Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer
File: D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer (raw, json)
Hash identifier: sIzS7wC0YMlpD/pc3DftKJ77aNmkAHvoS0Ks3AXivg8=
Subject key identifier: D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 3C76FA6815E081A6580068694B67250937DCCFCB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft
caRepository: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 18 Nov 2024 18:01:24 +0000
Certificate not after: Mon 17 Nov 2025 18:06:24 +0000
Subordinate resources: IP: 103.191.200.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:76:fa:68:15:e0:81:a6:58:00:68:69:4b:67:25:09:37:dc:cf:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 18 18:01:24 2024 GMT
Not After : Nov 17 18:06:24 2025 GMT
Subject: CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:21:15:25:84:08:53:d6:47:36:8a:75:47:3e:
12:9a:24:37:1b:83:c8:cc:b6:33:9e:25:ab:ce:cc:
9a:04:d3:c1:96:45:2e:51:18:e6:6a:27:ab:54:32:
00:87:26:a6:50:29:76:66:28:23:30:e6:4d:77:5a:
43:fe:ff:26:26:08:1a:70:32:77:89:29:ee:ab:68:
56:24:c7:00:43:0f:e2:8b:97:c0:c8:02:f5:c1:60:
9b:fc:4a:ac:71:17:ff:5a:fb:4e:d9:d4:30:bc:3d:
21:40:4c:89:53:36:b6:76:56:4d:28:50:df:4e:a2:
44:ca:79:85:94:0f:43:5b:e2:cf:22:25:80:1e:95:
3e:dd:9f:dd:c5:50:c4:40:93:c7:a2:c9:68:8e:70:
c9:87:b9:25:cd:fd:82:0e:ce:6d:ad:67:8d:00:65:
74:61:1c:97:8c:80:1f:21:58:13:e1:62:2d:d6:30:
4a:02:a2:3e:c0:f4:c8:32:77:ec:78:7e:ca:21:6b:
32:2d:d8:c8:01:95:d2:82:f4:02:0a:86:25:4f:6d:
0b:e6:93:93:94:d5:17:fa:58:c0:b6:2d:a4:62:f1:
e2:d4:68:79:2c:cc:c7:31:04:84:05:7f:ce:0c:80:
e1:87:e5:b4:b1:5f:14:03:3c:00:4b:52:19:47:fc:
cf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.200.0/23
Signature Algorithm: sha256WithRSAEncryption
00:12:7d:2f:38:4e:35:4d:1e:53:7a:a8:5b:d2:a2:6b:b8:91:
fa:84:54:95:4c:93:14:42:0a:0a:ad:a5:e0:76:5a:e8:1d:dd:
81:15:f0:53:80:b1:5c:a3:b4:8c:3f:a8:fd:78:59:b3:1d:a7:
ae:6e:dd:64:c7:5f:06:79:47:79:cb:31:0d:b9:54:ce:fd:d1:
a7:62:08:01:e1:41:b6:09:cb:72:2d:c1:77:56:6f:72:7e:c8:
df:7a:a5:a5:e9:e3:37:c7:72:79:fa:c5:7c:a4:66:1f:7a:9d:
11:04:f4:e5:f7:77:c8:8d:5c:65:58:64:78:5e:49:7b:d5:ac:
ee:2c:be:13:5e:79:d0:14:5e:40:70:63:7b:76:a1:67:bf:96:
19:d5:dc:15:ab:3b:6d:48:ef:13:0a:0d:82:3a:4e:90:04:ae:
c8:d6:9a:8a:7f:63:28:a8:f7:17:cd:88:74:39:b8:6f:ee:16:
d4:f2:5f:a9:69:8b:87:9c:0a:78:59:e7:f7:08:5f:1d:32:1b:
79:15:d5:dc:be:b5:b8:9b:d0:50:0c:f4:22:7f:68:7a:10:f5:
9e:38:8d:ca:69:33:8e:b2:59:e9:10:72:08:a4:11:d8:f3:58:
a2:98:1e:a7:c8:6e:52:16:a5:45:52:af:41:78:99:42:22:52:
58:b3:b8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:51:39 2025 by rpki-client