Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
File: DD29F5E4CE561760A0212F0448987AFBE75263D7.cer (raw, json)
Hash identifier: BAsfiZxLRJYYMr8OYDyygh1ZuO49vl5udVsyAFn2pRc=
Subject key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 185FC61A2F93F483279A9F81F17068E30383D771
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft
caRepository: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sat 20 Jul 2024 14:32:12 +0000
Certificate not after: Sat 19 Jul 2025 14:37:12 +0000
Subordinate resources: IP: 58.147.184.0/21
IP: 103.42.120.0/22
IP: 2404:9580::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:5f:c6:1a:2f:93:f4:83:27:9a:9f:81:f1:70:68:e3:03:83:d7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 20 14:32:12 2024 GMT
Not After : Jul 19 14:37:12 2025 GMT
Subject: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:4b:10:8b:47:d4:a5:f2:7e:2e:5c:28:5a:
fa:c0:7d:6d:d9:30:2b:ca:24:9b:41:2d:94:c1:4b:
36:58:b9:e5:ea:f3:47:d1:a5:d7:d4:cc:4e:b2:68:
d2:b0:20:e3:31:ad:d7:0a:e6:ca:ac:aa:be:b1:7b:
cc:08:4f:9c:07:ce:f1:41:61:13:03:77:80:21:fb:
15:de:cc:86:ac:e6:43:aa:68:2e:17:1d:48:72:71:
be:01:a5:88:89:0a:57:e3:31:45:c2:97:98:d4:e6:
bb:81:fb:44:77:da:d5:06:63:01:d1:69:76:03:01:
eb:67:8e:3d:28:89:65:48:47:70:a8:5c:89:a7:06:
4e:b6:da:06:d9:69:ab:10:fe:97:02:4f:6f:bd:ed:
02:4f:94:e5:96:cb:c9:14:27:da:1d:39:fc:18:ac:
00:7b:0f:32:a0:f9:af:2a:b8:f8:9b:1e:79:33:59:
80:a2:72:7d:48:aa:ae:31:ac:4e:58:de:3b:28:10:
94:e8:be:14:cc:a5:7a:52:53:9c:10:a4:61:a1:fa:
42:33:b1:28:9c:52:93:06:2c:2b:bd:f8:d0:08:66:
76:5c:7b:6c:81:91:a1:d4:b8:83:21:7c:ee:e1:11:
bd:f3:61:82:26:06:1b:75:cf:6a:7c:16:76:f8:9d:
43:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.147.184.0/21
103.42.120.0/22
IPv6:
2404:9580::/32
Signature Algorithm: sha256WithRSAEncryption
20:a6:d7:14:a8:1c:a4:94:81:98:60:7d:db:50:f6:ed:c0:a1:
d3:84:08:5e:c8:c3:92:f7:cb:28:91:e2:0e:a9:e6:3b:62:19:
84:e0:7a:e9:89:33:a0:ec:2d:53:41:bc:ec:bf:df:db:97:f5:
54:7b:aa:36:2c:ba:8f:b9:c1:f7:e2:4a:06:08:63:fe:54:3c:
b3:3a:81:67:56:4c:b3:a4:d9:6a:ab:18:39:2b:27:8f:2d:2a:
ff:5c:9c:a3:31:37:fb:94:b6:4f:e6:6e:19:2a:5f:62:e3:ae:
27:18:cf:13:8d:a5:23:01:45:09:a9:5f:91:ad:20:ea:e0:c1:
f4:26:cf:80:48:ed:b5:9d:16:b5:78:cd:0b:99:ce:42:ed:30:
91:69:aa:3a:f2:c8:ca:bb:73:c7:3b:5f:cb:52:1e:52:77:85:
df:68:ee:24:5a:75:07:ab:76:cd:20:e0:ef:9d:11:04:20:d2:
77:17:63:9a:d1:90:43:d6:27:e2:53:2f:67:bc:11:ef:24:3a:
99:98:c8:cb:20:c2:e7:ee:11:9b:86:8b:ce:11:8a:63:20:4f:
73:0f:94:85:5e:c7:5d:bc:64:76:9a:c1:d3:0d:17:69:7c:31:
2c:3e:2c:90:10:a5:8b:44:4f:38:e1:57:73:7c:ae:e1:e6:54:
1b:a2:e4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:21:41 2025 by rpki-client