDlr1aMM2FEJDRVl0z0mHGfFiOerwBy3cxPTNSObFOCg
3osC3NHTUXrQjX29CHMmkU/aKh7kO+PYCDAuiDuJyQrwNYq1bmjk0YI=
-----END CERTIFICATE-----
Generated at Thu Apr 24 13:26:22 2025 by rpki-client