Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer
File: F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer (raw, json)
Hash identifier: p5iByDmaTKjzZohiDoEx91vJJTDDJz7sL7owrJsgPnU=
Subject key identifier: F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 40CD73D820B211F847FDAC2BA7ECDE8BF027EC1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft
caRepository: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 31 Oct 2024 17:08:36 +0000
Certificate not after: Thu 30 Oct 2025 17:13:36 +0000
Subordinate resources: IP: 103.161.130.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:cd:73:d8:20:b2:11:f8:47:fd:ac:2b:a7:ec:de:8b:f0:27:ec:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Oct 31 17:08:36 2024 GMT
Not After : Oct 30 17:13:36 2025 GMT
Subject: CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6f:7d:54:55:ac:e6:1b:8d:e4:5c:d9:ac:d9:
17:d6:82:a1:24:94:8c:a2:03:4d:d0:39:79:8f:56:
55:ce:77:17:ed:fc:1f:7c:1b:1c:9f:ca:a6:07:0e:
de:f5:5e:14:45:7a:6c:f0:5a:d5:2a:7b:e1:14:a9:
57:fa:21:fd:0b:70:97:30:ef:9f:97:33:1f:98:50:
89:74:87:9b:7a:eb:47:a5:96:76:36:78:d6:00:e8:
93:68:43:dc:0e:d0:d9:c7:8a:6e:e4:fa:f1:29:86:
23:c1:7f:8f:8a:84:b1:f6:18:8c:81:6c:cc:9a:f2:
9d:d1:2f:db:36:6e:1f:f6:cb:d5:85:ad:7c:bc:3a:
cd:be:11:21:f8:7e:03:fa:b6:fd:d3:aa:a5:9c:bb:
15:1a:17:74:f5:39:58:62:12:f3:6c:99:eb:d0:33:
d9:01:9c:d1:b1:79:d7:9a:4e:5f:bf:37:e0:38:98:
b2:b2:f4:2e:fe:0c:71:16:0f:a1:54:54:ea:72:c4:
36:b1:22:7c:87:8f:e8:a5:17:9a:31:76:dd:b8:b7:
a4:61:6d:b3:c9:12:5c:f6:28:60:1c:97:f2:c1:48:
65:b6:c3:06:4a:52:cf:91:5f:66:f3:60:14:d2:86:
27:ae:3b:94:80:8f:72:8a:b4:bc:e0:d8:47:81:2e:
df:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.161.130.0/23
Signature Algorithm: sha256WithRSAEncryption
92:0a:fb:33:96:4f:df:94:46:91:42:e2:9c:55:8b:8f:73:3a:
75:89:ce:22:76:9f:b7:86:9b:ec:dc:87:80:9f:b6:b5:7b:e9:
ff:b5:77:0d:8a:4b:9a:ec:37:2c:2c:8f:a3:15:9c:c1:98:bf:
a7:2d:ac:d0:bb:63:a8:e7:36:3e:2e:b4:1f:45:18:59:5d:6d:
f6:85:47:b2:61:c6:6a:80:74:3e:ed:99:b3:33:02:a9:19:a3:
00:60:a4:0f:8d:df:c3:9c:d3:76:41:25:4b:3a:03:89:ce:90:
78:d4:f5:f2:2b:6c:90:74:4a:4c:de:d8:04:b7:7f:0f:ad:2e:
3c:f0:90:14:0e:06:c0:3a:ed:39:11:8c:50:2e:cc:26:ff:03:
f4:9e:92:6b:d9:55:43:e5:05:1c:c3:26:78:38:7f:8c:d2:1a:
f7:d0:b2:aa:bd:4c:94:a7:ae:7f:3b:92:c4:52:2d:37:7d:7f:
8c:c8:e3:44:bd:0a:4d:e0:22:42:a1:d9:6d:cb:29:51:c3:52:
5c:84:4f:75:27:70:65:d0:ad:db:be:40:36:31:d8:02:1f:0e:
b1:76:35:56:a4:7e:cb:77:fd:51:73:3b:e5:27:9a:14:f6:e5:
83:48:56:7e:5d:6f:ea:68:f4:fa:4f:9f:5f:2d:f3:d0:83:69:
7d:b2:70:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:15:18 2025 by rpki-client