
Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer
File: FF102371565831DDB9C06DF47DF79B1120C9861E.cer (raw, json)
Hash identifier: 5TuMEP4FiotiVQwkudnfkB+DujOyoeqByBYkJPqVhtQ=
Subject key identifier: FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 376E062F63B5733C50A9744FEEA1D806B970CA7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft
caRepository: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 31 Jul 2024 08:27:16 +0000
Certificate not after: Wed 30 Jul 2025 08:32:16 +0000
Subordinate resources: IP: 103.3.233.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:6e:06:2f:63:b5:73:3c:50:a9:74:4f:ee:a1:d8:06:b9:70:ca:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 31 08:27:16 2024 GMT
Not After : Jul 30 08:32:16 2025 GMT
Subject: CN=FF102371565831DDB9C06DF47DF79B1120C9861E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:6d:d5:81:3f:14:41:f0:16:65:e6:39:c9:
88:85:10:0d:5b:16:9b:22:a7:07:8c:cd:1d:e0:f0:
a2:9e:eb:3c:ba:85:b4:00:87:09:5e:0d:3d:13:2f:
7d:1b:f7:b4:ec:33:38:ec:d3:74:8b:f4:0d:e4:ec:
23:e2:ab:90:a8:63:fd:b8:8e:68:09:05:7a:2b:3c:
db:bd:b3:1b:7b:da:d1:f1:15:7e:9d:15:98:a2:b3:
a7:6e:78:c3:23:e8:ee:5e:ac:eb:4f:7f:07:3d:77:
8f:6e:05:71:e3:df:4c:94:df:ab:99:7e:c8:ed:88:
51:62:48:3c:b8:1c:5f:68:85:31:f4:3c:80:d4:1d:
e1:7f:6d:a4:88:b5:bb:86:17:b9:68:e3:5e:50:f6:
c8:1f:b2:fc:9c:b0:9b:e8:dc:6d:3d:98:76:1a:a6:
00:b8:f5:0d:76:4c:34:64:da:ba:e8:16:f5:ec:75:
45:96:84:c0:03:1c:3e:1e:e4:04:91:11:62:c1:11:
60:76:28:ec:56:24:18:10:cb:00:07:9b:60:a2:d4:
76:3e:1f:e4:b6:37:58:dc:b4:7a:51:2d:e2:cf:49:
9a:d5:e3:13:b9:a5:54:18:78:74:06:9d:ba:08:3e:
b8:f9:2b:ab:d2:b4:e9:6e:e6:48:19:a0:1a:e2:93:
5d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.3.233.0/24
Signature Algorithm: sha256WithRSAEncryption
54:55:ec:31:d9:c6:a7:fd:e2:00:ea:49:9a:5f:12:3f:67:5a:
f4:bd:e0:4a:2d:06:f3:0a:21:4f:9d:97:6f:82:51:d0:fe:93:
7e:b0:14:13:4b:3c:35:92:89:6a:44:71:22:b7:52:9d:0e:32:
ec:9a:eb:ee:d5:8d:bc:60:33:68:4a:6b:d9:4f:8a:f2:7f:62:
94:e5:ba:d0:9b:5e:2b:02:04:22:48:af:ee:d3:f5:73:c9:47:
60:cc:c6:cb:60:90:f5:76:22:6b:fc:b1:f1:3b:e1:ba:ee:cc:
0e:65:2c:38:8f:01:09:7f:f6:c3:90:da:6e:a7:a7:05:ce:14:
7c:36:2d:fc:95:6d:f2:e1:60:f8:04:a4:00:dc:f1:8c:95:63:
8b:a7:2e:98:71:7b:ad:f7:e7:4d:2a:bd:df:6f:a6:d8:02:30:
f1:e6:32:e0:5e:fa:12:5f:77:d4:a2:a7:63:1f:3a:c4:00:b2:
00:eb:6b:9f:3f:37:ef:cc:1c:1e:af:af:b6:af:26:31:68:9b:
dd:39:59:00:f8:d7:7c:10:81:ea:e6:3e:7a:73:9f:70:b5:b9:
07:92:46:5a:33:f7:ac:0c:35:67:3b:73:73:bb:7c:7e:d4:45:
fc:ed:3a:b5:ea:eb:42:a8:56:ee:52:fd:fe:a8:11:78:02:0b:
00:29:28:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:26:16 2025 by rpki-client