Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer
File: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer (raw, json)
Hash identifier: YhV8dIzPIcfosMN7BroPARcN3TECJPi2SIF8MRlVWLY=
Subject key identifier: DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2008FBF170725669D8FD5DC27EDEB79E8702645D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft
caRepository: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 22 Apr 2024 04:54:08 +0000
Certificate not after: Mon 21 Apr 2025 04:59:08 +0000
Subordinate resources: IP: 103.12.112.0/22
IP: 203.153.212.0/22
IP: 2404:e700::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:08:fb:f1:70:72:56:69:d8:fd:5d:c2:7e:de:b7:9e:87:02:64:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 22 04:54:08 2024 GMT
Not After : Apr 21 04:59:08 2025 GMT
Subject: CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0d:2f:c3:4d:30:c7:9f:40:ba:96:ac:4e:0d:
01:40:af:76:f9:59:19:71:96:98:73:09:7e:86:62:
69:16:99:0b:58:3a:5c:91:5a:e1:f1:5a:ff:fb:2d:
2d:75:76:2b:38:0f:f1:ba:87:60:c3:6e:d7:ff:8f:
25:22:94:8b:b8:04:7f:be:c6:a1:6d:da:84:2d:27:
ae:60:f5:3e:2d:da:80:84:83:9a:a1:12:1b:1d:fa:
23:11:b9:c6:68:3c:00:50:44:dc:49:48:04:1b:cf:
dd:06:89:8a:41:6f:b4:2a:8d:57:a1:7b:3d:06:f1:
63:cd:b4:1c:2d:19:44:d7:15:ea:29:54:53:79:d2:
f5:a0:6d:9e:e1:8c:35:59:68:1c:9d:dc:4e:ac:80:
8c:69:fa:52:42:a4:dd:41:9d:44:79:80:06:e5:b6:
7b:d6:97:ed:45:d5:14:1f:fa:62:0c:09:c5:d3:8b:
d4:3e:e0:24:ff:e2:12:ec:27:15:8b:91:b5:b9:57:
79:33:45:c8:93:dc:d6:20:9d:a9:57:35:a4:d3:b9:
e5:09:d2:86:9e:2d:b4:1c:32:dc:9c:94:09:43:ab:
ea:2e:88:a5:f0:2f:03:da:eb:11:e6:d3:9e:9b:92:
59:57:b0:2e:9f:1d:b8:dc:86:ad:a7:48:2c:80:07:
7e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.12.112.0/22
203.153.212.0/22
IPv6:
2404:e700::/32
Signature Algorithm: sha256WithRSAEncryption
31:d4:61:23:2e:68:7e:e8:fa:e3:8a:ba:69:ca:63:f7:26:26:
b3:96:b1:ff:1d:fa:b5:04:66:7b:0e:d8:50:d0:30:12:2b:42:
6b:f8:04:22:9c:85:0b:48:45:e1:ea:82:ec:f6:a0:25:55:7a:
40:e3:1b:3f:fa:bf:0e:bc:dc:dd:9a:65:de:50:84:4b:1c:87:
ea:9e:1a:0f:c3:26:8b:60:3e:f9:be:18:f4:f0:53:af:14:fa:
7d:fb:7d:ba:9f:78:29:59:d8:a2:01:79:7e:98:74:04:21:c3:
74:1c:77:a3:e4:8e:24:0a:d9:41:27:7a:c3:64:f7:10:b7:6d:
90:d1:12:fd:e9:ca:b0:70:88:39:65:c0:99:81:d5:c0:8d:59:
30:2b:d3:bc:16:f4:a5:e3:16:7a:bd:a6:01:2f:56:29:45:85:
7c:58:8f:ab:2b:c1:a1:44:a2:75:b7:46:3d:24:ed:03:83:07:
6e:83:a1:9d:5b:13:e0:c7:69:ae:c1:61:8d:49:1c:9a:4e:23:
6c:97:fe:72:3c:43:c5:db:8a:ac:47:6f:9d:fc:11:3a:54:89:
6c:2f:3f:86:0b:ad:de:14:cb:e4:4e:95:77:ca:2f:40:d7:9e:
92:e8:85:ca:93:99:c5:7c:a3:19:f2:4e:b7:b3:76:a0:1f:fc:
7a:e9:e6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:17:16 2025 by rpki-client