Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer
File: D456F5EAD8D734455DAEF896A9055409FF4A078F.cer (raw, json)
Hash identifier: d4zsx5BqHacxGBgeS0JX4YkQLrr9CWqNp3mo2gx4sD4=
Subject key identifier: D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 382F6D38B7AB1AB578828E71AC794CB0D42AE146
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft
caRepository: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 19 Apr 2024 08:43:00 +0000
Certificate not after: Fri 18 Apr 2025 08:48:00 +0000
Subordinate resources: IP: 103.21.64.0/23
IP: 2001:df2:5d40::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:2f:6d:38:b7:ab:1a:b5:78:82:8e:71:ac:79:4c:b0:d4:2a:e1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 19 08:43:00 2024 GMT
Not After : Apr 18 08:48:00 2025 GMT
Subject: CN=D456F5EAD8D734455DAEF896A9055409FF4A078F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:b9:12:9e:8d:03:46:16:63:c9:ed:46:fb:
b0:30:d9:32:f4:47:ca:f4:c9:a1:23:a3:d4:aa:25:
50:1b:0d:c5:d8:92:4b:00:7d:3b:f7:35:cc:26:86:
a0:fe:ef:47:4a:2d:99:66:c9:3e:2a:12:05:a0:e7:
37:31:dc:c0:73:88:25:b5:7a:c6:c0:d4:44:9f:92:
16:9f:73:fc:07:2e:1d:52:2e:48:23:4f:1b:2e:53:
0d:ea:21:d0:ad:3a:6e:40:dc:41:7d:97:a3:c2:85:
42:31:2f:41:31:ee:6f:56:c7:1b:95:a0:49:6b:16:
3a:64:79:96:f9:c1:d6:8e:b3:b3:cf:e6:95:a0:38:
25:ce:b3:0a:29:cf:88:2c:77:03:61:d9:80:77:63:
3f:bc:32:ae:16:eb:03:c1:ae:5a:47:04:45:20:a2:
98:b5:a7:c5:14:82:7d:0c:02:08:8a:25:2e:d1:13:
28:6c:d0:ef:c3:1c:f3:10:4e:52:b8:eb:f3:72:fa:
e3:58:c1:d4:42:4f:93:d4:bc:5d:e4:78:37:26:57:
af:be:c8:b7:83:3b:79:94:29:bb:ee:a6:d3:70:a6:
57:8e:74:4a:a6:d4:eb:1d:73:17:5c:5c:ed:7b:cc:
0d:46:cd:8b:8f:b4:8c:79:4d:5f:85:e9:db:ca:d7:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.21.64.0/23
IPv6:
2001:df2:5d40::/48
Signature Algorithm: sha256WithRSAEncryption
20:ea:bd:5f:78:36:df:04:a2:4c:be:f6:2e:4c:3c:58:f9:8c:
93:2d:cf:10:2a:4b:ae:cd:0b:61:33:b8:ac:e3:cc:9e:cf:27:
f4:68:72:32:27:3b:8b:2b:f7:a1:6b:ba:e5:4d:e9:d5:ef:05:
36:53:46:94:df:3b:e1:08:15:f8:6f:d3:0b:4f:c9:46:42:ae:
6e:8e:92:42:33:16:d7:ea:7b:05:2e:53:3f:b4:41:20:a9:1c:
25:65:64:95:56:4b:72:55:56:3d:21:5f:ee:e8:46:a6:f7:4b:
c1:49:4c:da:0a:65:4e:81:7c:0b:52:5c:c4:52:38:9e:3d:9a:
ed:a0:b0:57:15:89:b0:e8:7a:e3:ed:ac:82:a4:b9:a8:93:17:
58:f0:5a:27:be:1d:c6:39:c4:8d:aa:87:05:7d:61:00:8d:dc:
63:39:98:0d:5f:84:6d:e9:86:ef:ab:e2:10:8a:65:4e:b6:bf:
cd:85:b0:43:69:74:aa:50:a3:1a:f0:97:15:fa:3f:52:3d:e7:
2d:af:d2:55:81:28:24:c1:b5:5a:be:2a:0d:94:33:c5:52:fa:
c7:f7:12:2d:b1:84:5a:35:6a:52:83:a9:92:2e:40:fa:3b:94:
33:ce:ec:b1:fd:ee:37:03:22:4f:f6:ce:1e:8d:4a:74:e3:ac:
42:c7:03:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:28:06 2025 by rpki-client