Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer
File: D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer (raw, json)
Hash identifier: j0AIPts6gv8w8/2RiMyLR42gAeSgXZxZlz7/iowmUfM=
Subject key identifier: D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0D826421986F8540CE464A9FFA6184FB7A7BE651
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft
caRepository: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 01 Jul 2024 19:47:04 +0000
Certificate not after: Mon 30 Jun 2025 19:52:04 +0000
Subordinate resources: IP: 103.219.248.0/22
IP: 103.235.72.0/22
IP: 2001:df2:5a00::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:82:64:21:98:6f:85:40:ce:46:4a:9f:fa:61:84:fb:7a:7b:e6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 1 19:47:04 2024 GMT
Not After : Jun 30 19:52:04 2025 GMT
Subject: CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:8d:fc:2b:74:d6:cf:97:de:42:c3:da:99:
10:c3:9f:ba:54:a8:18:54:93:68:e9:1f:62:79:68:
1e:62:88:22:99:b9:22:6d:5c:a9:75:de:53:9e:a8:
41:57:68:ac:cf:40:90:23:21:db:30:a4:3f:2f:66:
d1:fa:87:6d:40:00:68:99:7b:b9:60:7e:82:ed:25:
f7:ce:ec:56:ad:3e:db:6c:26:93:cb:39:35:4c:80:
2b:5e:35:34:0c:d1:a3:31:93:6c:29:93:b3:17:00:
ed:03:1e:5e:e7:d2:72:6f:f7:3b:8a:2e:b3:0e:28:
4e:89:e2:58:66:94:62:3a:05:08:6c:af:70:44:36:
34:b0:3e:48:0d:6e:39:7b:17:77:6d:c5:22:ca:45:
68:fe:01:7a:dc:46:36:c5:a7:eb:7e:24:6f:e8:de:
06:15:6c:24:04:64:7f:50:8f:1c:09:5c:dd:5d:f3:
4a:70:b7:c7:32:6f:ed:8e:bb:85:e7:16:d4:1b:87:
16:2e:5d:69:b3:4b:ea:88:e2:3d:46:68:fb:a9:52:
f5:dd:e3:68:33:29:2f:af:f3:15:c6:ff:46:68:f6:
b6:64:9e:f0:b3:a9:8c:cb:84:2b:6b:14:48:df:3e:
50:66:07:64:30:ef:3a:47:7e:78:96:16:53:3f:25:
88:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.219.248.0/22
103.235.72.0/22
IPv6:
2001:df2:5a00::/48
Signature Algorithm: sha256WithRSAEncryption
7c:32:2a:04:68:57:09:0f:c6:ac:ac:4f:30:b2:74:30:d4:38:
70:7d:34:cb:37:fb:f0:5a:91:6a:1d:dd:60:14:b2:c0:4b:d1:
38:75:15:97:25:d3:b2:1f:75:33:b9:12:ca:60:73:af:19:9b:
ff:1a:a7:1d:bd:cc:44:12:c4:b6:fe:3c:18:96:43:a8:86:18:
b3:93:e6:72:b8:03:e3:d2:ca:c0:b0:75:73:18:4f:0b:4e:a3:
f5:7a:79:da:ee:51:6c:20:68:8c:63:fa:e3:70:a9:dd:5f:c1:
74:fc:c9:10:9e:cb:4d:a2:6d:9a:79:32:f7:c6:71:78:01:6a:
26:b2:b7:09:2f:c3:74:c2:2e:3b:71:73:97:c3:b7:16:72:2d:
99:64:e1:8c:1d:2d:f0:a2:a7:d2:18:4c:cb:ac:58:98:ba:78:
d4:06:69:67:03:9d:a5:85:50:d3:3e:01:b0:94:b6:15:e2:ab:
1c:a5:4f:56:ce:7e:ef:3b:8d:01:82:4b:e0:94:de:f1:19:a1:
c9:17:48:48:75:49:0b:c0:97:ae:53:b8:53:1b:fe:a3:cf:c1:
57:28:30:5f:e6:0f:0f:ff:f1:c4:2e:df:cc:4c:44:41:6a:1b:
50:ef:ee:02:67:a7:d6:c2:9d:e2:eb:38:2d:b8:b9:5e:66:df:
52:c0:d4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:28:03 2025 by rpki-client