Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer
File: 3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer (raw, json)
Hash identifier: Cn5HfjLoUnaYrrN2C4cRoqBHSD7wZAIGZfzruo0nfrM=
Subject key identifier: 3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5F2B732448781F8F1FE83E2845BA5053460EACEA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft
caRepository: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 17 Apr 2026 11:43:16 +0000
Certificate not after: Fri 16 Apr 2027 11:48:16 +0000
Subordinate resources: IP: 103.227.186.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:2b:73:24:48:78:1f:8f:1f:e8:3e:28:45:ba:50:53:46:0e:ac:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 17 11:43:16 2026 GMT
Not After : Apr 16 11:48:16 2027 GMT
Subject: CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:33:30:44:54:73:3b:4e:48:53:0b:3b:00:70:
dd:f8:a1:91:53:d3:d4:9b:5c:b4:f3:00:e1:c3:47:
79:0a:32:69:61:4d:ba:1d:d1:45:18:43:31:ad:af:
29:13:9d:96:9b:de:7f:b9:f6:de:ad:9c:e1:19:6e:
30:21:4c:14:f8:2d:eb:c6:5a:9a:8d:7f:3d:2f:b8:
a9:19:c6:b1:c9:9c:6e:05:25:55:b1:fc:a1:b6:6e:
1b:96:fd:79:92:42:91:67:82:8d:22:63:22:a9:3b:
45:1e:e8:d8:4d:17:e5:f1:5e:68:07:35:09:bf:39:
ae:b6:fd:56:6a:dc:6e:96:63:ed:43:79:e5:96:de:
c7:f8:02:3e:ff:79:5c:11:3e:ff:a3:02:5c:6a:25:
6a:6a:02:19:7c:b8:a5:f4:c0:96:ef:e0:19:22:61:
66:8a:d8:0c:32:a4:67:61:39:19:55:9d:5e:fa:43:
91:11:c9:d9:ce:9c:24:af:61:22:94:8a:9c:7a:98:
ea:6c:e0:76:45:b0:ad:ae:16:c8:3f:a2:53:8a:5d:
93:7d:dd:32:93:30:a6:92:46:27:06:1d:d3:fc:f0:
7d:7a:4f:1c:09:97:1e:9c:e3:c2:d3:2c:86:85:ce:
b1:c3:f0:69:2c:27:cb:e9:6c:7c:9c:5b:a2:93:9a:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.227.186.0/23
Signature Algorithm: sha256WithRSAEncryption
29:ad:49:5c:dd:84:d1:12:3c:4d:7f:4c:60:61:90:10:28:eb:
70:8e:fc:99:7b:cb:57:ad:25:63:54:16:60:fa:cf:13:1c:e2:
11:0d:fa:c2:c3:36:59:38:30:be:e2:f3:5a:ea:b2:92:18:a9:
03:ad:b4:dd:d0:c3:73:b8:c5:b1:c0:74:37:f0:fe:dd:c5:ad:
dd:0d:0e:58:84:a1:7e:89:60:31:d9:62:d5:4e:10:60:06:d3:
bd:32:a2:fc:2d:de:b7:59:bd:42:90:37:51:2c:e2:3e:5b:b0:
c7:da:b3:4f:e7:eb:5f:09:15:6c:aa:31:b7:f3:b2:7e:a0:f7:
77:af:36:1a:a9:8f:13:c9:00:55:15:3a:c4:29:b3:6f:07:70:
19:f0:af:58:c0:f0:c8:1b:a7:7e:ee:03:68:a1:26:1e:43:32:
c1:c6:ef:b7:00:76:b0:da:4c:25:a2:20:21:65:33:eb:30:05:
ad:0c:88:55:75:d3:de:44:22:ca:4a:d2:88:b1:74:f0:60:df:
a4:1c:46:80:1f:65:8c:ca:3b:af:a8:ed:51:a4:26:6f:7e:74:
83:20:6c:0d:dd:dd:c3:2e:5a:f2:ad:f7:61:55:f0:ca:f3:ee:
3d:ff:07:d0:76:bc:60:2c:ba:37:07:73:97:48:38:1f:a7:94:
c2:e1:38:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:16 2026 by rpki-client