Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer
File: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer (raw, json)
Hash identifier: GGYCEYWVOUCO8JUYR6nUI6mpBIMr38W2wXVCNgVh+j8=
Subject key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 460EBF2115B049FF1435F41896C8E0D688573344
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft
caRepository: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sat 13 Jul 2024 20:56:18 +0000
Certificate not after: Sat 12 Jul 2025 21:01:18 +0000
Subordinate resources: IP: 103.164.172.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:0e:bf:21:15:b0:49:ff:14:35:f4:18:96:c8:e0:d6:88:57:33:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 13 20:56:18 2024 GMT
Not After : Jul 12 21:01:18 2025 GMT
Subject: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:3e:6f:2e:ea:d4:64:4d:06:08:4b:72:d1:
31:fd:53:90:e3:aa:82:24:03:3d:13:ce:61:2c:b1:
1e:94:b0:7f:cf:06:b1:9c:cd:fa:32:0b:50:b0:21:
e4:ca:52:d7:e1:f5:5e:fe:f3:f4:37:34:98:91:a2:
ed:86:85:1b:a9:7a:d3:c7:8f:87:53:80:1d:e1:a3:
e7:6e:8a:04:41:af:28:bd:8c:eb:b2:1a:d6:80:9c:
04:8d:06:ad:40:9b:06:4e:0b:76:4f:bc:48:9b:f2:
ca:3e:1e:b6:7b:61:9d:f0:ed:c0:88:02:4f:11:d1:
92:92:11:10:bd:5a:f8:9a:de:6a:ee:67:ea:dd:39:
a7:79:d4:71:9f:85:13:55:ae:86:9a:fd:7c:57:e6:
51:95:d5:18:f3:d8:b4:7b:f0:71:97:65:f9:56:03:
af:15:be:20:26:6a:93:ef:7d:35:9e:03:ad:f8:c0:
61:11:0d:39:2c:99:d9:b2:10:d5:c4:fd:f2:1e:1e:
5b:f1:81:51:e6:d9:0b:34:e9:8e:9e:6b:fb:d2:0a:
67:f3:be:53:ce:da:b8:72:f5:5c:12:98:21:f4:3b:
21:dd:d6:a6:6d:a5:9f:ee:f8:6e:6a:c5:e8:36:2b:
b1:14:11:92:e2:ca:46:31:aa:03:ef:5f:4b:8a:00:
09:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.164.172.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:ba:06:a9:cc:b3:41:34:a6:00:2d:dd:c1:7a:29:51:74:5a:
0c:e2:d9:54:49:35:54:0c:70:1c:ad:65:da:2f:38:a3:de:9c:
52:44:50:20:3b:da:f3:4c:9e:17:0f:bf:49:f6:d6:3c:7f:05:
a7:68:6b:9c:6f:a7:67:a7:4b:69:67:bd:8c:85:21:24:96:8f:
8a:ed:ec:37:c1:65:6d:59:b5:70:30:b2:51:25:a3:9d:d1:39:
d1:73:ac:14:a5:15:1a:3f:b7:21:2b:62:d4:6e:4a:65:db:13:
43:70:22:13:65:a8:62:64:67:9a:f1:9b:70:00:0b:84:bd:c7:
f7:89:eb:a3:7f:b5:09:0e:43:8a:fb:8b:93:93:ec:b7:31:d1:
15:51:ea:c3:d1:d4:59:33:8e:9d:8c:61:df:36:0f:e9:af:35:
92:57:5b:f1:73:95:ec:25:79:6e:52:05:87:61:3c:02:19:6a:
33:c0:53:55:a2:26:15:ef:2e:f2:73:1e:1c:b8:17:35:ea:04:
40:d2:9e:46:ca:89:1e:7e:cb:7d:ce:9c:81:ce:b7:96:44:21:
26:e1:8e:6b:40:11:0c:14:99:aa:3e:25:9e:f0:e0:74:47:21:
c6:71:78:b9:d5:7a:14:28:63:2c:9d:c7:c8:dc:f2:bd:bb:fc:
8e:7f:64:b4
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIURg6/IRWwSf8UNfQYlsjg1ohXM0QwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcxMzIwNTYxOFoX
DTI1MDcxMjIxMDExOFowMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZB
MzczOTlGMjBERUExOUMyRUYyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK/dPm8u6tRkTQYIS3LRMf1TkOOqgiQDPRPOYSyxHpSwf88GsZzN+jILULAh
5MpS1+H1Xv7z9Dc0mJGi7YaFG6l608ePh1OAHeGj526KBEGvKL2M67Ia1oCcBI0G
rUCbBk4Ldk+8SJvyyj4etnthnfDtwIgCTxHRkpIREL1a+Jreau5n6t05p3nUcZ+F
E1Wuhpr9fFfmUZXVGPPYtHvwcZdl+VYDrxW+ICZqk+99NZ4DrfjAYRENOSyZ2bIQ
1cT98h4eW/GBUebZCzTpjp5r+9IKZ/O+U87auHL1XBKYIfQ7Id3Wpm2ln+74bmrF
6DYrsRQRkuLKRjGqA+9fS4oACXkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFNeFKvBd+7l6zUajc5nyDeoZwu8sMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9hZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlODlmMWI0
LWVmNjMtNDUzOS04NDU1LTk4YzY3MTk5NWNjZi8wL0Q3ODUyQUYwNURGQkI5N0FD
RDQ2QTM3Mzk5RjIwREVBMTlDMkVGMkMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAFnpKwwDQYJKoZIhvcNAQELBQADggEBAHq6BqnMs0E0pgAt3cF6KVF0Wgzi2VRJ
NVQMcBytZdovOKPenFJEUCA72vNMnhcPv0n21jx/Badoa5xvp2enS2lnvYyFISSW
j4rt7DfBZW1ZtXAwslElo53ROdFzrBSlFRo/tyErYtRuSmXbE0NwIhNlqGJkZ5rx
m3AAC4S9x/eJ66N/tQkOQ4r7i5OT7Lcx0RVR6sPR1Fkzjp2MYd82D+mvNZJXW/Fz
lewleW5SBYdhPAIZajPAU1WiJhXvLvJzHhy4FzXqBEDSnkbKiR5+y33OnIHOt5ZE
ISbhjmtAEQwUmao+JZ7w4HRHIcZxeLnVehQoYyydx8jc8r27/I5/ZLQ=
-----END CERTIFICATE-----
Generated at Thu Apr 24 13:10:25 2025 by rpki-client