Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer
File: DBF597EA29EF8A70656446AF75CF33F0618E8282.cer (raw, json)
Hash identifier: iuoO913QsfgFDNRLBD6xhakKGlBqnI1aIi7lhWpgwi8=
Subject key identifier: DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2FA92019DCCF57B3C10B31EDE70FBCDEED418169
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft
caRepository: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 02 Jul 2024 03:43:26 +0000
Certificate not after: Tue 01 Jul 2025 03:48:26 +0000
Subordinate resources: IP: 103.242.204.0/22
IP: 117.102.224.0/19
IP: 150.107.132.0/22
IP: 202.6.224.0/20
IP: 2406:6200::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:a9:20:19:dc:cf:57:b3:c1:0b:31:ed:e7:0f:bc:de:ed:41:81:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 2 03:43:26 2024 GMT
Not After : Jul 1 03:48:26 2025 GMT
Subject: CN=DBF597EA29EF8A70656446AF75CF33F0618E8282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:12:35:f0:3b:46:56:d1:8f:0d:f2:9a:47:29:
63:6c:19:92:64:cf:45:12:91:ce:2f:f3:67:40:27:
56:56:f3:a3:74:1a:ec:da:d0:da:6a:8f:a0:f6:3e:
e9:47:99:9b:fb:ae:f1:36:4b:cd:e5:b2:fd:c5:ef:
61:d8:ac:77:21:6f:ac:7f:4c:31:99:43:2e:49:f2:
71:69:8b:9d:98:5d:24:86:3d:01:f5:a7:13:44:79:
1d:12:d2:8b:10:c9:ad:1d:f0:4b:b6:ea:f6:3c:61:
b5:4c:94:88:a2:b8:c9:7f:6b:37:53:f5:57:60:0e:
66:2a:41:f4:76:31:b7:b3:e9:95:47:01:5c:8f:7c:
03:9a:2d:d4:e3:82:75:b9:2b:d4:f2:c5:84:80:ef:
95:38:cb:67:ba:84:99:36:58:94:f9:70:54:3b:c5:
72:c8:61:aa:a8:42:22:ef:c1:25:71:4b:01:5d:4d:
c8:0f:36:a1:6c:43:38:01:7d:21:36:c5:c2:b4:94:
76:e2:d9:3c:81:f3:94:31:ae:11:7b:ca:51:6f:8b:
75:c5:f3:10:41:d3:66:6d:77:0a:40:6c:52:12:4c:
ea:56:78:89:aa:34:20:a5:9d:15:17:0e:48:93:c6:
a2:69:03:86:fa:6a:28:eb:5a:e9:3a:97:7c:d6:cd:
c6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.242.204.0/22
117.102.224.0/19
150.107.132.0/22
202.6.224.0/20
IPv6:
2406:6200::/32
Signature Algorithm: sha256WithRSAEncryption
0d:bb:38:c6:a1:4a:28:83:65:a5:3a:d0:1e:f6:6a:be:ba:e8:
f3:4b:d2:cf:61:67:80:73:b8:26:b9:a7:10:15:9b:5d:73:a7:
44:8a:07:f9:eb:0a:74:9f:a9:15:90:24:1e:9c:42:15:13:cc:
1d:f7:fd:9a:57:1e:20:bc:99:9c:0b:18:4b:1e:94:e3:d3:98:
85:51:9e:77:1a:49:1a:ff:b9:8c:d6:73:7e:15:2f:e1:56:34:
91:78:01:aa:71:71:a4:80:67:e8:61:56:20:41:bb:ae:8d:6b:
2a:d9:35:d0:37:91:21:4a:ff:f0:9e:db:a9:a2:45:b6:62:70:
ef:79:6a:5d:d0:79:5f:1a:36:51:ee:7f:db:eb:5f:0f:ac:60:
a8:79:9b:0d:3a:af:01:a3:de:17:99:36:c6:48:bc:6b:ad:5c:
0e:d7:27:16:77:4b:78:13:b0:36:14:87:2a:0d:ac:4f:a9:6c:
9c:82:32:71:04:78:97:86:13:bc:a7:76:25:08:ab:b3:26:ee:
42:6e:d3:91:1c:bc:b5:9d:32:d6:cc:fa:a2:2b:7e:02:c1:34:
e2:a0:10:aa:55:e7:78:54:df:c4:4d:28:e5:64:2d:bb:6c:a2:
75:51:db:f0:83:99:83:82:42:c4:4d:83:d4:b8:39:71:b1:93:
1f:ae:c1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:26:21 2025 by rpki-client